Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136362e302f32342d3234203d3e20323033303438.roa
File: 3134372e3132352e3136362e302f32342d3234203d3e20323033303438.roa (raw, json)
Hash identifier: YsLvYWXMOtP2JoIFLUkmqHyc65VaATMZWuo/hFaDpSY=
Subject key identifier: 98:F7:AE:BA:E7:31:64:C1:C6:9C:00:10:59:33:EE:DA:27:A0:FF:11
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 64E34A3534EF38277B44AB8A81E838412BBBE384
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136362e302f32342d3234203d3e20323033303438.roa
Signing time: Sun 07 Jun 2026 03:38:36 +0000
ROA not before: Sun 07 Jun 2026 03:33:36 +0000
ROA not after: Sun 06 Jun 2027 03:38:36 +0000
asID: 203048
IP address blocks: 147.125.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 04:38:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:e3:4a:35:34:ef:38:27:7b:44:ab:8a:81:e8:38:41:2b:bb:e3:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Jun 7 03:33:36 2026 GMT
Not After : Jun 6 03:38:36 2027 GMT
Subject: CN=98F7AEBAE73164C1C69C00105933EEDA27A0FF11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ce:d4:41:d5:98:a5:bb:2c:85:5b:d4:f3:35:
8b:b3:18:68:b4:fd:b7:51:ca:9d:a0:b8:f2:20:a1:
bd:8d:1d:df:0d:f4:17:6c:86:b2:e3:7c:cb:95:73:
ea:76:de:d7:b0:06:8b:57:d0:f4:ed:d1:0d:cf:d4:
7e:be:4b:b8:0c:56:59:67:e5:2b:04:ec:89:7e:c1:
f5:2a:1e:8f:e2:4f:50:95:1b:c6:61:f4:f2:53:b5:
55:92:7a:e0:a1:0c:c4:4e:63:1a:43:fd:b8:1c:5b:
03:49:23:fb:0b:ef:35:2c:6f:b6:9a:22:c5:9e:2d:
ed:6e:f5:7e:2f:de:8c:76:d6:6a:54:4c:a9:8e:ab:
3a:1a:04:42:ce:11:e0:fe:b8:e0:20:0a:d1:0e:f7:
c6:46:77:1b:db:59:f8:df:d5:05:fa:87:5b:bd:8f:
fb:a5:74:6c:31:96:91:0e:b1:c4:e5:f3:24:e6:e7:
18:fd:6c:9c:4f:0b:30:c3:c5:80:87:39:af:3f:4f:
7a:40:f0:33:68:3e:55:9c:e1:21:f9:a4:15:42:2e:
33:dc:8a:99:18:cd:cd:0f:07:0b:a4:d0:4d:5d:f5:
dc:51:00:ea:13:79:09:8f:80:ab:46:59:22:5d:39:
ea:ce:aa:dd:35:d5:c2:2e:c5:40:37:dc:f4:23:6b:
b1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F7:AE:BA:E7:31:64:C1:C6:9C:00:10:59:33:EE:DA:27:A0:FF:11
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3136362e302f32342d3234203d3e20323033303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.166.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:10:cc:25:a2:ff:cf:dc:89:8f:ab:d1:47:bb:5d:53:14:72:
36:69:ec:ec:bf:fe:3e:4e:e1:a6:ca:34:a6:4b:d3:28:e1:bb:
2e:82:70:a2:01:73:a1:91:1c:a7:9c:f7:a1:8d:4f:46:f3:12:
73:9d:e8:e4:d9:db:31:ae:80:31:c5:7f:06:d9:65:30:94:85:
a1:29:9c:ec:99:10:ce:bd:00:4f:c8:70:75:b6:e4:cc:b2:ed:
60:b2:85:d0:cc:f7:d3:95:6e:1b:f3:84:32:94:5a:c8:5e:79:
2e:1b:08:2e:1a:62:da:17:b0:5b:2a:e7:76:64:b3:37:b2:ae:
a2:47:02:74:38:80:de:fc:4c:b6:77:97:97:6b:6b:24:05:e1:
82:35:1b:1f:f6:82:ec:84:27:85:54:3e:bb:03:14:87:59:05:
09:e3:ec:69:4e:2e:2c:4c:ff:e0:35:61:22:e7:db:c8:c9:0f:
82:94:45:55:c4:4a:a3:95:be:b2:00:ef:93:0c:52:27:56:88:
0d:a3:64:95:46:23:b7:94:38:f7:5e:ba:97:69:29:6e:23:94:
73:14:cf:64:b1:16:52:63:83:48:8e:03:4b:34:81:eb:78:f9:
3d:ab:09:4c:8a:61:26:d6:35:54:35:d5:c4:b7:52:3f:81:8c:
95:3e:26:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:33:04 2026 by rpki-client