Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3233312e302f32342d3234203d3e20383334.roa
File: 3134372e3132352e3233312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: WY8ZbYrgPna+ydUzZQTRFmgpwAWbxY8aIu5MbRswWO0=
Subject key identifier: E6:3F:86:24:50:A5:EE:43:40:64:56:02:AC:DA:81:64:81:53:69:E4
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 440F93BE38AA942ED7FE45FADE6A3F5ABD70C9CC
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3233312e302f32342d3234203d3e20383334.roa
Signing time: Mon 03 Aug 2026 11:58:36 +0000
ROA not before: Mon 03 Aug 2026 11:53:36 +0000
ROA not after: Mon 02 Aug 2027 11:58:36 +0000
asID: 834
IP address blocks: 147.125.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Aug 2026 15:28:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:0f:93:be:38:aa:94:2e:d7:fe:45:fa:de:6a:3f:5a:bd:70:c9:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Aug 3 11:53:36 2026 GMT
Not After : Aug 2 11:58:36 2027 GMT
Subject: CN=E63F862450A5EE4340645602ACDA8164815369E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2a:f3:19:68:a2:78:cf:d5:45:31:19:5a:59:
30:34:11:8f:be:6e:5b:98:49:55:f5:df:7f:86:66:
c7:15:98:a9:c1:c2:63:05:5c:d9:97:cd:09:a1:de:
f3:ad:a0:31:91:09:ff:d2:93:98:b6:e5:c1:50:02:
3f:fc:ba:d9:f3:ff:73:90:09:d7:22:63:8f:00:58:
34:43:90:f2:1d:64:a4:ab:b5:a0:60:3d:94:0e:d5:
12:03:4e:af:9a:ed:f4:e7:e9:a2:72:01:42:4c:c1:
8c:70:8e:e6:d0:af:82:40:76:b9:51:25:06:f6:6a:
8a:32:f3:b1:42:44:c2:f7:91:94:77:6e:f4:5f:07:
80:08:28:9b:f7:04:66:a7:48:1b:94:82:04:35:ea:
e8:25:63:e7:e5:bb:43:ef:8b:d6:7f:2c:5c:bf:e0:
e3:fc:aa:9e:c1:99:db:54:49:7d:8f:75:c5:5b:f7:
ac:f5:cc:97:e7:5a:99:c2:5b:e1:6b:15:ce:de:c4:
d7:c5:fa:57:16:8d:e9:86:82:51:4b:e4:fa:93:bc:
f2:1c:b0:e2:24:16:8e:bf:6f:b5:20:af:d3:c4:7e:
03:94:b6:cc:7d:78:5a:08:ff:1a:ab:49:04:25:eb:
bc:ea:ac:a2:58:3f:c4:ee:4c:25:20:20:4e:4c:cc:
49:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:3F:86:24:50:A5:EE:43:40:64:56:02:AC:DA:81:64:81:53:69:E4
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3233312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.231.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:e6:c5:52:ee:22:93:ef:7c:de:a7:d3:a8:f8:dd:e4:13:51:
47:0e:9f:b2:c1:f5:c9:0c:9b:e6:6a:f1:f1:46:03:3d:54:24:
6a:48:32:8d:e8:11:c8:0a:90:67:ae:7f:41:6e:d6:19:68:bb:
fc:eb:08:83:e9:45:0b:fa:c1:ce:27:a0:6d:a3:fb:35:7e:de:
25:33:36:1a:23:12:b6:f1:ca:eb:65:2d:c3:62:99:55:3a:2a:
fd:11:f2:c9:64:29:92:56:07:ea:52:0c:6d:7c:c5:28:cb:8c:
29:33:ed:fd:15:21:2f:6d:d5:14:8f:32:8b:49:5a:0f:53:da:
d2:14:36:34:0b:bc:ba:d3:40:df:8c:83:02:fb:11:9a:a3:fd:
f5:f2:f9:65:b3:d7:37:35:4f:a5:73:de:41:35:fa:9b:d3:47:
0d:c7:94:59:e6:67:43:b4:9b:fc:a1:56:b6:45:1c:7f:1a:17:
e5:29:e9:cf:6c:81:85:07:24:c3:9b:a9:f8:27:bf:19:8f:89:
fa:8d:6f:e1:e8:5f:f8:fb:68:f9:c5:88:b8:66:f7:0b:b7:b8:
f0:6c:11:59:42:64:e0:70:12:b6:5e:4e:50:85:b1:c5:fb:d7:
9d:38:3f:3a:93:55:64:3a:55:96:54:58:f7:b0:0d:d0:8d:6f:
2c:96:59:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 06:35:29 2026 by rpki-client