Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3132392e302f32342d3234203d3e20383334.roa
File: 3134372e3132352e3132392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: meaOBrXavPvQbwQIxrBXiGEn9bkoCgLPTBH8fucUINo=
Subject key identifier: 9C:88:67:4A:B6:79:DA:0C:E6:00:FD:44:DB:88:33:C5:B9:CC:9E:1B
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 391031636FC3AB751D5A778DC10B4DE3CB09CD8B
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3132392e302f32342d3234203d3e20383334.roa
Signing time: Wed 05 Nov 2025 05:37:47 +0000
ROA not before: Wed 05 Nov 2025 05:32:47 +0000
ROA not after: Wed 04 Nov 2026 05:37:47 +0000
asID: 834
IP address blocks: 147.125.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Nov 2025 05:37:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:10:31:63:6f:c3:ab:75:1d:5a:77:8d:c1:0b:4d:e3:cb:09:cd:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Nov 5 05:32:47 2025 GMT
Not After : Nov 4 05:37:47 2026 GMT
Subject: CN=9C88674AB679DA0CE600FD44DB8833C5B9CC9E1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:29:a1:a3:58:6c:84:b2:55:34:62:5e:79:8b:
05:15:68:20:f2:be:88:ed:65:df:e8:0c:8a:7c:85:
a6:bb:24:fa:70:9d:08:4e:a1:c8:dd:3f:5f:df:c4:
4c:49:48:f9:d4:ae:47:11:1d:44:76:cb:d7:78:49:
d0:13:13:c3:c3:9a:6b:38:5c:07:8f:ea:97:ed:88:
74:e9:e0:cd:1d:5d:fc:c1:78:cc:ee:24:7f:e5:bd:
61:58:0f:69:ad:19:0f:e3:a1:a8:a9:7f:9e:b0:bd:
59:9a:00:b8:a8:fc:e0:b6:d2:88:54:da:95:f4:e6:
24:f6:9c:53:58:1b:eb:f7:1e:6b:00:51:41:3f:1e:
f7:9d:26:eb:19:ce:e9:cc:fa:53:1b:50:74:b2:b8:
be:bc:c4:a4:7f:ed:3d:94:fa:c8:ee:b3:51:1e:58:
a2:05:04:20:b6:83:72:92:ef:12:16:28:0c:8d:61:
a7:f0:c1:d5:bc:51:21:90:17:20:83:b7:c7:26:02:
53:5c:58:0b:8c:02:bb:0d:ac:14:38:46:aa:38:15:
84:75:43:96:33:e7:a6:b9:46:f2:83:73:fe:a1:3d:
b1:b5:a1:e8:52:db:3e:4b:5f:58:23:9a:9f:f3:89:
b6:c8:8c:a3:58:ee:ce:cd:d1:10:ed:e0:1e:0b:d4:
5c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:88:67:4A:B6:79:DA:0C:E6:00:FD:44:DB:88:33:C5:B9:CC:9E:1B
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3132392e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.129.0/24
Signature Algorithm: sha256WithRSAEncryption
68:5e:41:82:76:88:b4:df:a5:5f:f2:81:2e:50:c2:c8:95:86:
de:f8:3f:ed:d1:62:9f:39:5d:19:e9:ae:e0:d1:ad:47:3c:5b:
2e:85:d0:e8:2f:ee:77:73:3e:ac:96:fb:32:1f:46:b0:32:34:
67:ce:a0:0a:a5:45:74:a1:8e:9d:de:cd:f8:5d:18:31:91:ad:
f6:10:1c:3a:92:9a:c5:23:1e:65:91:41:38:80:fc:03:11:ce:
36:8f:2b:f8:a3:14:6c:87:e3:d2:71:af:80:11:bc:d2:f4:84:
91:1e:b2:f4:4c:dc:a5:8a:30:15:e2:c9:57:4b:37:2d:3f:7c:
2b:3d:6f:20:5b:19:96:91:69:85:76:99:97:b9:ef:3a:4c:0f:
b6:48:9c:ea:1d:f1:a2:cf:33:1b:f9:e8:c2:4a:23:5a:ec:bf:
6a:a8:d4:f9:2d:5c:de:b6:1b:22:49:3f:b6:7e:2f:32:d0:5d:
47:27:65:ed:74:47:58:53:eb:47:35:32:9d:10:70:92:ff:e9:
9b:7a:b5:3e:0f:aa:60:1a:a5:9e:26:6b:7f:b4:9c:99:78:3c:
37:2e:bb:51:c0:ea:ea:f8:41:60:66:7b:94:f8:e0:81:b6:11:
75:11:0d:e8:59:cf:8e:4e:7e:75:c8:f4:47:22:90:a2:c0:5c:
ea:b4:19:05
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUORAxY2/Dq3UdWneNwQtN48sJzYswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl
YjVhNzZlYTAeFw0yNTExMDUwNTMyNDdaFw0yNjExMDQwNTM3NDdaMDMxMTAvBgNV
BAMTKDlDODg2NzRBQjY3OURBMENFNjAwRkQ0NERCODgzM0M1QjlDQzlFMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvKaGjWGyEslU0Yl55iwUVaCDy
vojtZd/oDIp8haa7JPpwnQhOocjdP1/fxExJSPnUrkcRHUR2y9d4SdATE8PDmms4
XAeP6pftiHTp4M0dXfzBeMzuJH/lvWFYD2mtGQ/joaipf56wvVmaALio/OC20ohU
2pX05iT2nFNYG+v3HmsAUUE/HvedJusZzunM+lMbUHSyuL68xKR/7T2U+sjus1Ee
WKIFBCC2g3KS7xIWKAyNYafwwdW8USGQFyCDt8cmAlNcWAuMArsNrBQ4Rqo4FYR1
Q5Yz56a5RvKDc/6hPbG1oehS2z5LX1gjmp/zibbIjKNY7s7N0RDt4B4L1Fz3AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUnIhnSrZ52gzmAP1E24gzxbnMnhswHwYDVR0j
BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy
NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0
YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt
YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx
MzIzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJN9
gTANBgkqhkiG9w0BAQsFAAOCAQEAaF5BgnaItN+lX/KBLlDCyJWG3vg/7dFinzld
Gemu4NGtRzxbLoXQ6C/ud3M+rJb7Mh9GsDI0Z86gCqVFdKGOnd7N+F0YMZGt9hAc
OpKaxSMeZZFBOID8AxHONo8r+KMUbIfj0nGvgBG80vSEkR6y9EzcpYowFeLJV0s3
LT98Kz1vIFsZlpFphXaZl7nvOkwPtkic6h3xos8zG/nowkojWuy/aqjU+S1c3rYb
Ikk/tn4vMtBdRydl7XRHWFPrRzUynRBwkv/pm3q1Pg+qYBqlniZrf7ScmXg8Ny67
UcDq6vhBYGZ7lPjggbYRdREN6FnPjk5+dcj0RyKQosBc6rQZBQ==
-----END CERTIFICATE-----
Generated at Fri Nov 7 11:42:39 2025 by rpki-client