Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133322e302f32322d3234203d3e20383334.roa
File: 3134372e3132352e3133322e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: i9ywxokAXmLFciFeowEwqlfaYx3LPaKSKI6SC3VHSzI=
Subject key identifier: 13:EF:97:00:F9:40:DF:3B:11:A2:9A:A6:9A:A7:B0:29:73:F4:33:5D
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 29B8D779F5E5A22B4DE58AB4AF7791450A8BC171
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133322e302f32322d3234203d3e20383334.roa
Signing time: Wed 05 Nov 2025 05:37:47 +0000
ROA not before: Wed 05 Nov 2025 05:32:47 +0000
ROA not after: Wed 04 Nov 2026 05:37:47 +0000
asID: 834
IP address blocks: 147.125.132.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Nov 2025 05:37:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:b8:d7:79:f5:e5:a2:2b:4d:e5:8a:b4:af:77:91:45:0a:8b:c1:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Nov 5 05:32:47 2025 GMT
Not After : Nov 4 05:37:47 2026 GMT
Subject: CN=13EF9700F940DF3B11A29AA69AA7B02973F4335D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e3:5f:8d:bc:e3:ee:33:fe:a6:86:fe:69:55:
a7:f0:e7:11:1c:64:05:08:35:8e:f2:cc:0e:de:d9:
a4:ce:fd:37:75:5b:8a:55:20:8f:16:da:ea:c2:2a:
71:f9:ac:3f:c0:2a:0a:7f:6e:a8:86:40:77:98:de:
b1:46:4d:49:5e:2f:8f:47:bd:c6:cf:89:d8:23:76:
24:5f:91:4b:e5:9e:9c:ea:0e:2f:7e:80:69:e8:57:
ca:f0:19:27:84:c5:76:a1:1d:93:be:60:e4:45:a1:
8f:10:d9:ce:f2:33:a8:30:c5:4f:ef:23:a1:6d:6f:
e9:80:0c:79:95:f6:ec:58:05:db:04:4e:f9:f7:39:
ae:91:77:ea:4a:da:fe:8c:e5:13:58:11:17:dd:28:
6b:6a:71:4f:01:36:ed:79:3c:45:6a:97:b2:55:46:
08:ed:90:d4:cc:3b:20:d1:9f:1a:03:d1:50:a1:71:
85:a5:5d:67:03:3c:91:1a:43:22:17:57:20:d6:ae:
dd:28:44:3f:54:52:4c:b6:2a:84:78:0f:92:90:8c:
a8:4b:dc:17:51:11:51:1e:5e:7f:7f:9e:ce:9b:01:
e9:e2:63:80:a7:8b:b5:a5:cc:0b:e0:f0:22:a9:ff:
1b:90:b2:0c:0e:b9:3b:89:ed:72:03:66:fe:53:99:
c7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:EF:97:00:F9:40:DF:3B:11:A2:9A:A6:9A:A7:B0:29:73:F4:33:5D
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133322e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.132.0/22
Signature Algorithm: sha256WithRSAEncryption
60:ab:14:32:53:df:6c:74:24:5c:be:9f:ae:cd:b1:0d:5b:d1:
c4:45:32:66:79:2d:fd:4a:47:f7:b5:34:80:48:93:99:99:76:
bb:a1:c6:23:01:61:9a:0f:6d:23:47:c1:c3:18:78:63:18:af:
00:58:4c:d4:57:0c:fa:3d:c9:a3:4e:62:28:e3:40:49:61:0a:
52:41:17:c7:5d:1e:42:8a:c5:dd:b9:4f:56:14:3a:1e:6f:63:
11:a3:15:e8:c7:00:5d:e3:3d:e9:96:5e:03:a8:b6:6e:9f:64:
8c:2b:b6:c1:cb:84:34:d8:39:f2:66:f5:ee:f4:a3:99:45:64:
ca:69:35:d3:b5:52:8d:de:66:30:47:be:99:bf:f0:6b:69:90:
39:8f:57:16:6c:35:2e:13:f9:f2:21:7f:4a:5e:4f:d4:03:17:
0e:05:e6:e1:a9:2b:ed:24:e8:62:62:84:11:a4:5e:ae:93:dc:
e8:2a:f9:44:e8:2d:9f:74:91:2a:d5:31:80:b4:ba:ab:e0:46:
44:a5:42:69:94:ac:5e:af:8e:2e:bb:17:1b:af:b1:9f:92:ec:
05:7c:4d:5e:4a:72:e6:28:d9:d9:51:01:9a:d7:db:26:2b:a4:
be:9a:3f:94:82:b2:e5:79:b5:66:96:6a:91:9f:eb:a9:2c:3e:
49:ae:be:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 11:42:39 2025 by rpki-client