Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134382e302f32332d3234203d3e20383334.roa
File: 3134372e3132352e3134382e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: 2DjwqVnzs7Z4Yiu8IOq4WAvv33KlZnGkpIbQnEx8UyU=
Subject key identifier: 0C:BB:D1:ED:66:D6:11:83:47:33:4D:C4:90:2B:DD:00:F0:74:8A:8D
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 59BEB346322B87C4D2D6506828B775171BE3223E
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134382e302f32332d3234203d3e20383334.roa
Signing time: Sun 24 May 2026 13:54:44 +0000
ROA not before: Sun 24 May 2026 13:49:44 +0000
ROA not after: Sun 23 May 2027 13:54:44 +0000
asID: 834
IP address blocks: 147.125.148.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:be:b3:46:32:2b:87:c4:d2:d6:50:68:28:b7:75:17:1b:e3:22:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: May 24 13:49:44 2026 GMT
Not After : May 23 13:54:44 2027 GMT
Subject: CN=0CBBD1ED66D6118347334DC4902BDD00F0748A8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:69:94:ed:d0:ce:54:b8:c4:29:3d:21:a8:9d:
3a:24:7e:41:5a:74:c2:3b:56:45:08:ef:e1:d4:a0:
a0:17:93:ea:7b:72:5f:8a:fa:3b:58:09:e4:65:ed:
43:d2:04:7f:35:73:96:d4:25:30:d7:fe:60:45:59:
90:4c:1d:12:8c:e0:2a:22:58:1c:b7:0c:fc:c6:2f:
d5:b2:d2:e8:08:80:6d:0b:88:e4:fc:f1:1e:33:d7:
4f:f9:65:5d:eb:e7:9e:3a:e9:02:92:a5:c7:a5:a0:
40:69:91:4d:31:9f:5a:ab:69:ce:b2:2e:98:53:c1:
cc:7c:44:45:37:d5:c5:8e:4b:71:a5:ca:19:96:94:
4a:05:4a:4f:d0:dc:57:ee:75:6b:b2:44:71:dc:4c:
98:e8:a5:b4:99:ff:d7:25:88:3e:52:16:f7:c2:a9:
29:9d:8d:9e:ce:cf:18:df:6c:2e:13:5a:3c:ee:9d:
45:bd:1a:86:2c:3d:30:07:c3:27:fa:89:fd:e4:ea:
b7:27:87:64:72:26:4c:f9:2e:b3:c7:5d:5d:52:52:
d4:dd:81:1b:ca:88:b3:14:2a:58:12:fc:7e:ac:30:
54:9b:16:4e:2a:bb:bd:0a:13:32:ea:d0:57:3e:a4:
ca:23:71:6a:2f:1f:c2:a2:bf:67:25:3a:3e:28:91:
c4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:BB:D1:ED:66:D6:11:83:47:33:4D:C4:90:2B:DD:00:F0:74:8A:8D
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3134382e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.148.0/23
Signature Algorithm: sha256WithRSAEncryption
22:e8:b3:c2:e1:ee:90:e5:fb:cb:76:df:9d:6f:ed:ab:4b:03:
3a:4d:58:b9:73:ae:5a:be:a7:39:54:bd:1c:6c:c3:81:36:82:
df:a9:20:08:de:cf:3b:13:32:2d:83:c1:b5:af:52:17:83:bc:
d7:4d:e9:3f:d8:a3:99:28:49:f7:1f:cf:5a:97:5b:af:c9:5a:
71:09:9f:d2:d7:3b:b7:50:9f:51:c1:dc:5c:66:53:5b:51:97:
ab:67:9a:4f:a9:0d:72:4b:d8:de:9c:00:22:91:53:e0:58:4c:
8d:cb:61:81:d8:c3:48:00:f6:fa:85:08:62:46:a2:46:89:9b:
fe:4c:b9:82:21:72:e5:60:bd:e3:50:13:c2:8e:91:fa:33:be:
6b:d7:cc:98:cc:2d:37:54:a0:ac:9d:33:5a:2d:83:cf:a7:e1:
99:29:81:dc:40:97:ef:af:af:57:7a:92:7a:8a:57:dc:38:ff:
2a:d3:b8:28:03:05:6e:d2:34:0b:b9:11:19:fe:da:79:50:6b:
fa:b9:a7:08:f6:3e:a9:af:b2:a3:b2:6b:91:e3:4c:a6:a9:18:
99:07:8a:10:28:1c:cf:f9:ab:b9:a0:e9:76:34:f2:25:4d:b9:
0c:79:52:b2:4d:09:bd:a9:92:2c:73:5a:2d:be:bf:e2:af:63:
3e:69:35:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:53:18 2026 by rpki-client