Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3235322e302f32322d3234203d3e20383334.roa
File: 3134372e3132352e3235322e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: QxO4sqXPc5JgUBoxAhE8et4gmglt/jfevZu2gtyAb0I=
Subject key identifier: D6:6C:7B:D3:24:CB:86:06:E5:8F:21:C5:53:A5:2C:F1:F6:11:A7:F3
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 0AF53E97185CD86B494561617BBF90E6F3D83871
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3235322e302f32322d3234203d3e20383334.roa
Signing time: Thu 23 Oct 2025 02:33:42 +0000
ROA not before: Thu 23 Oct 2025 02:28:42 +0000
ROA not after: Thu 22 Oct 2026 02:33:42 +0000
asID: 834
IP address blocks: 147.125.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 12:21:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:f5:3e:97:18:5c:d8:6b:49:45:61:61:7b:bf:90:e6:f3:d8:38:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Oct 23 02:28:42 2025 GMT
Not After : Oct 22 02:33:42 2026 GMT
Subject: CN=D66C7BD324CB8606E58F21C553A52CF1F611A7F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f1:c9:09:d2:1e:7c:3b:0a:c7:e7:b1:55:76:
9f:1a:12:08:31:06:ec:c6:f2:f2:c0:7f:81:67:7f:
99:20:e2:70:18:45:30:b0:9b:b4:26:ed:78:9d:40:
ed:02:89:cd:8c:40:3b:d5:ae:5d:c1:5f:4b:d5:b0:
7a:0f:73:fe:0e:fe:22:0f:ea:5e:05:4e:9f:d7:dd:
19:bc:19:ef:6e:de:6e:0e:bf:0a:07:27:f1:bb:b8:
5e:9b:6e:7d:2d:39:65:36:ee:aa:23:d3:de:bf:85:
70:00:b3:1f:f5:72:16:52:1c:c5:66:a3:a9:df:b5:
71:9c:5f:13:e2:e9:58:91:f4:dc:08:7f:77:db:70:
4e:fc:9e:da:c6:27:b6:fc:4e:ae:48:1b:65:9c:2f:
62:61:a9:e0:ef:68:ae:c9:c1:a7:53:0e:32:11:99:
68:68:ca:72:b4:ec:bb:7f:57:45:1f:c1:2c:bf:16:
03:cb:8e:76:10:ee:ae:6d:e8:8a:09:dc:83:72:a3:
c5:57:27:bd:e8:a6:02:6c:d1:0a:ad:b7:54:52:8d:
de:13:12:f5:e5:a9:9b:10:d0:10:c5:8f:0a:75:61:
24:b8:c8:80:bb:da:12:42:d3:79:d8:e7:e7:ec:0d:
db:57:b9:67:c8:d7:ba:7d:a9:ba:4f:cc:26:be:3a:
10:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:6C:7B:D3:24:CB:86:06:E5:8F:21:C5:53:A5:2C:F1:F6:11:A7:F3
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3235322e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.252.0/22
Signature Algorithm: sha256WithRSAEncryption
93:36:51:50:34:ab:a1:a0:3a:1b:2e:b3:7d:00:74:c4:4c:bd:
2f:9b:2c:f6:c4:e8:95:fa:19:cd:6c:d5:d6:fb:1a:74:14:15:
31:0f:32:59:d5:cd:7c:d3:6a:b6:60:74:fb:8b:88:a9:69:77:
aa:b1:d4:59:e2:01:78:4e:2e:65:c0:90:d2:f3:32:45:91:5c:
86:e5:3f:ab:d3:83:9b:d4:10:56:6d:93:f4:09:b0:1f:c1:06:
a6:d3:be:56:ea:ec:16:69:7e:f9:86:19:37:d6:0d:2e:3d:12:
a4:d1:27:e7:b1:53:e4:3d:c1:c9:3c:79:d6:68:cd:f3:4e:3f:
35:45:a4:1a:1a:25:0f:26:02:56:e7:a6:d8:17:74:55:41:fc:
fd:bd:82:6d:fa:6f:0b:1b:6b:cf:24:07:29:ec:6e:1a:27:8d:
75:c2:4e:b2:b0:f8:e9:c2:c2:0c:43:c5:74:75:07:14:a7:1d:
57:05:ab:ca:f4:dd:a3:8e:f9:2e:64:93:4a:50:b9:5b:bf:92:
1c:5b:32:17:25:7b:9e:53:98:b4:30:eb:07:ec:86:19:1f:5e:
16:a5:2e:17:ad:e2:ba:b8:d6:78:fc:24:f5:b1:2c:51:ce:8d:
7b:0d:00:b0:35:e7:c1:ef:9c:ab:ea:52:49:c8:50:d6:e0:4d:
f6:05:31:aa
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUCvU+lxhc2GtJRWFhe7+Q5vPYOHEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl
YjVhNzZlYTAeFw0yNTEwMjMwMjI4NDJaFw0yNjEwMjIwMjMzNDJaMDMxMTAvBgNV
BAMTKEQ2NkM3QkQzMjRDQjg2MDZFNThGMjFDNTUzQTUyQ0YxRjYxMUE3RjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt8ckJ0h58OwrH57FVdp8aEggx
BuzG8vLAf4Fnf5kg4nAYRTCwm7Qm7XidQO0Cic2MQDvVrl3BX0vVsHoPc/4O/iIP
6l4FTp/X3Rm8Ge9u3m4OvwoHJ/G7uF6bbn0tOWU27qoj096/hXAAsx/1chZSHMVm
o6nftXGcXxPi6ViR9NwIf3fbcE78ntrGJ7b8Tq5IG2WcL2JhqeDvaK7JwadTDjIR
mWhoynK07Lt/V0UfwSy/FgPLjnYQ7q5t6IoJ3INyo8VXJ73opgJs0Qqtt1RSjd4T
EvXlqZsQ0BDFjwp1YSS4yIC72hJC03nY5+fsDdtXuWfI17p9qbpPzCa+OhC/AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU1mx70yTLhgbljyHFU6Us8fYRp/MwHwYDVR0j
BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy
NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0
YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt
YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy
MzUzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEApN9
/DANBgkqhkiG9w0BAQsFAAOCAQEAkzZRUDSroaA6Gy6zfQB0xEy9L5ss9sTolfoZ
zWzV1vsadBQVMQ8yWdXNfNNqtmB0+4uIqWl3qrHUWeIBeE4uZcCQ0vMyRZFchuU/
q9ODm9QQVm2T9AmwH8EGptO+VursFml++YYZN9YNLj0SpNEn57FT5D3ByTx51mjN
804/NUWkGholDyYCVuem2Bd0VUH8/b2CbfpvCxtrzyQHKexuGieNdcJOsrD46cLC
DEPFdHUHFKcdVwWryvTdo475LmSTSlC5W7+SHFsyFyV7nlOYtDDrB+yGGR9eFqUu
F63iurjWePwk9bEsUc6New0AsDXnwe+cq+pSSchQ1uBN9gUxqg==
-----END CERTIFICATE-----
Generated at Fri Oct 31 05:31:38 2025 by rpki-client