Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136332e302f32342d3234203d3e20383334.roa
File: 3134372e3132352e3136332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: hu85wl1kJccUxOAo3A7KkopwaA9coHXazSMAyVZkU1c=
Subject key identifier: 69:B7:4D:C7:D0:ED:EC:73:03:62:F0:39:41:C9:D7:EE:2C:97:05:B6
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 6259D03938FCDD4B495A550C64AAC006A3400D63
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136332e302f32342d3234203d3e20383334.roa
Signing time: Fri 14 Aug 2026 09:21:16 +0000
ROA not before: Fri 14 Aug 2026 09:16:16 +0000
ROA not after: Fri 13 Aug 2027 09:21:16 +0000
asID: 834
IP address blocks: 147.125.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 02:18:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:59:d0:39:38:fc:dd:4b:49:5a:55:0c:64:aa:c0:06:a3:40:0d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Aug 14 09:16:16 2026 GMT
Not After : Aug 13 09:21:16 2027 GMT
Subject: CN=69B74DC7D0EDEC730362F03941C9D7EE2C9705B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:51:54:0e:f6:6d:8a:81:bf:82:87:47:74:cc:
f5:d0:23:ce:aa:8d:29:9b:d0:7c:df:98:7c:cf:b0:
fb:ef:8f:22:37:be:3b:7e:64:b6:0c:68:df:9d:20:
71:3b:ca:4b:6a:90:ce:7c:71:54:11:58:07:5e:d1:
8e:93:94:92:49:cb:df:cb:a7:34:57:ec:67:1c:dc:
9e:85:e3:21:11:e2:5f:d1:86:1f:8b:2a:62:55:3e:
ad:32:47:7e:cf:e1:7e:8e:39:27:0d:e1:b0:ed:53:
41:85:ec:c7:8e:84:08:90:39:ad:3d:52:3e:21:31:
18:29:41:01:c8:e0:3f:8b:02:bc:92:2d:fe:2d:d1:
96:97:97:dd:eb:cb:6d:ba:7b:95:da:d4:21:95:04:
3c:17:c9:da:ee:69:ae:4e:6a:44:7a:4c:9b:ed:71:
d5:1b:69:bb:9c:3b:d3:1d:9c:ac:76:ad:51:1f:fb:
67:e4:48:68:49:42:f5:28:83:23:ce:7e:a8:83:7c:
35:74:f7:ee:e5:5c:ed:cd:9f:9a:98:78:1c:fd:00:
29:89:b3:42:39:dd:10:a4:ea:f9:01:f2:1a:7b:5a:
b9:a4:a6:32:10:46:9f:29:81:0a:be:50:fa:64:3e:
f7:72:c2:a8:41:84:b5:27:cd:ae:be:5f:2b:5e:a2:
93:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B7:4D:C7:D0:ED:EC:73:03:62:F0:39:41:C9:D7:EE:2C:97:05:B6
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.163.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:46:df:53:18:13:bd:92:8b:d1:c4:92:b3:c2:ec:8e:22:ec:
01:10:42:91:73:19:8d:40:52:0a:37:ff:79:8a:36:d9:00:85:
37:4e:03:33:9e:77:f0:1d:ea:91:72:95:2b:14:6e:da:8b:f4:
c4:51:21:5f:6b:3b:79:6d:ae:6b:ec:7b:df:c6:e4:cd:08:1b:
a3:f0:27:bb:fd:71:cc:3b:d7:31:dd:84:60:04:83:d4:32:00:
bd:fc:46:15:0e:6a:b3:6f:73:57:a7:1a:98:1b:4e:4b:97:5b:
ab:ad:5e:22:2f:bd:24:1a:7d:75:35:63:c0:32:ce:16:96:4a:
51:83:59:57:d1:25:24:d9:63:4b:84:b6:0c:39:1d:0e:9e:17:
13:aa:51:4e:07:92:11:9d:e4:c9:cf:33:99:92:6d:e5:24:99:
13:bd:17:43:b7:48:dd:94:c9:33:5e:ee:56:0c:08:1f:5a:bc:
2b:b4:8b:34:b5:8f:4e:d6:e3:f0:3b:29:3f:ae:f2:cd:25:60:
d6:40:4e:76:38:0d:7e:75:50:8c:f2:3d:ff:1e:d1:08:de:c6:
e9:e0:a1:05:28:b8:80:f0:72:49:55:d1:c5:06:c8:4c:71:55:
30:34:2a:df:c6:88:18:5b:98:65:3f:59:58:87:57:c6:bb:0f:
b8:ac:0f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:47:52 2026 by rpki-client