Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234302e302f32342d3234203d3e20383334.roa
File: 3134372e3132352e3234302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: oa41R3woXD23qk0X+Gz1iuYz+duK/SLRwR2uS4SbRUk=
Subject key identifier: 01:E8:DE:F8:72:D4:78:05:03:B7:A6:F1:20:79:49:92:08:C6:3D:08
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 1D7485E1181D58E0AEB834A78E137DD67DCF42F0
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234302e302f32342d3234203d3e20383334.roa
Signing time: Tue 21 Apr 2026 09:09:12 +0000
ROA not before: Tue 21 Apr 2026 09:04:12 +0000
ROA not after: Tue 20 Apr 2027 09:09:12 +0000
asID: 834
IP address blocks: 147.125.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:31:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:74:85:e1:18:1d:58:e0:ae:b8:34:a7:8e:13:7d:d6:7d:cf:42:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Apr 21 09:04:12 2026 GMT
Not After : Apr 20 09:09:12 2027 GMT
Subject: CN=01E8DEF872D4780503B7A6F12079499208C63D08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:80:3c:e7:52:12:51:11:3a:10:1d:f1:58:f8:
a5:6d:f3:19:77:b6:60:87:19:c2:ea:80:d3:21:0a:
80:5b:4f:15:31:d0:5f:bd:f0:63:d7:ba:41:54:b3:
99:72:c8:ea:2b:83:26:ed:29:49:05:35:ee:ae:1a:
f9:d5:8c:03:46:2d:bb:f2:e2:3a:4e:6e:14:4e:d2:
5d:cc:04:e8:f9:cd:20:0e:44:85:b2:55:31:f5:95:
6e:cb:df:73:54:c3:57:c6:c3:fa:9b:dd:ea:1c:40:
81:4c:52:ae:20:2b:1e:51:c9:a1:e5:74:49:f1:f9:
be:59:74:eb:26:37:9b:dc:cd:2d:10:ee:20:8d:ca:
98:42:01:23:73:dc:13:6f:19:c9:56:81:9b:8d:9c:
a9:b8:25:ec:31:5e:3b:80:f2:ed:ed:26:1b:2f:b9:
73:54:17:12:19:ab:b5:18:4b:42:c0:02:58:85:5a:
38:65:21:7c:54:20:40:eb:4c:39:bf:29:14:ba:20:
6b:18:6b:c4:7d:92:69:d2:cf:22:95:5a:af:84:22:
7a:b4:d7:11:fe:fd:f1:e7:06:65:ee:66:9b:37:bc:
c4:6d:7a:88:56:33:3a:f2:10:a9:48:5c:0d:cf:79:
be:58:cf:2c:ed:73:97:89:cc:7f:4b:64:a1:a2:ee:
c8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E8:DE:F8:72:D4:78:05:03:B7:A6:F1:20:79:49:92:08:C6:3D:08
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.240.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:97:3d:82:50:82:54:5b:67:38:ce:36:b0:fe:ba:c7:b4:f0:
d6:17:5e:54:1a:e8:2a:31:ef:27:d6:47:9d:95:f5:c8:e8:0a:
08:7d:80:42:e2:c5:57:2e:48:3f:ab:9a:b2:32:9e:9e:51:55:
ad:73:9f:ed:57:d3:d3:8a:c2:c4:a5:4e:6a:5f:8b:69:9a:35:
2c:bc:97:41:1e:bd:97:3f:9a:ec:aa:91:3a:eb:a0:ee:af:6d:
34:76:6b:72:d7:32:20:e3:e1:64:d8:f5:44:3b:be:a4:aa:f7:
40:1d:21:f4:27:6f:52:f1:44:59:bf:c2:30:54:72:09:62:33:
6d:05:04:5f:e1:bc:0f:f4:0b:f5:26:ed:dc:85:19:95:ce:4b:
78:41:c0:db:19:1c:bf:fc:16:20:6b:6f:63:47:94:a3:cd:25:
ca:f4:8e:70:00:93:39:ce:df:a8:25:d0:60:1a:19:3d:85:57:
35:b9:2d:0b:ae:f4:47:0b:22:f1:94:11:9a:c9:cc:26:74:30:
ff:1a:da:f5:da:d6:7e:8c:91:8e:81:a2:1c:14:ec:72:d5:29:
9f:eb:bc:83:cd:31:07:0e:0d:ff:47:67:51:a8:f5:45:78:6c:
90:70:de:e9:da:be:46:cb:14:81:01:36:60:d1:06:91:16:64:
af:f7:9b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:40:46 2026 by rpki-client