Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136342e302f32332d3234203d3e20383334.roa
File: 3134372e3132352e3136342e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: NDgZtAjERT3fJDvijKhpVR23vAxKjp6l0hu8te6v/KY=
Subject key identifier: 46:5F:5C:D7:46:A7:CD:AE:8B:C0:AB:5E:FB:52:21:78:DE:60:44:AB
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 48103B63F504BB5680D8405E27AADB0E3DD8C41D
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136342e302f32332d3234203d3e20383334.roa
Signing time: Sat 06 Jun 2026 01:34:18 +0000
ROA not before: Sat 06 Jun 2026 01:29:18 +0000
ROA not after: Sat 05 Jun 2027 01:34:18 +0000
asID: 834
IP address blocks: 147.125.164.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:10:3b:63:f5:04:bb:56:80:d8:40:5e:27:aa:db:0e:3d:d8:c4:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Jun 6 01:29:18 2026 GMT
Not After : Jun 5 01:34:18 2027 GMT
Subject: CN=465F5CD746A7CDAE8BC0AB5EFB522178DE6044AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:91:62:8b:58:22:83:92:7f:be:b4:f1:a9:e3:
67:05:86:92:17:f3:ac:c8:a8:5a:1e:4b:a1:ca:f2:
b8:2a:e1:f8:d8:9a:1b:42:72:f7:8b:11:44:94:74:
b6:f7:db:27:fd:d3:6b:21:26:dc:44:77:40:a9:12:
23:dd:74:84:fb:74:4a:25:aa:6b:3b:34:db:d0:a3:
9b:2f:74:02:4e:f4:7b:72:fb:48:6c:1c:cf:9a:3d:
86:cb:1d:19:c7:f0:4e:1e:92:92:45:4a:74:ed:04:
9b:6f:06:5c:02:eb:4c:59:5f:37:a1:9a:bf:45:18:
76:2b:5e:da:22:1a:86:03:ff:69:cd:a1:54:a5:af:
d3:80:04:42:2c:9a:c2:40:b5:99:aa:17:46:f0:3f:
fe:50:50:fd:1c:3e:99:68:a0:a9:b9:a0:79:41:0b:
54:87:68:b3:bb:be:c1:ad:7b:be:21:24:f4:ce:50:
30:6d:6a:59:a6:75:b1:e0:2e:ff:0f:94:e3:17:f8:
9c:ac:b6:ad:25:ee:24:b5:9c:29:ed:35:48:d7:6c:
de:e5:56:72:fb:58:8d:dd:b6:77:67:7e:42:54:ed:
26:9f:39:f0:e8:fc:7c:29:f2:07:e2:77:f3:f6:e9:
e9:a2:5f:cf:ac:66:42:d4:1b:35:75:42:11:7c:b7:
9c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:5F:5C:D7:46:A7:CD:AE:8B:C0:AB:5E:FB:52:21:78:DE:60:44:AB
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136342e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.164.0/23
Signature Algorithm: sha256WithRSAEncryption
75:aa:10:f9:eb:b8:76:cc:ac:48:fb:d9:f1:c2:e8:0e:dc:20:
7a:21:10:63:e6:c3:5f:44:c5:36:37:ae:23:3e:6a:8e:17:c7:
55:24:10:63:63:c9:b5:a8:9e:f6:7f:e1:5e:85:22:ca:9d:ca:
f8:63:af:b4:55:de:ad:d5:78:cf:d0:73:c6:2d:8b:75:1a:23:
06:69:e7:e7:42:4d:c1:ee:b5:42:77:45:e1:b2:0c:67:5b:88:
5a:ba:ba:ab:3c:fc:41:15:b0:ba:2f:13:71:68:35:c7:a4:84:
a7:61:a6:03:e1:ee:b8:0f:68:77:bb:b5:c7:fa:1c:53:46:c1:
51:21:96:ea:c0:05:de:29:a8:d7:89:e7:16:01:7b:83:21:b2:
f1:ae:22:73:31:88:34:14:df:43:bc:b6:f0:9b:ea:b7:a9:20:
93:0e:50:de:ef:3d:74:15:2a:01:32:1b:56:3a:66:c8:df:2e:
eb:9f:76:f5:89:c2:60:62:39:8b:ec:e5:90:75:c9:58:20:71:
cc:f2:55:af:1f:f1:61:10:63:07:cb:54:27:19:e3:92:ae:7a:
0f:59:49:35:07:9e:d8:bc:f1:2c:14:a3:c4:62:4b:0d:ad:24:
9f:11:93:0c:87:4d:9b:ea:12:c5:af:ad:68:72:5c:29:2b:1d:
b8:85:f4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:45:08 2026 by rpki-client