Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136352e302f32342d3234203d3e20383334.roa
File: 3134372e3132352e3136352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: GJuUSZehSxzcBYuTytxfNRq1V8QU+QVt5mExOQOqAFw=
Subject key identifier: 6A:41:28:00:18:3C:40:53:B6:B7:5B:C6:94:7A:17:6F:08:66:BC:3C
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 70D0319E5755E0857C150D946F01B764CD5AA89B
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136352e302f32342d3234203d3e20383334.roa
Signing time: Sun 23 Aug 2026 07:16:23 +0000
ROA not before: Sun 23 Aug 2026 07:11:23 +0000
ROA not after: Sun 22 Aug 2027 07:16:23 +0000
asID: 834
IP address blocks: 147.125.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:d0:31:9e:57:55:e0:85:7c:15:0d:94:6f:01:b7:64:cd:5a:a8:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Aug 23 07:11:23 2026 GMT
Not After : Aug 22 07:16:23 2027 GMT
Subject: CN=6A412800183C4053B6B75BC6947A176F0866BC3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:90:65:4f:2c:19:aa:7a:b6:d9:f0:88:ce:e4:
2d:0c:2f:5e:4c:b2:17:b9:88:48:c1:87:e7:11:6f:
08:29:3e:4f:b0:8d:41:d9:31:df:9e:2d:2f:c3:5e:
47:3d:59:62:c1:69:52:14:90:4a:b6:13:11:ae:9b:
b6:a4:f2:08:d8:08:d3:d5:2f:19:89:86:fd:01:a1:
e3:9c:57:97:70:0d:cb:a4:ee:c6:85:fb:6c:39:8c:
22:3d:30:60:ca:1f:ca:71:d2:0f:26:df:5e:42:ad:
2a:92:e2:2c:2a:f4:83:2c:e8:a5:04:a0:87:8f:ce:
21:7a:63:4c:51:95:0e:15:41:59:54:3a:dd:7c:72:
30:92:97:80:9c:c2:77:e5:06:e3:b4:50:a8:36:ab:
eb:d0:5f:4a:e5:a2:df:4d:50:c6:df:9b:ae:61:52:
7d:38:c9:1d:f5:d8:b7:da:27:f1:c1:87:60:94:e8:
f6:df:d9:a4:62:70:9a:40:d2:06:f0:9b:35:04:ec:
89:30:ef:9a:df:fc:14:2a:fe:cf:95:6e:92:46:4b:
b1:63:3e:18:44:a2:8b:bd:bc:f1:4f:86:f0:af:0c:
2c:dc:33:49:14:82:c3:e3:df:06:02:4d:23:53:1a:
5d:91:42:b0:50:d0:26:ee:1b:b9:47:46:9c:1b:15:
7d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:41:28:00:18:3C:40:53:B6:B7:5B:C6:94:7A:17:6F:08:66:BC:3C
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.165.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:3e:74:7e:e8:98:0f:31:0d:ae:a7:bd:27:37:97:81:94:c4:
0f:1a:7f:13:6c:b4:3c:18:ad:e5:e3:c2:34:aa:04:f9:81:7a:
61:cc:0a:00:5a:39:cf:08:d7:8c:1b:51:24:ad:11:16:91:5c:
de:50:76:89:1a:56:19:d1:63:6d:c7:a3:db:f3:ce:98:d0:25:
b3:61:6f:67:5b:c2:e8:b9:c9:04:49:2a:71:49:ec:dd:32:b2:
9c:1f:7b:1a:d0:2a:ab:b9:ba:df:c3:94:db:09:ea:02:ee:e1:
bd:62:bb:4e:c5:cc:d5:68:e0:41:21:59:12:ab:64:50:a4:f2:
a2:38:19:10:08:41:5a:e5:aa:25:99:af:92:00:89:bf:50:9a:
85:5d:e2:5e:6e:7e:03:13:4a:2c:6f:57:82:3d:61:b5:87:c9:
94:f9:4c:da:0f:d8:ee:af:b1:5c:f9:a6:87:f9:63:51:88:94:
d1:eb:6c:82:c9:47:11:5b:48:ce:46:02:6d:fc:cf:4d:44:47:
45:7b:38:eb:02:88:fb:66:58:29:6f:7a:59:4a:82:0b:e7:0f:
2d:68:30:00:f8:b2:06:99:74:15:87:73:cb:f7:16:b5:bf:ed:
7a:50:2d:37:89:fa:9c:95:66:da:95:7f:e0:50:5d:b2:ff:63:
50:bb:54:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:22:43 2026 by rpki-client