Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133332e302f32342d3234203d3e20383334.roa
File: 3134372e3132352e3133332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: ZJ0uMTIDyuZp68e6UM6ftJXB+47SQudXk6Cg6ajYKoo=
Subject key identifier: F8:F9:09:13:4F:1A:4E:EA:F7:7C:96:DE:9B:B8:26:BA:D4:A4:A5:4D
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 3AE7381F1387EF0C045875FA7DE9A95D68DEE032
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133332e302f32342d3234203d3e20383334.roa
Signing time: Fri 29 May 2026 03:12:35 +0000
ROA not before: Fri 29 May 2026 03:07:35 +0000
ROA not after: Fri 28 May 2027 03:12:35 +0000
asID: 834
IP address blocks: 147.125.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 04:38:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:e7:38:1f:13:87:ef:0c:04:58:75:fa:7d:e9:a9:5d:68:de:e0:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: May 29 03:07:35 2026 GMT
Not After : May 28 03:12:35 2027 GMT
Subject: CN=F8F909134F1A4EEAF77C96DE9BB826BAD4A4A54D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bf:2d:d2:d0:13:2d:1f:f0:56:bc:0b:55:e3:
e7:67:f9:17:ae:af:e7:a9:27:6a:96:82:dc:7f:29:
cd:31:a4:8c:1b:5e:cd:18:a2:78:cb:c9:9f:fd:80:
cb:10:ce:01:4b:af:3c:c9:cc:0f:2f:7d:85:81:3f:
93:2a:2c:0b:8b:8f:f8:b1:af:be:c5:9c:2d:51:fc:
dd:57:6d:52:05:e1:14:da:2e:ae:f8:75:cd:b3:ce:
02:0e:e8:17:78:21:44:80:5d:96:fe:a4:47:fa:61:
1a:a0:c7:9c:b9:f5:c7:a9:e2:fc:db:92:ff:96:73:
e3:b3:b0:22:77:b0:29:8c:60:0c:ef:69:a7:4e:c3:
92:89:40:1f:64:ad:5b:41:95:ac:02:11:de:56:d8:
8f:79:5d:44:6e:91:2a:ce:94:6e:41:41:1b:e2:57:
29:99:55:9d:b9:13:b9:e2:21:78:c9:bb:da:c8:39:
06:e3:cb:23:44:9a:e7:63:5e:2e:1a:28:4a:03:c8:
8a:28:7a:96:70:1c:ad:56:ff:b0:55:6e:00:18:8e:
cd:f2:b3:7e:fd:fc:dc:cd:85:59:a8:fe:ce:5f:57:
13:53:64:8b:1c:83:78:49:92:02:43:8f:3b:65:a7:
5e:14:70:a6:33:eb:57:41:3e:0e:ed:45:b3:75:92:
43:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F9:09:13:4F:1A:4E:EA:F7:7C:96:DE:9B:B8:26:BA:D4:A4:A5:4D
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.133.0/24
Signature Algorithm: sha256WithRSAEncryption
40:fd:fa:a7:91:de:73:68:81:52:15:97:ac:4e:94:7b:0f:e8:
cd:41:95:b6:33:4e:6f:ae:2e:f0:b9:ef:e5:9c:1b:b8:4f:7b:
a2:82:23:1b:b7:0d:6c:11:92:97:dc:4f:9b:20:75:87:db:c6:
83:9a:b2:45:9e:27:fb:9e:d8:e2:3b:1f:fe:ba:2a:e5:d1:f7:
de:74:1a:80:51:cb:d6:e6:fb:9a:e2:dd:dc:67:78:8e:15:13:
ce:6c:98:36:fd:fa:49:f8:0e:62:88:f5:ae:74:d7:0a:4c:70:
7e:54:38:4b:7c:f9:08:4c:fe:7d:da:d2:12:35:68:30:a5:1e:
70:f7:90:91:da:6a:e1:9e:af:79:45:14:19:19:d1:83:25:d2:
96:4d:04:bc:07:67:53:68:77:b7:07:70:61:f4:40:fe:92:92:
de:6b:78:83:1e:d6:86:f9:55:8a:f0:69:59:b5:32:79:76:42:
3b:16:3e:b0:a3:29:8d:c2:6e:86:34:3d:92:77:8e:0d:59:ca:
7b:bf:61:d1:f0:64:de:4b:a8:70:ec:0a:d4:3b:05:af:f8:9b:
ba:e9:69:c9:03:58:ff:f2:89:e0:e8:97:27:08:36:ad:68:05:
ce:54:da:e5:1b:35:bd:e6:11:d1:16:42:c8:10:d5:9d:54:0f:
49:ce:5e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:05:58 2026 by rpki-client