Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136312e302f32342d3234203d3e20383334.roa
File: 3134372e3132352e3136312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: scM2D9MH24YFcVjEUPyQbB2EeRYFQXE5ThKzFlc3Fdk=
Subject key identifier: 34:69:17:99:51:A7:C2:4C:CD:FD:B7:D2:C6:3D:B4:E3:75:22:AC:88
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 5BE4F8B7B5240C10A0132130E23D91A85BEEAA6F
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136312e302f32342d3234203d3e20383334.roa
Signing time: Mon 07 Sep 2026 06:24:22 +0000
ROA not before: Mon 07 Sep 2026 06:19:22 +0000
ROA not after: Mon 06 Sep 2027 06:24:22 +0000
asID: 834
IP address blocks: 147.125.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 02:18:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:e4:f8:b7:b5:24:0c:10:a0:13:21:30:e2:3d:91:a8:5b:ee:aa:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Sep 7 06:19:22 2026 GMT
Not After : Sep 6 06:24:22 2027 GMT
Subject: CN=3469179951A7C24CCDFDB7D2C63DB4E37522AC88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:94:93:22:98:ad:61:53:1f:86:f4:9e:21:aa:
63:10:ed:08:72:1f:7b:6f:09:28:aa:7a:1a:1e:fe:
ee:dd:28:d5:85:e2:da:06:9b:95:46:90:ea:a8:31:
47:e5:8a:a1:5e:2c:ce:ca:0a:35:eb:48:6e:08:20:
01:9c:e1:3d:62:9d:ad:ae:d6:fa:0c:9d:8c:75:bd:
c7:ea:c8:01:f2:7a:ca:da:ea:43:97:09:f3:1b:6a:
50:a7:1c:f1:bf:4c:a0:c1:ea:9c:8a:0e:1e:61:c3:
f1:59:f8:fc:54:a9:d7:40:9e:d8:6e:39:b2:fb:48:
cc:28:05:72:c9:2d:29:89:bb:fd:1d:13:4a:9b:cb:
36:2e:a3:2b:28:a8:91:86:c2:9e:4d:21:1f:e6:e7:
43:9f:ad:b8:47:e0:d4:40:6d:22:67:ed:ef:8e:1d:
57:46:c8:dc:b7:fc:04:49:f0:c7:c9:90:df:fb:d2:
7f:f6:9c:8f:14:c1:3b:e0:2a:41:da:8f:ce:a6:30:
0d:4f:a1:5c:e4:24:1a:16:ed:1d:b3:4f:b8:81:6d:
66:f3:30:0d:29:6a:0b:57:c0:31:43:68:ba:2a:51:
c9:5a:2c:13:9f:4d:74:e0:9d:63:29:35:98:38:8f:
ec:0c:6c:e4:75:10:f3:73:4f:fe:42:61:af:79:2f:
5f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:69:17:99:51:A7:C2:4C:CD:FD:B7:D2:C6:3D:B4:E3:75:22:AC:88
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.161.0/24
Signature Algorithm: sha256WithRSAEncryption
22:ed:58:4e:71:5f:ae:5c:c0:86:6a:da:61:3b:ce:ca:ad:32:
d7:6c:78:77:b6:e3:9a:d8:7b:fd:55:77:18:59:d7:f5:4d:e6:
dd:d9:7a:0c:32:ca:c2:12:c6:70:cd:10:3b:68:1d:5e:dc:36:
fc:b8:d2:3b:1b:be:32:2b:ec:0d:dc:30:e4:7d:8a:bb:c4:d4:
d6:1a:4f:70:6e:18:af:2c:29:83:23:db:8f:61:c7:23:fb:12:
30:52:a2:14:d4:80:1d:64:eb:2b:bf:6e:c3:6a:2e:6d:ce:c2:
58:8e:d4:69:96:66:d4:46:7a:25:29:ae:87:80:90:6c:64:f2:
91:29:65:4e:35:8e:40:21:d7:d0:1b:ea:98:9e:cf:9b:0e:03:
c6:6f:54:b1:72:82:1a:c3:74:c9:a0:d1:1d:45:03:e6:79:e7:
87:52:19:ad:2c:89:f1:7c:9f:3f:0d:8a:38:01:8a:a7:48:e7:
c8:cd:41:f5:96:64:d5:a0:a5:4f:ae:80:f9:fe:e4:01:73:7b:
ee:89:a6:c5:1a:66:6c:fa:01:4b:70:f4:48:91:3e:2e:ad:73:
29:73:52:6f:cc:f2:99:2a:40:34:b8:42:b1:2e:f6:10:30:8e:
ed:fd:29:f6:d8:c9:54:ad:2a:81:d4:d6:89:d1:97:42:6f:d6:
54:df:62:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:36:12 2026 by rpki-client