Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3232342e302f32322d3234203d3e20383334.roa
File: 3134372e3132352e3232342e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: 4q9wY92apDF4pLWeDKEJA6I8JdBD3iVNqhvPg6ExKdY=
Subject key identifier: AA:03:BE:47:8F:7D:87:F1:72:85:04:D8:6D:7D:44:E9:A8:F8:D5:CF
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 70467BA8CF8CFA8A0DA0D1ED753B533A0210B8E5
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3232342e302f32322d3234203d3e20383334.roa
Signing time: Thu 23 Oct 2025 02:33:42 +0000
ROA not before: Thu 23 Oct 2025 02:28:42 +0000
ROA not after: Thu 22 Oct 2026 02:33:42 +0000
asID: 834
IP address blocks: 147.125.224.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 12:21:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:46:7b:a8:cf:8c:fa:8a:0d:a0:d1:ed:75:3b:53:3a:02:10:b8:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Oct 23 02:28:42 2025 GMT
Not After : Oct 22 02:33:42 2026 GMT
Subject: CN=AA03BE478F7D87F1728504D86D7D44E9A8F8D5CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:46:0e:2c:0b:b7:56:be:45:12:ae:c3:15:9a:
97:e5:ab:f5:17:5f:71:32:3f:c2:86:53:5a:a2:79:
4a:49:0f:59:47:3f:70:eb:1c:6c:aa:f3:22:50:c0:
df:46:e4:65:55:75:92:51:2b:e9:bf:c4:e3:0d:49:
b3:e3:a3:43:39:e3:3d:ba:3d:f3:f8:69:a0:85:62:
7a:cf:60:ff:54:c3:75:d4:9f:e6:c3:f3:4b:47:8d:
28:1b:36:30:4f:cb:1c:03:62:d6:7e:90:21:cf:a0:
32:15:63:25:ac:4d:2d:90:73:d6:c9:9d:44:bf:f4:
50:21:7f:23:8f:ad:58:41:e3:b0:e6:7d:91:19:a3:
1e:40:1d:87:66:02:fe:50:99:72:0f:6f:fb:be:c7:
88:11:ae:35:02:80:cc:23:a5:ca:9b:c9:4f:49:b6:
b1:7a:c8:13:39:53:2b:fa:fd:60:55:1f:09:43:8b:
c8:2d:bb:30:3b:eb:71:2e:db:2a:71:3e:32:91:13:
c3:90:ad:22:a4:bc:70:c7:10:1d:e5:5f:8e:13:7e:
cd:78:a6:ef:5b:d6:c1:b3:6d:7a:b4:6d:b1:f4:2a:
bb:a3:c4:8c:d9:fa:11:05:f5:26:7b:f4:db:9b:08:
25:09:5c:c5:fc:d3:ba:ed:d0:9f:1c:bb:18:08:c2:
0f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:03:BE:47:8F:7D:87:F1:72:85:04:D8:6D:7D:44:E9:A8:F8:D5:CF
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3232342e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.224.0/22
Signature Algorithm: sha256WithRSAEncryption
62:54:7f:df:31:ea:41:15:4e:f9:22:3f:1c:d4:9a:3a:8b:4d:
f3:ad:b1:84:f9:ea:43:da:e7:c7:22:07:20:ab:0a:14:ac:2f:
da:88:00:6c:de:36:57:e8:86:2d:ae:04:21:47:87:1c:5f:7b:
c9:91:dd:ce:29:27:d3:5c:aa:27:70:01:be:f8:03:6b:36:13:
a7:c6:54:e3:e9:d9:dc:f8:ca:5b:28:35:9b:65:6f:ab:a1:1c:
5f:54:02:85:a4:4b:fc:dd:60:81:59:89:a2:e5:15:7d:13:b3:
73:13:69:79:dd:aa:28:39:39:9e:84:5d:ab:b1:49:53:ec:97:
1a:34:82:71:33:03:66:a1:4d:63:f9:37:fb:f6:69:4b:d5:32:
d5:5d:75:73:31:2d:be:e5:2e:04:8c:5f:0a:4d:00:a4:f6:03:
25:c5:52:92:75:1a:cc:31:30:ea:ea:a6:e1:e9:60:53:84:08:
12:84:c3:a6:37:60:77:54:1e:1e:72:03:9d:08:69:a8:cc:10:
d0:4e:1b:69:05:d1:5e:5e:ba:12:3b:13:a8:aa:9c:80:53:81:
c8:b8:20:5d:a0:e5:a6:6d:a6:b4:ff:01:b7:90:c1:5e:90:2b:
c7:e2:75:de:2b:a6:21:ba:6d:35:8d:af:b9:42:a6:3d:c7:2c:
a8:42:7a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 31 05:39:11 2025 by rpki-client