Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136302e302f31392d3234203d3e20383334.roa
File: 3134372e3132352e3136302e302f31392d3234203d3e20383334.roa (raw, json)
Hash identifier: +XPNxPh8nGU79Wv5Lz96N7UCpPYPi2ze/uLx8VGTuHo=
Subject key identifier: 12:22:F4:95:00:3C:FA:EE:F9:8D:EC:3F:BC:20:98:CE:B0:F6:C7:B1
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 27D9F27F5160CA3CD52C8FAE36B91C99E0640412
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136302e302f31392d3234203d3e20383334.roa
Signing time: Wed 05 Nov 2025 05:37:47 +0000
ROA not before: Wed 05 Nov 2025 05:32:47 +0000
ROA not after: Wed 04 Nov 2026 05:37:47 +0000
asID: 834
IP address blocks: 147.125.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Nov 2025 05:37:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:d9:f2:7f:51:60:ca:3c:d5:2c:8f:ae:36:b9:1c:99:e0:64:04:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Nov 5 05:32:47 2025 GMT
Not After : Nov 4 05:37:47 2026 GMT
Subject: CN=1222F495003CFAEEF98DEC3FBC2098CEB0F6C7B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c2:d9:5f:81:41:bb:e2:ce:3f:89:74:b4:b1:
d4:36:57:dd:fb:86:d7:f0:34:60:d8:e9:9d:d1:3a:
8a:9b:dc:f5:ed:38:9e:e8:97:77:7b:90:62:38:85:
43:70:a5:fe:2d:f1:1b:30:ed:17:3a:8c:26:57:6f:
1a:64:30:95:10:57:11:39:4f:e4:0d:c5:c0:40:54:
40:77:5e:d8:a6:72:4f:43:d8:04:2a:c7:f1:5a:07:
bb:3b:cf:4b:ec:6a:59:cc:57:8a:66:ff:82:8b:d7:
97:a6:59:d7:0b:da:ed:4b:d9:de:5a:12:1e:bb:b1:
b4:5e:84:ab:e0:56:81:1f:09:91:83:6d:31:26:5e:
b1:a0:24:fb:5a:f6:69:73:66:bf:56:77:98:d9:37:
6a:f2:4c:09:8f:bc:17:2a:16:ca:89:7d:7f:e8:15:
c7:78:34:0a:8c:d1:dc:c7:50:a6:07:cd:c6:da:66:
e6:9b:5b:9e:19:5f:1c:83:a5:03:ef:16:00:a3:6a:
52:a2:24:c5:1d:93:ee:40:5c:f4:ab:34:ad:ac:f8:
7f:d4:f9:67:58:a8:c2:f7:cc:61:8b:d0:32:ca:45:
37:52:34:4c:f3:ee:25:ee:9d:dc:09:83:e8:f6:76:
7e:36:24:4c:e8:b3:f8:62:a4:9d:10:2e:4a:27:ce:
4b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:22:F4:95:00:3C:FA:EE:F9:8D:EC:3F:BC:20:98:CE:B0:F6:C7:B1
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136302e302f31392d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.160.0/19
Signature Algorithm: sha256WithRSAEncryption
89:aa:9e:d4:98:07:c3:b6:59:57:ad:7d:c9:b4:5d:48:c9:95:
87:cf:6c:ca:a8:45:0b:ca:91:b9:41:76:1d:4e:03:74:7a:69:
27:95:92:65:6e:fc:9d:d7:cf:82:8f:69:09:41:86:fc:dc:ae:
d4:86:b2:23:29:e8:45:d0:55:be:d5:90:1e:95:6a:40:16:d6:
2c:5b:c2:0f:07:77:b8:a9:3f:c5:53:76:d8:8e:eb:25:5e:32:
3e:ad:4e:15:14:6f:54:e0:8a:1b:74:81:7b:e6:4c:92:1c:61:
fb:f1:19:fb:53:a5:ee:ca:1e:96:d0:55:5a:82:31:a8:74:00:
b3:f3:2b:5d:c0:1a:5c:75:88:02:d7:c6:72:af:13:a2:46:1a:
be:a9:18:95:6a:32:a9:ee:c8:ab:14:0e:01:96:45:d7:b4:93:
91:04:39:99:ad:bf:91:75:f7:90:18:82:8a:27:0f:bf:42:f9:
54:1e:42:55:b6:22:1d:50:ca:4f:ac:6d:0d:7f:68:44:aa:43:
ca:56:f9:fa:70:77:d9:cf:39:9c:27:1a:aa:34:c0:d9:0f:67:
ae:22:ed:08:a2:f3:3a:ca:f0:0f:1f:0b:b5:2e:95:71:9a:08:
a8:7a:81:62:74:73:56:19:42:d3:39:8d:7d:6f:8e:4d:33:16:
f8:cc:78:ac
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUJ9nyf1FgyjzVLI+uNrkcmeBkBBIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl
YjVhNzZlYTAeFw0yNTExMDUwNTMyNDdaFw0yNjExMDQwNTM3NDdaMDMxMTAvBgNV
BAMTKDEyMjJGNDk1MDAzQ0ZBRUVGOThERUMzRkJDMjA5OENFQjBGNkM3QjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5wtlfgUG74s4/iXS0sdQ2V937
htfwNGDY6Z3ROoqb3PXtOJ7ol3d7kGI4hUNwpf4t8Rsw7Rc6jCZXbxpkMJUQVxE5
T+QNxcBAVEB3Xtimck9D2AQqx/FaB7s7z0vsalnMV4pm/4KL15emWdcL2u1L2d5a
Eh67sbRehKvgVoEfCZGDbTEmXrGgJPta9mlzZr9Wd5jZN2ryTAmPvBcqFsqJfX/o
Fcd4NAqM0dzHUKYHzcbaZuabW54ZXxyDpQPvFgCjalKiJMUdk+5AXPSrNK2s+H/U
+WdYqML3zGGL0DLKRTdSNEzz7iXundwJg+j2dn42JEzos/hipJ0QLkonzkvBAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUEiL0lQA8+u75jew/vCCYzrD2x7EwHwYDVR0j
BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy
NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0
YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt
YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx
MzYzMDJlMzAyZjMxMzkyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBZN9
oDANBgkqhkiG9w0BAQsFAAOCAQEAiaqe1JgHw7ZZV619ybRdSMmVh89syqhFC8qR
uUF2HU4DdHppJ5WSZW78ndfPgo9pCUGG/Nyu1IayIynoRdBVvtWQHpVqQBbWLFvC
Dwd3uKk/xVN22I7rJV4yPq1OFRRvVOCKG3SBe+ZMkhxh+/EZ+1Ol7soeltBVWoIx
qHQAs/MrXcAaXHWIAtfGcq8TokYavqkYlWoyqe7IqxQOAZZF17STkQQ5ma2/kXX3
kBiCiicPv0L5VB5CVbYiHVDKT6xtDX9oRKpDylb5+nB32c85nCcaqjTA2Q9nriLt
CKLzOsrwDx8LtS6VcZoIqHqBYnRzVhlC0zmNfW+OTTMW+Mx4rA==
-----END CERTIFICATE-----
Generated at Fri Nov 7 11:42:41 2025 by rpki-client