Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231362e302f32312d3231203d3e2035363530.roa
File: 3134372e3132352e3231362e302f32312d3231203d3e2035363530.roa (raw, json)
Hash identifier: wmk3ncAGwLgiz5ppWQMR8PFphqaJJeyXyrPsI6t4nFA=
Subject key identifier: 83:E1:0C:73:4F:BB:FD:EE:12:15:08:3D:6F:A5:09:A1:22:1B:04:C5
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 3AD6CE3FDFE08E985D994CA60D1E5E92D3060B6D
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231362e302f32312d3231203d3e2035363530.roa
Signing time: Fri 10 Oct 2025 11:54:05 +0000
ROA not before: Fri 10 Oct 2025 11:49:05 +0000
ROA not after: Fri 09 Oct 2026 11:54:05 +0000
asID: 5650
IP address blocks: 147.125.216.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:d6:ce:3f:df:e0:8e:98:5d:99:4c:a6:0d:1e:5e:92:d3:06:0b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Oct 10 11:49:05 2025 GMT
Not After : Oct 9 11:54:05 2026 GMT
Subject: CN=83E10C734FBBFDEE1215083D6FA509A1221B04C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:64:5e:67:d3:1f:36:cc:d2:6d:ee:af:c0:c1:
3e:71:39:cc:f0:82:d7:7b:9b:2d:9f:80:a0:eb:03:
c8:59:73:df:cf:40:b1:7e:d9:67:65:05:b6:65:c3:
22:63:f6:5f:d3:7c:a3:fb:ee:a4:56:3e:a6:5c:79:
02:8a:d8:76:aa:af:9f:59:88:da:22:c6:8b:54:44:
c6:d3:a2:50:30:31:f1:6b:a6:4f:d0:8b:d8:17:ee:
44:ab:0e:e3:2e:6e:a7:df:56:9c:2e:cd:c6:a3:c9:
34:86:e1:45:17:47:d9:81:4c:2b:05:65:27:ec:ca:
a1:25:db:1a:8b:34:c2:e9:2e:81:ce:49:3e:ce:5f:
70:07:07:9c:59:b6:24:ce:d0:b9:01:5c:1a:f6:ff:
1b:e2:a3:08:c6:41:41:3c:c9:99:b4:59:e6:17:5a:
dd:b8:53:70:ed:3b:7b:2d:4a:c0:13:43:a0:27:db:
7f:35:67:23:a8:74:c9:a7:21:ef:fd:b2:8e:27:3e:
e5:20:06:7a:47:38:2c:58:0a:df:2a:59:9f:1b:a4:
cf:56:0f:78:88:53:d4:a2:f0:cf:8e:23:f3:1f:fb:
11:7b:d1:f5:a7:04:b0:9c:84:1a:a7:51:97:d6:2d:
d4:6a:0c:54:4a:6c:f0:7d:b8:74:c6:f6:40:14:4a:
02:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E1:0C:73:4F:BB:FD:EE:12:15:08:3D:6F:A5:09:A1:22:1B:04:C5
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231362e302f32312d3231203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.216.0/21
Signature Algorithm: sha256WithRSAEncryption
8a:90:ad:a7:85:db:8c:33:c1:4f:4a:de:02:7c:0c:d9:e7:4e:
3d:5a:2e:41:7b:93:51:e0:22:a0:84:9b:df:3b:4d:2b:c6:9c:
c5:ba:5b:3f:bf:44:b7:fa:22:a4:03:81:15:8a:db:9a:9c:29:
70:f9:c9:ed:1e:05:72:c6:18:a7:8e:9c:db:a5:f6:51:1c:18:
4d:d3:e9:23:e9:4b:68:dd:52:d9:0c:7c:9f:eb:6a:4e:04:09:
b5:62:50:88:85:0e:4f:26:55:f3:58:d8:6a:08:4b:46:a8:71:
e6:ea:b2:18:cd:4a:99:da:13:00:23:d5:d4:0d:62:02:ec:69:
2b:3f:27:9a:eb:53:d5:ff:ee:f2:73:eb:ce:46:c3:f4:66:1c:
ae:ed:54:cc:5e:0e:14:a8:d5:ca:2a:15:7d:c8:51:80:11:49:
60:62:dc:d2:db:27:09:92:e8:3a:72:67:d1:79:d3:5b:89:82:
8e:84:98:d9:19:e7:b4:2d:09:a1:ad:58:41:87:d4:05:22:25:
77:16:de:6f:41:13:6d:91:ae:1f:5d:f1:fc:0e:6b:ed:66:9c:
87:28:9d:10:1c:69:fd:d0:72:a6:e8:f2:c3:9d:e8:62:fe:1f:
3e:50:65:5a:32:b0:69:38:b4:5d:8e:41:92:37:11:35:ac:9f:
e3:32:d9:98
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUOtbOP9/gjphdmUymDR5ektMGC20wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl
YjVhNzZlYTAeFw0yNTEwMTAxMTQ5MDVaFw0yNjEwMDkxMTU0MDVaMDMxMTAvBgNV
BAMTKDgzRTEwQzczNEZCQkZERUUxMjE1MDgzRDZGQTUwOUExMjIxQjA0QzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJZF5n0x82zNJt7q/AwT5xOczw
gtd7my2fgKDrA8hZc9/PQLF+2WdlBbZlwyJj9l/TfKP77qRWPqZceQKK2Haqr59Z
iNoixotURMbTolAwMfFrpk/Qi9gX7kSrDuMubqffVpwuzcajyTSG4UUXR9mBTCsF
ZSfsyqEl2xqLNMLpLoHOST7OX3AHB5xZtiTO0LkBXBr2/xviowjGQUE8yZm0WeYX
Wt24U3DtO3stSsATQ6An2381ZyOodMmnIe/9so4nPuUgBnpHOCxYCt8qWZ8bpM9W
D3iIU9Si8M+OI/Mf+xF70fWnBLCchBqnUZfWLdRqDFRKbPB9uHTG9kAUSgIHAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUg+EMc0+7/e4SFQg9b6UJoSIbBMUwHwYDVR0j
BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy
NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0
YWR1by5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt
YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy
MzEzNjJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDM1MzYzNTMwLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD
k33YMA0GCSqGSIb3DQEBCwUAA4IBAQCKkK2nhduMM8FPSt4CfAzZ5049Wi5Be5NR
4CKghJvfO00rxpzFuls/v0S3+iKkA4EVituanClw+cntHgVyxhinjpzbpfZRHBhN
0+kj6Uto3VLZDHyf62pOBAm1YlCIhQ5PJlXzWNhqCEtGqHHm6rIYzUqZ2hMAI9XU
DWIC7GkrPyea61PV/+7yc+vORsP0Zhyu7VTMXg4UqNXKKhV9yFGAEUlgYtzS2ycJ
kug6cmfRedNbiYKOhJjZGee0LQmhrVhBh9QFIiV3Ft5vQRNtka4fXfH8DmvtZpyH
KJ0QHGn90HKm6PLDnehi/h8+UGVaMrBpOLRdjkGSNxE1rJ/jMtmY
-----END CERTIFICATE-----
Generated at Sun Oct 19 16:10:31 2025 by rpki-client