Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134302e302f32322d3234203d3e20383334.roa
File: 3134372e3132352e3134302e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: G8IdQp8+98TvCoEttENGrMzfqYtnWJ0uZ+DAXkfgT5I=
Subject key identifier: 3C:00:37:03:24:1C:40:4A:9C:EF:75:B9:5F:2B:A1:45:72:2D:D6:B4
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 665988A37CE197A0696CD817A62C87A7F4D1320A
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134302e302f32322d3234203d3e20383334.roa
Signing time: Mon 07 Sep 2026 05:59:52 +0000
ROA not before: Mon 07 Sep 2026 05:54:52 +0000
ROA not after: Mon 06 Sep 2027 05:59:52 +0000
asID: 834
IP address blocks: 147.125.140.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 19:27:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:59:88:a3:7c:e1:97:a0:69:6c:d8:17:a6:2c:87:a7:f4:d1:32:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Sep 7 05:54:52 2026 GMT
Not After : Sep 6 05:59:52 2027 GMT
Subject: CN=3C003703241C404A9CEF75B95F2BA145722DD6B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d4:9c:db:b3:27:d4:01:48:51:64:f9:35:a0:
8b:4e:b3:eb:80:f6:9a:85:4f:e1:9b:42:48:b2:5c:
0b:7b:c4:89:2d:98:09:26:05:c4:26:98:e0:bb:b2:
a1:21:f9:0f:ab:1f:99:89:e8:bc:0a:35:7d:9e:83:
c9:4e:f9:af:b2:4e:57:9d:00:fd:b1:fd:a4:69:0d:
13:49:e9:54:5c:43:11:fa:75:b7:1d:94:29:44:5c:
4e:e7:cd:09:5e:e9:b0:29:66:ce:39:03:20:20:1c:
0b:2f:8b:40:57:06:88:d3:45:4a:34:78:c3:8e:fe:
ff:01:be:5f:6c:dc:27:9c:ad:f8:63:ad:a7:c4:71:
17:c2:8b:e1:4a:66:97:54:26:fb:38:b2:a6:2c:c0:
d3:c8:5b:d8:0e:49:64:c1:17:73:78:52:c9:55:37:
fd:68:f0:20:51:68:4a:b2:f4:b8:31:f9:46:3e:02:
78:92:96:9a:de:13:ea:70:77:ed:e3:1e:04:9c:ed:
f2:cc:99:53:fd:47:17:a3:4c:64:a6:41:a9:fd:69:
86:62:79:5a:87:f8:5c:01:2b:97:49:e8:63:b4:3e:
2d:34:3d:90:86:64:75:ad:28:50:93:9b:ec:87:ec:
7b:da:44:a4:66:bf:ff:cb:7a:86:d7:e4:b2:2b:2a:
21:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:00:37:03:24:1C:40:4A:9C:EF:75:B9:5F:2B:A1:45:72:2D:D6:B4
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134302e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.140.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:44:91:d3:96:bc:04:37:7e:c3:2a:5d:66:12:af:91:8f:a2:
7a:f7:9f:7d:19:06:96:a7:33:b5:a2:dd:2f:cd:af:65:c4:72:
d9:72:fd:67:6a:df:7a:2b:40:1e:14:f6:e1:b0:77:6e:9a:05:
9c:4f:8d:4e:c7:13:ec:84:e3:b5:6d:ae:50:aa:15:32:68:5f:
33:46:a8:bc:20:8c:fe:bd:af:6a:ce:d2:65:8a:e8:5e:d7:ce:
38:70:ff:fb:4b:ee:84:70:0e:dc:59:25:8f:d8:fb:c8:3f:ce:
e9:49:60:da:12:e3:31:46:93:01:50:ff:a3:40:fb:30:a2:e0:
ce:22:31:5a:c2:60:3d:8c:2f:c6:e1:9c:d4:89:4c:51:67:56:
c9:cc:a9:aa:ff:7b:d8:19:b0:ba:64:c0:da:22:3b:57:3f:6a:
13:50:d5:a8:77:82:e9:a2:f9:5a:42:c6:4a:32:6d:94:fe:97:
ba:05:ec:71:11:6c:c6:a3:7f:15:b4:df:c3:7e:3f:b5:85:6b:
a2:ae:fe:d4:c0:03:12:b7:28:59:94:e0:90:1f:96:fb:9e:8a:
8b:51:c3:83:66:bd:1c:ce:0b:9a:c8:18:ee:c2:59:31:15:0d:
2a:cd:9e:60:d4:96:28:c3:8b:84:37:ba:1f:22:db:d1:bb:37:
3b:61:19:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:58:31 2026 by rpki-client