Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133342e302f32342d3234203d3e20383334.roa
File: 3134372e3132352e3133342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: mpRZoYdRjhQnjuHyittk/Yw3jFARXy32AGPfIhgc1c0=
Subject key identifier: 66:AE:C8:68:61:5E:5D:B8:DA:A7:BC:91:D6:95:2D:2F:BF:E3:AE:E3
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 58A04ED91557FD62FFF17A3DD66D03A909190553
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133342e302f32342d3234203d3e20383334.roa
Signing time: Fri 29 May 2026 13:06:48 +0000
ROA not before: Fri 29 May 2026 13:01:48 +0000
ROA not after: Fri 28 May 2027 13:06:48 +0000
asID: 834
IP address blocks: 147.125.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:a0:4e:d9:15:57:fd:62:ff:f1:7a:3d:d6:6d:03:a9:09:19:05:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: May 29 13:01:48 2026 GMT
Not After : May 28 13:06:48 2027 GMT
Subject: CN=66AEC868615E5DB8DAA7BC91D6952D2FBFE3AEE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f3:37:1b:49:b6:ff:cb:10:82:9c:ca:c7:3f:
c5:7f:51:cb:e5:8c:cf:1b:b2:e1:d4:e0:2e:67:dd:
55:31:ab:c0:21:51:33:20:52:95:9c:85:bb:f5:12:
e0:1e:ad:78:19:ce:6f:35:f3:f1:61:7b:50:55:43:
f4:35:df:ec:36:ae:8a:d6:48:ac:5b:7e:77:58:ad:
8c:31:ae:14:3f:71:65:26:34:c4:e0:13:fb:ae:d0:
e5:c3:79:1a:74:00:f9:84:2d:f1:53:79:5a:e0:d4:
fd:c4:a4:1c:ff:b4:4c:b6:1e:17:4b:8c:34:42:3c:
c8:9a:da:41:40:35:9e:de:d8:71:26:e6:9c:20:3c:
24:a3:24:be:3d:bd:2b:0b:f2:82:31:2a:45:8d:2b:
04:d4:53:8b:18:d6:e7:d9:58:66:20:29:1d:f0:39:
ec:58:1a:11:69:e4:35:9a:dc:ed:f5:71:b1:64:d6:
11:ff:70:2a:36:91:7c:55:bf:01:bc:60:d9:6d:c7:
52:8d:18:cd:bf:64:c9:57:18:3f:14:83:ae:b6:f2:
05:ed:14:7d:79:2f:93:26:a2:38:6b:97:97:84:3a:
84:9c:83:ba:11:8c:24:94:a2:10:90:35:c3:8f:a8:
36:8a:35:75:7d:8d:ed:b6:cd:05:69:6f:d9:a4:77:
2b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AE:C8:68:61:5E:5D:B8:DA:A7:BC:91:D6:95:2D:2F:BF:E3:AE:E3
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.134.0/24
Signature Algorithm: sha256WithRSAEncryption
94:bc:68:50:34:65:21:bd:ec:0b:05:81:87:18:e2:07:9c:a1:
54:eb:9a:68:a5:58:b3:39:0e:0c:dc:e5:b0:07:97:53:40:94:
16:d1:24:5c:f1:c4:28:b2:ff:5e:76:c3:b0:ea:a4:ba:95:92:
58:bf:50:17:e9:70:f8:df:2a:d2:6c:69:d4:7a:21:16:2a:da:
da:5c:13:09:d6:2c:10:fa:49:9e:8a:3f:74:2f:17:4e:e7:f6:
04:d8:52:38:7c:7a:92:25:30:00:be:59:da:22:dc:52:49:b6:
10:7f:07:54:a6:db:69:e3:13:48:30:30:66:c6:b9:4e:b0:a5:
99:38:d6:46:3a:75:dc:05:a5:19:49:3e:3a:10:08:01:61:77:
de:c4:72:9b:28:6d:b0:7a:4d:ab:ca:44:19:17:5c:49:c9:d9:
5b:60:66:7a:ba:6c:0a:11:3e:a6:4b:16:02:4c:58:9d:76:bf:
c3:3c:13:da:ab:14:71:19:b8:ba:20:f7:19:3a:07:7e:3c:fa:
b1:6b:76:28:51:00:f4:9f:a2:c8:10:04:ed:b8:97:81:55:3c:
bc:ad:25:27:8e:a3:13:f2:14:4c:4a:69:89:2e:a8:c1:49:a0:
2c:84:39:6c:64:b9:e6:e5:8e:99:68:4a:35:1e:ad:f2:d2:0c:
08:ae:51:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:51:25 2026 by rpki-client