Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134342e302f32312d3234203d3e20383334.roa
File: 3134372e3132352e3134342e302f32312d3234203d3e20383334.roa (raw, json)
Hash identifier: mqK21U2mw+DalHYGxzMtfd7tDwxnFp2rhSrYghWo1M8=
Subject key identifier: 8E:6F:19:88:C1:19:7C:F5:C8:88:8F:9B:3D:71:19:79:7E:34:56:7B
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 1031C9E4E77ABA96F9AA712E6630E44563A9F914
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134342e302f32312d3234203d3e20383334.roa
Signing time: Wed 05 Nov 2025 14:18:34 +0000
ROA not before: Wed 05 Nov 2025 14:13:34 +0000
ROA not after: Wed 04 Nov 2026 14:18:34 +0000
asID: 834
IP address blocks: 147.125.144.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Nov 2025 05:37:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:31:c9:e4:e7:7a:ba:96:f9:aa:71:2e:66:30:e4:45:63:a9:f9:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Nov 5 14:13:34 2025 GMT
Not After : Nov 4 14:18:34 2026 GMT
Subject: CN=8E6F1988C1197CF5C8888F9B3D7119797E34567B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:44:2a:a8:1e:27:48:32:50:ba:c6:da:8a:3a:
ba:a6:27:17:0e:f0:cc:f2:00:14:7d:00:43:bd:e8:
f2:2c:4d:0d:bf:3b:fe:f5:55:c2:e6:ca:47:61:86:
e8:46:03:d2:79:9b:b8:a7:b9:f6:a7:bf:86:08:cd:
c2:f3:ec:7e:d0:aa:b5:1c:94:a9:87:0a:4c:39:59:
ba:71:05:f0:de:55:68:39:9f:b6:43:3a:15:51:90:
b1:56:44:f2:e9:34:ac:c8:ff:a4:8d:3b:c1:cc:10:
53:02:0e:93:a1:5a:50:be:6f:1d:f3:67:32:e9:6d:
d0:30:9e:5a:3e:46:3e:be:75:ce:3f:fc:60:dd:95:
42:89:2f:5c:d0:24:95:58:aa:23:a8:9c:c0:d0:e2:
67:ea:0b:c5:fd:76:4a:8d:95:fa:0b:94:54:91:3f:
3d:93:cd:1b:6b:63:03:f0:b6:7e:40:b5:01:ed:e6:
da:c9:ba:96:3d:cf:a7:db:ac:6a:f2:9c:e7:15:c4:
16:fe:af:76:4a:04:4c:ff:5c:be:b1:06:b1:24:e0:
2c:e5:18:49:42:ca:58:af:21:da:dc:8a:4a:66:96:
3f:27:4b:2a:e3:ad:0a:6d:67:ff:d8:66:32:0b:cc:
c6:6d:9f:58:d3:80:54:83:dc:e8:05:cc:6a:4a:4a:
13:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:6F:19:88:C1:19:7C:F5:C8:88:8F:9B:3D:71:19:79:7E:34:56:7B
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134342e302f32312d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.144.0/21
Signature Algorithm: sha256WithRSAEncryption
3e:61:53:8d:e9:6f:c1:68:09:85:c9:8d:dd:1b:27:1f:e4:51:
c1:6c:7a:6c:b3:47:ed:5f:b5:e0:bf:3d:96:f0:51:52:b3:90:
e6:92:98:6f:c3:4d:42:0a:09:bd:90:65:e7:59:c9:05:17:2b:
01:1d:ad:22:5e:32:06:32:aa:bb:83:5e:7b:b0:5a:89:85:85:
48:6c:39:8b:37:4d:79:db:89:1b:43:b0:ac:91:1c:8f:96:54:
88:c2:18:b6:f3:5a:83:0b:0e:c1:a2:81:fa:d5:5f:bb:33:84:
14:11:60:04:a2:9c:af:9e:77:c9:d8:ec:77:14:95:e4:7d:0c:
8e:8c:02:e5:c3:b0:43:5b:83:f8:fa:2f:ac:64:c3:e3:ce:01:
74:3d:c8:08:fd:ad:5e:c7:2d:56:ee:f3:52:03:bd:01:72:e4:
e4:8c:c6:bd:f7:3c:9e:40:da:86:9b:e5:ab:e3:d2:b2:ef:8f:
e6:ec:27:3e:f2:b7:07:fe:cc:5a:37:dc:a6:6b:b5:21:b5:ac:
2a:a8:b5:3b:24:90:0e:ad:60:ae:5d:39:26:de:4d:28:0c:62:
67:2a:52:db:4a:14:23:27:87:44:21:25:9d:fe:5a:f0:af:35:
4b:7a:63:a5:ca:2f:79:30:8d:10:5c:29:87:bd:b8:e0:6f:94:
76:28:c8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 11:42:40 2025 by rpki-client