Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133362e302f32312d3234203d3e20383334.roa
File: 3134372e3132352e3133362e302f32312d3234203d3e20383334.roa (raw, json)
Hash identifier: WhifJCzh1c9gk3JIjjZw0MFSBRaaBl6QO0KS3J8yFGQ=
Subject key identifier: AF:3C:DA:F3:15:68:EA:97:D8:15:A5:8F:D9:E2:04:22:C0:4B:1C:82
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 763C6C5271ADE0E4BA53448B164392F06E8FEEAD
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133362e302f32312d3234203d3e20383334.roa
Signing time: Wed 05 Nov 2025 05:37:47 +0000
ROA not before: Wed 05 Nov 2025 05:32:47 +0000
ROA not after: Wed 04 Nov 2026 05:37:47 +0000
asID: 834
IP address blocks: 147.125.136.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Nov 2025 05:37:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:3c:6c:52:71:ad:e0:e4:ba:53:44:8b:16:43:92:f0:6e:8f:ee:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Nov 5 05:32:47 2025 GMT
Not After : Nov 4 05:37:47 2026 GMT
Subject: CN=AF3CDAF31568EA97D815A58FD9E20422C04B1C82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:00:bd:5e:85:1c:13:d5:f0:98:91:68:a0:62:
3d:62:a6:3b:fe:8e:07:2f:5a:39:2b:4c:63:85:fd:
f9:01:a1:d9:78:3f:32:5d:a2:18:d8:c8:05:28:dc:
10:d8:4a:99:16:bc:08:ac:63:d5:36:d2:9b:64:8a:
1e:39:83:88:b5:ec:45:08:b3:1e:2f:6a:d3:06:bf:
74:c6:c6:79:68:0c:d0:c2:2d:80:af:5a:1b:4e:a9:
18:70:60:5a:29:f9:2f:59:df:00:50:0f:30:9a:cd:
af:91:4a:2e:40:0f:e9:36:12:76:ee:5b:b0:95:17:
b7:4e:b2:42:1d:22:65:9e:aa:b2:4d:65:86:94:3c:
de:e9:5b:78:d1:10:45:23:23:01:75:46:23:c6:44:
87:96:81:39:0c:b6:2a:51:5c:0f:63:4e:ba:32:34:
97:88:ba:da:39:8e:12:eb:45:39:5c:5e:08:57:cc:
9b:48:6c:45:01:93:00:e1:c3:a7:e7:45:44:74:67:
30:3f:f9:f8:d1:c7:b9:99:26:d6:85:4f:6d:8a:68:
09:08:c6:26:3d:f0:6e:04:3e:90:f1:35:c8:75:f2:
fe:41:df:d4:4e:d7:ed:8c:97:23:0b:d6:f6:e7:d4:
9d:6f:fd:ab:98:7e:70:1c:9c:77:de:f4:3b:62:38:
ec:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:3C:DA:F3:15:68:EA:97:D8:15:A5:8F:D9:E2:04:22:C0:4B:1C:82
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3133362e302f32312d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.136.0/21
Signature Algorithm: sha256WithRSAEncryption
1b:e4:d9:43:df:18:57:f5:cc:73:4a:51:bb:69:b5:5c:25:cd:
a1:32:9b:78:e9:15:2f:62:dd:6d:de:4d:c1:be:bc:49:dc:22:
77:c5:d3:34:ec:d7:38:93:1b:ae:3f:f7:98:4a:02:d7:98:5f:
58:1b:fd:c1:cf:38:a2:0b:74:a0:e6:14:03:d0:b1:5f:34:e6:
b8:cf:22:f5:c1:d3:ce:18:8a:e6:60:24:d8:2d:47:85:39:03:
46:59:51:3d:32:4d:a7:e9:cf:30:3b:34:84:28:a6:4d:42:7c:
cf:da:1d:33:20:38:3b:13:aa:9b:0c:46:e9:12:9c:2d:cb:f1:
35:47:ec:a0:01:3e:5e:a5:7e:41:24:b1:a6:8f:65:75:d0:62:
16:4c:e0:0a:95:1e:2e:c1:11:f7:a0:a0:da:e3:21:61:af:7b:
4c:e9:13:b5:e2:7d:3f:b1:75:d9:d8:4b:a1:c9:45:aa:39:16:
0b:f2:5a:9a:40:e8:10:f0:fe:05:a0:e9:16:e3:1f:18:a8:00:
a0:69:04:23:4c:cf:5e:d3:d1:00:08:43:6b:4a:08:ab:d4:18:
69:c8:bc:dc:03:50:5c:b5:f0:e7:fb:65:d7:6d:06:22:d7:26:
19:4e:7c:2b:88:af:ca:a1:2c:8b:2c:ac:6b:e2:65:0c:0f:4f:
69:be:5d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 11:42:40 2025 by rpki-client