Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3233302e302f32342d3234203d3e20323139343237.roa
File: 3134372e3132352e3233302e302f32342d3234203d3e20323139343237.roa (raw, json)
Hash identifier: z/CMOfRb70ULlzp5BvDrwfnJ58vaZbgbbZKpPs2CugY=
Subject key identifier: C4:C2:A0:1A:C3:5B:94:64:8E:65:B5:A6:C7:D6:F9:01:92:59:CD:6B
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 1D22B989A1AC6A0D73BF5D324064507CB03DCBC5
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3233302e302f32342d3234203d3e20323139343237.roa
Signing time: Mon 03 Aug 2026 11:56:26 +0000
ROA not before: Mon 03 Aug 2026 11:51:26 +0000
ROA not after: Mon 02 Aug 2027 11:56:26 +0000
asID: 219427
IP address blocks: 147.125.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Aug 2026 15:28:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:22:b9:89:a1:ac:6a:0d:73:bf:5d:32:40:64:50:7c:b0:3d:cb:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Aug 3 11:51:26 2026 GMT
Not After : Aug 2 11:56:26 2027 GMT
Subject: CN=C4C2A01AC35B94648E65B5A6C7D6F9019259CD6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c0:96:0d:42:f5:64:16:f3:8b:12:87:90:83:
20:8b:d9:86:25:fe:4f:07:09:34:32:68:4a:93:4e:
48:65:b8:5b:6e:3c:ea:08:6e:c9:7f:e8:f2:a5:02:
1b:9f:a6:65:3b:2e:16:2c:81:50:c3:64:7e:42:c0:
de:93:41:cd:da:7a:71:71:7f:e1:c4:d2:d6:b9:d8:
5d:a5:b0:0d:35:9a:e9:2b:9b:4a:77:48:8a:98:48:
f3:a4:13:2f:d0:fc:0d:3f:b4:c9:ad:f4:ed:74:59:
a6:67:5a:75:61:3a:7a:06:4a:d3:31:d5:c1:9a:ee:
ef:f5:91:97:75:1a:c9:e4:56:30:2e:7f:d3:81:66:
b5:ad:86:0b:97:35:0e:37:45:77:79:bd:f6:41:6b:
b6:9c:37:46:60:38:00:32:59:eb:ce:4a:83:44:4d:
8a:14:e6:f3:0b:27:65:b0:cb:e2:11:06:f4:22:6c:
df:2f:3f:96:88:a6:be:77:d9:29:3e:bb:a7:f3:51:
46:d9:ee:83:21:0b:35:a8:9d:d9:4d:45:58:b8:2b:
f7:1a:56:fb:c4:5b:9e:ca:58:7b:07:63:bf:b9:8b:
55:7f:f4:a7:c9:ac:ca:44:dd:5c:5c:ab:1a:6a:55:
ee:56:ed:a7:47:e4:55:05:d2:4c:95:f2:b1:55:61:
9e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C2:A0:1A:C3:5B:94:64:8E:65:B5:A6:C7:D6:F9:01:92:59:CD:6B
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3233302e302f32342d3234203d3e20323139343237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.230.0/24
Signature Algorithm: sha256WithRSAEncryption
74:c3:73:df:0a:2c:a8:ea:ea:7d:ec:49:4a:87:17:b4:a9:0b:
6b:a8:d8:0c:a4:e9:1a:4f:74:5a:18:e7:95:96:98:65:22:44:
be:a3:a9:8b:a4:f2:0f:28:53:2f:c9:ea:b8:39:9e:85:b2:cb:
db:dc:ee:27:89:4d:76:64:a0:07:7d:8b:f8:b5:ef:63:75:6e:
0d:b8:3d:d7:2a:bc:0c:46:e9:c7:ae:78:2c:68:67:b2:7b:95:
35:81:cc:bd:f4:6a:4b:65:5d:af:de:6e:89:ed:75:d3:15:8b:
59:b9:1f:84:44:f6:9d:a9:91:ed:72:2b:ce:4e:79:df:8e:03:
c6:c8:2e:9e:21:9e:98:ee:8d:e6:29:e3:55:cf:df:0f:9c:14:
ca:20:fe:71:6f:cc:48:a2:5d:50:e7:4c:c8:cc:5a:fb:22:b0:
14:c2:a3:bd:b1:eb:47:f1:2f:b6:0b:9f:34:31:57:e5:46:a6:
05:2d:b4:25:98:28:03:6d:8a:67:40:66:4c:64:5f:9c:2c:b6:
6a:e3:91:e1:45:ed:d1:7a:c3:8e:d0:6a:0b:98:d8:24:1b:95:
40:76:ce:15:7e:6f:f4:fe:44:cd:37:f0:61:ed:42:21:21:33:
51:bd:34:28:b1:7f:79:7e:f8:8b:4a:2a:16:96:18:53:15:8a:
f0:0d:5b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 06:36:24 2026 by rpki-client