Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3232382e302f32332d3234203d3e20383334.roa
File: 3134372e3132352e3232382e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: iLmpATk3ltqKZdrMARS98zuevXpucc3/n4h750binEk=
Subject key identifier: 9E:CC:CA:79:FE:34:83:B4:83:49:66:C4:DA:BC:7B:03:A7:27:83:A6
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 1C4C92FE5E34ED961B4F9E8E2F8336D646F204DB
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3232382e302f32332d3234203d3e20383334.roa
Signing time: Mon 03 Aug 2026 11:58:36 +0000
ROA not before: Mon 03 Aug 2026 11:53:36 +0000
ROA not after: Mon 02 Aug 2027 11:58:36 +0000
asID: 834
IP address blocks: 147.125.228.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Aug 2026 15:28:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:4c:92:fe:5e:34:ed:96:1b:4f:9e:8e:2f:83:36:d6:46:f2:04:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Aug 3 11:53:36 2026 GMT
Not After : Aug 2 11:58:36 2027 GMT
Subject: CN=9ECCCA79FE3483B4834966C4DABC7B03A72783A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7f:42:29:3f:f1:af:fd:41:ad:27:7b:a5:de:
ce:32:a6:3a:da:f3:d5:8b:f6:06:29:cd:2d:23:a9:
88:d3:db:5c:86:80:5a:d1:96:76:08:a4:bd:1e:61:
30:64:01:f2:63:0a:16:1f:2a:b2:c4:ef:f1:46:6d:
73:d5:c2:c0:2a:62:b7:13:53:da:63:97:03:86:57:
3d:51:fb:c6:97:81:4e:41:42:26:d8:96:02:48:05:
68:23:ec:06:90:46:e8:3a:41:ff:25:d6:06:e1:56:
89:6e:1b:f4:45:12:1e:50:42:43:e9:ae:32:f4:86:
f6:eb:7f:8a:05:f5:57:91:bf:d6:f7:b7:1b:14:f2:
a1:f7:89:61:61:85:df:08:9e:43:ee:0e:4f:c1:02:
80:9f:3c:b4:b1:fd:8f:26:19:f4:2d:8d:22:ad:d9:
73:56:0a:8e:dd:e8:32:f2:f3:4e:ba:a9:35:b1:ef:
df:19:a9:b5:83:8c:0c:aa:bf:fa:ee:d6:38:56:bc:
c2:48:9b:5c:8e:ec:ed:d7:09:9f:e9:ef:1f:b0:b9:
0e:8b:b0:1a:b5:2e:85:8b:1e:46:18:7c:62:25:08:
43:14:a2:5b:2b:06:f9:4e:09:3c:31:96:e2:24:bf:
eb:bc:06:bf:93:15:14:eb:9c:af:03:52:fd:80:8c:
60:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:CC:CA:79:FE:34:83:B4:83:49:66:C4:DA:BC:7B:03:A7:27:83:A6
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3232382e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.228.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:d1:be:52:b7:d9:48:6e:f0:f8:68:7f:3a:f9:57:9a:0b:45:
98:54:a6:97:1e:02:67:77:34:a4:5c:f5:56:bc:82:ef:0b:4d:
19:b2:ff:7c:50:a5:6c:a7:51:59:6b:26:e0:e9:bd:1d:41:66:
c1:64:d0:4b:4a:e7:be:b8:25:f1:ad:12:c5:95:48:bc:43:3f:
80:88:7a:fe:e0:56:64:ae:ee:04:34:80:19:f0:43:f8:6e:ed:
b1:3d:66:1c:3f:e7:31:fa:15:4b:33:ba:90:60:fb:57:93:db:
39:5c:85:eb:01:c1:fb:2f:7d:b7:97:b6:8f:45:7f:02:59:09:
39:f5:f1:28:0e:79:73:e4:6b:96:80:06:58:a3:56:c6:88:d0:
73:66:21:2b:6b:cc:22:1d:10:e6:62:84:70:70:2d:ce:1a:29:
be:4b:98:bd:81:e2:6c:d3:25:5a:9f:10:e7:bb:c0:35:82:59:
8d:1f:eb:c7:eb:54:8e:f6:a9:f3:46:69:1c:7c:b2:cf:c8:28:
57:cd:a6:a5:b4:06:ca:e8:fd:96:8a:61:c8:bc:bf:c7:09:44:
22:4c:5f:cf:c6:fe:6a:e0:dc:21:2f:52:ec:c4:f3:5f:46:60:
26:d7:44:89:c1:40:15:1d:69:8a:b9:57:c5:9f:f7:11:b0:09:
86:28:0f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 06:35:50 2026 by rpki-client