Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3132382e302f32322d3234203d3e20383334.roa
File: 3134372e3132352e3132382e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: 5shC/bpFglSMSgPVQkBPLXOlLvlrqLmE/4P0NmzCb/M=
Subject key identifier: 91:6B:38:6B:BF:45:F3:2C:17:EE:7F:45:14:09:16:FC:83:F1:0A:02
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 6845808B9BDD0EEC3E9A4311E2E9849744923211
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3132382e302f32322d3234203d3e20383334.roa
Signing time: Tue 28 Jul 2026 00:03:33 +0000
ROA not before: Mon 27 Jul 2026 23:58:33 +0000
ROA not after: Tue 27 Jul 2027 00:03:33 +0000
asID: 834
IP address blocks: 147.125.128.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 03:41:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:45:80:8b:9b:dd:0e:ec:3e:9a:43:11:e2:e9:84:97:44:92:32:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Jul 27 23:58:33 2026 GMT
Not After : Jul 27 00:03:33 2027 GMT
Subject: CN=916B386BBF45F32C17EE7F45140916FC83F10A02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:07:d5:6f:1b:57:7c:65:1b:63:56:9a:7d:ad:
f1:65:41:1a:49:e2:2b:bf:af:f9:d2:e6:8d:6e:49:
1f:e8:5b:4b:cd:c1:7c:65:b0:c1:be:ca:6e:f9:9b:
e0:d9:d3:ae:2d:8b:08:aa:b6:0d:9b:4c:75:da:ab:
0f:29:3c:04:d1:d3:62:97:11:3a:32:84:79:7b:46:
87:1d:45:f2:39:79:3b:a3:a9:cc:f2:07:3a:eb:79:
aa:53:95:6d:db:3d:d3:37:89:24:1f:ae:15:f0:10:
a9:fa:83:3f:13:97:77:8b:7a:8d:61:ff:c8:ed:73:
97:70:90:6a:63:ac:6c:93:5b:92:8c:2e:04:de:bd:
7f:f4:50:c8:49:da:db:27:8c:dc:1d:01:9c:44:b7:
99:91:44:c6:7d:cf:24:d0:56:b0:a1:f4:de:37:d2:
85:a8:a4:ea:58:6f:ac:49:52:39:61:af:b5:5b:f6:
6e:a0:fa:17:71:55:8c:57:db:39:07:0d:b6:5c:da:
5d:0c:13:c1:53:ad:e2:ec:7a:5a:fb:45:3a:80:2a:
53:cc:5d:8e:43:f2:5d:5d:92:2b:b4:e6:02:0b:73:
46:f7:fb:45:19:96:91:ef:ab:7b:42:65:7b:16:72:
2d:66:1e:78:5f:9a:00:4a:e7:de:d4:0a:13:6a:78:
75:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:6B:38:6B:BF:45:F3:2C:17:EE:7F:45:14:09:16:FC:83:F1:0A:02
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3132382e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.128.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:f1:05:00:fe:e3:48:11:98:76:db:82:57:d5:d6:e1:8c:ed:
10:4a:4c:f6:a3:90:b3:6c:cb:4a:29:8a:af:36:ee:e7:a0:c7:
0b:28:7d:f0:f6:b8:36:ad:fd:09:58:e5:d0:5b:4c:f0:28:92:
a2:58:a8:0c:50:cd:fb:f7:58:2b:f8:aa:9e:8b:3b:84:7b:38:
5b:27:57:be:84:d3:1d:77:0d:f6:21:ae:4e:be:3e:0b:0d:dd:
70:64:94:0f:9e:82:35:50:63:b9:fb:2c:f3:7a:91:27:2e:da:
08:45:c3:d5:0c:7a:f5:04:6e:6b:36:fb:9b:fd:f1:a6:cc:53:
21:69:8d:ca:13:17:b4:23:64:97:c0:d3:05:de:fd:22:58:42:
81:9b:a5:31:ea:5c:50:ca:57:4a:57:84:0a:9c:3e:da:54:c5:
91:15:4a:b1:df:a4:c1:7c:29:0d:d2:a9:05:04:cf:ff:d1:d5:
35:37:4c:79:a1:a8:9d:32:1f:47:15:f0:3f:8e:3f:8d:79:0a:
aa:01:b6:aa:c8:c4:f2:c5:14:b0:e9:72:9e:2e:c2:8b:98:d5:
4a:5a:44:d4:25:18:8f:70:ad:1b:6f:a1:a4:a2:dc:2f:bc:4c:
2f:52:bf:00:eb:7c:5a:7f:e9:10:18:6e:4a:72:69:98:7f:ef:
c5:05:0c:95
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUaEWAi5vdDuw+mkMR4umEl0SSMhEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl
YjVhNzZlYTAeFw0yNjA3MjcyMzU4MzNaFw0yNzA3MjcwMDAzMzNaMDMxMTAvBgNV
BAMTKDkxNkIzODZCQkY0NUYzMkMxN0VFN0Y0NTE0MDkxNkZDODNGMTBBMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSB9VvG1d8ZRtjVpp9rfFlQRpJ
4iu/r/nS5o1uSR/oW0vNwXxlsMG+ym75m+DZ064tiwiqtg2bTHXaqw8pPATR02KX
EToyhHl7RocdRfI5eTujqczyBzrreapTlW3bPdM3iSQfrhXwEKn6gz8Tl3eLeo1h
/8jtc5dwkGpjrGyTW5KMLgTevX/0UMhJ2tsnjNwdAZxEt5mRRMZ9zyTQVrCh9N43
0oWopOpYb6xJUjlhr7Vb9m6g+hdxVYxX2zkHDbZc2l0ME8FTreLselr7RTqAKlPM
XY5D8l1dkiu05gILc0b3+0UZlpHvq3tCZXsWci1mHnhfmgBK597UChNqeHVXAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUkWs4a79F8ywX7n9FFAkW/IPxCgIwHwYDVR0j
BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy
NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0
YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt
YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx
MzIzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEApN9
gDANBgkqhkiG9w0BAQsFAAOCAQEAO/EFAP7jSBGYdtuCV9XW4YztEEpM9qOQs2zL
SimKrzbu56DHCyh98Pa4Nq39CVjl0FtM8CiSolioDFDN+/dYK/iqnos7hHs4WydX
voTTHXcN9iGuTr4+Cw3dcGSUD56CNVBjufss83qRJy7aCEXD1Qx69QRuazb7m/3x
psxTIWmNyhMXtCNkl8DTBd79IlhCgZulMepcUMpXSleECpw+2lTFkRVKsd+kwXwp
DdKpBQTP/9HVNTdMeaGonTIfRxXwP44/jXkKqgG2qsjE8sUUsOlyni7Ci5jVSlpE
1CUYj3CtG2+hpKLcL7xML1K/AOt8Wn/pEBhuSnJpmH/vxQUMlQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:00:55 2026 by rpki-client