Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3235312e302f32342d3234203d3e2034363337.roa
File: 3134372e3132352e3235312e302f32342d3234203d3e2034363337.roa (raw, json)
Hash identifier: ZY/6qGXnaWL6KV8E1Y9GiXqCqWkEQGg6wEvpW5WnzU0=
Subject key identifier: 84:F8:CA:27:85:CD:D4:E1:F0:0A:67:F0:75:0F:A9:05:DC:D2:55:F6
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 5FE0B792D88FD24B4D97D3F9F8748909055A4508
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3235312e302f32342d3234203d3e2034363337.roa
Signing time: Tue 21 Apr 2026 09:09:09 +0000
ROA not before: Tue 21 Apr 2026 09:04:09 +0000
ROA not after: Tue 20 Apr 2027 09:09:09 +0000
asID: 4637
IP address blocks: 147.125.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 15:56:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:e0:b7:92:d8:8f:d2:4b:4d:97:d3:f9:f8:74:89:09:05:5a:45:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Apr 21 09:04:09 2026 GMT
Not After : Apr 20 09:09:09 2027 GMT
Subject: CN=84F8CA2785CDD4E1F00A67F0750FA905DCD255F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:35:eb:cc:c5:e7:cd:ed:24:98:be:22:93:b0:
ec:71:33:0a:dd:1a:fa:80:4f:4a:e4:8d:d8:74:8d:
2f:09:23:35:f7:86:fc:23:c3:8d:13:9b:c8:94:cb:
33:c8:1b:e9:cc:79:ed:53:9d:06:06:3e:3b:3d:e3:
1c:2b:3c:c1:a9:c2:8b:8a:0a:98:00:88:32:fa:cf:
e2:76:70:23:c9:78:c9:f5:73:f0:52:32:a3:3c:f3:
81:c1:c2:2c:9f:04:73:94:e7:66:9e:e3:75:a5:e8:
d2:4f:36:42:67:1b:4d:e8:37:06:2d:ba:b6:09:ca:
2e:fc:82:10:b8:d9:e9:95:ee:fd:3d:4c:c8:e0:93:
36:36:94:bc:0e:65:b7:74:0a:38:56:8d:12:5d:d6:
07:74:71:1c:e1:0b:26:c2:7e:14:06:2a:15:7e:4e:
5c:8d:50:ea:ed:6b:95:96:ea:1f:80:37:1a:72:af:
dc:60:a2:f3:bc:bc:07:23:f8:cf:4a:de:d4:87:d8:
52:e7:b6:43:d8:06:de:08:1c:66:de:f9:6a:25:25:
68:8b:c3:1e:1a:92:d7:c4:69:34:38:26:fa:7d:17:
24:f1:30:06:ec:69:2e:d3:bd:c9:66:27:cb:58:0e:
7e:12:c2:b5:77:7f:80:4c:df:45:02:c3:b5:24:56:
24:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F8:CA:27:85:CD:D4:E1:F0:0A:67:F0:75:0F:A9:05:DC:D2:55:F6
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3235312e302f32342d3234203d3e2034363337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.251.0/24
Signature Algorithm: sha256WithRSAEncryption
70:ea:94:50:2c:c6:77:e8:f1:03:93:43:ad:2a:05:78:a0:19:
f0:b1:1e:65:bc:5a:3f:a2:c3:ae:e8:9b:07:fa:0c:f5:b6:7e:
e5:1f:9b:ee:f8:b0:da:e6:e1:e4:98:64:02:33:18:11:6d:74:
70:a7:31:b9:eb:d8:8a:be:47:e8:53:cf:e0:c0:dd:93:92:b3:
3f:e1:be:77:d8:1b:c6:f1:26:83:e0:2a:36:90:3a:c4:14:84:
3f:d7:a2:90:66:29:99:b2:e1:98:af:da:97:34:83:53:64:52:
b9:25:71:f3:bc:e0:b1:c3:cf:ac:87:43:03:b7:c9:29:d7:8d:
37:d6:51:07:44:c7:49:f8:ef:d4:ad:65:ce:45:d2:7e:62:31:
bc:11:4a:6e:6e:cc:a2:99:e5:24:3b:77:c1:ac:6b:1a:ae:5e:
2d:bf:77:eb:a6:64:d9:6c:80:e5:a3:c9:2c:57:32:5f:55:05:
ca:23:fa:a4:bd:5e:66:f5:e5:10:68:1d:92:af:6f:6c:b4:02:
11:39:90:34:44:37:ab:1a:7c:fe:49:56:09:01:b4:e1:b5:28:
72:ef:08:c6:10:b2:22:37:37:70:04:c5:88:a7:28:73:12:be:
8c:c2:ee:77:bf:19:00:47:9c:25:45:b2:11:ec:68:48:c6:fb:
96:9b:bf:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 02:40:33 2026 by rpki-client