Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3233322e302f32312d3231203d3e2035363530.roa
File: 3134372e3132352e3233322e302f32312d3231203d3e2035363530.roa (raw, json)
Hash identifier: BrRlkcgHyo7KgPTsVzr+D2SwT/C7jGoqSUs+OVNb7/c=
Subject key identifier: D4:85:FC:52:BB:94:84:57:D3:86:82:3D:2D:7F:78:56:45:40:6A:78
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 6B83C9745434E50E042A5F43B0E78CF69E3A1853
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3233322e302f32312d3231203d3e2035363530.roa
Signing time: Tue 23 Sep 2025 18:17:23 +0000
ROA not before: Tue 23 Sep 2025 18:12:23 +0000
ROA not after: Tue 22 Sep 2026 18:17:23 +0000
asID: 5650
IP address blocks: 147.125.232.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:83:c9:74:54:34:e5:0e:04:2a:5f:43:b0:e7:8c:f6:9e:3a:18:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Sep 23 18:12:23 2025 GMT
Not After : Sep 22 18:17:23 2026 GMT
Subject: CN=D485FC52BB948457D386823D2D7F785645406A78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:eb:30:00:20:41:9f:ca:8e:c1:dd:e5:fc:1a:
6f:45:5d:80:4f:60:36:46:a9:7a:c4:fe:4e:82:24:
3d:31:b6:80:1f:0f:7b:76:2b:f5:3c:db:85:00:b2:
fa:9e:36:7c:13:2f:a0:84:83:31:33:89:14:ad:42:
ce:ac:b0:9b:06:ee:ab:37:9a:65:75:71:84:f1:7a:
a1:c7:9e:73:e7:45:41:ec:5d:c3:a5:0c:18:fb:44:
c3:03:1a:49:a4:84:dc:ed:f9:73:71:e3:0d:3b:e9:
b7:06:b3:fa:26:89:f0:e9:a8:5c:a3:e6:93:da:cd:
e6:1e:de:5f:db:75:8d:d7:13:61:d5:6f:4d:84:6c:
2c:ea:45:eb:d5:a4:33:04:45:55:c1:da:db:c5:69:
d9:eb:3c:57:ce:92:d3:b0:23:c4:0f:45:5d:5b:61:
8d:ab:28:72:e8:6e:d8:e9:ad:1f:57:55:eb:f4:94:
25:ed:95:28:d7:7c:d5:32:fb:9e:90:a3:41:4c:aa:
e5:57:4c:3b:c2:d7:5b:4e:ed:95:34:b7:3d:dd:8a:
2b:17:c1:3b:00:37:0a:32:b1:c0:59:6a:dc:4a:b6:
5d:ea:56:95:39:ed:d3:34:57:08:15:0f:54:fa:8e:
c7:18:94:c4:ef:48:58:2b:36:e8:4e:47:de:44:bb:
36:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:85:FC:52:BB:94:84:57:D3:86:82:3D:2D:7F:78:56:45:40:6A:78
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3233322e302f32312d3231203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.232.0/21
Signature Algorithm: sha256WithRSAEncryption
1b:bc:1c:4a:47:c7:50:b7:a9:71:9b:b2:89:46:3d:e3:33:ce:
2d:4e:67:e4:73:1b:29:68:c0:80:25:bc:58:bf:04:85:e8:62:
7a:c1:23:b8:81:79:bc:15:dd:71:94:94:1d:69:80:0c:da:bb:
48:67:88:27:19:a0:8b:d6:49:ae:8a:08:51:ca:a2:34:f5:3c:
77:01:a8:61:86:51:f4:88:e7:c7:b7:1c:43:58:44:a4:a9:ac:
29:c7:1a:bb:e1:84:f9:f3:c2:21:15:32:c1:55:e7:9a:f7:a9:
25:1f:ef:79:1a:9a:44:65:aa:ea:87:91:bc:23:50:23:52:5d:
f4:e9:fb:68:3d:74:75:64:70:2e:ff:cb:a7:14:4e:10:14:b3:
7f:75:d4:4a:81:ba:3a:80:dc:2b:a1:65:de:b2:5e:9c:9d:6a:
5e:14:4f:d4:15:59:ad:22:0a:32:ca:b7:ab:2a:de:3b:6b:8c:
84:71:5c:de:74:09:7e:3a:97:83:27:41:fb:10:ae:4e:2b:c1:
ba:aa:26:61:3a:54:05:d0:52:e1:bb:44:16:9e:57:81:23:3a:
79:87:1b:7c:71:89:f2:32:de:6a:c6:77:7f:3b:ef:f9:98:f8:
ee:94:88:71:cd:c0:19:f9:f2:3f:11:48:d5:95:b1:25:15:62:
5f:fb:07:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 16:10:32 2025 by rpki-client