Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137362e302f32322d3234203d3e20383334.roa
File: 3134372e3132352e3137362e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: Pmaq07cN4Kd4E5tPSb2nx1Ct9Ywj1FLRdgsDWM1MGyU=
Subject key identifier: 0B:EB:52:7F:11:C4:17:18:7A:6F:F3:12:39:92:0B:DD:65:8C:A4:C7
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 55025C9F799FEF4F8852D6060D71C2E3AC9A7B78
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137362e302f32322d3234203d3e20383334.roa
Signing time: Wed 23 Sep 2026 07:10:45 +0000
ROA not before: Wed 23 Sep 2026 07:05:45 +0000
ROA not after: Wed 22 Sep 2027 07:10:45 +0000
asID: 834
IP address blocks: 147.125.176.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:13:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:02:5c:9f:79:9f:ef:4f:88:52:d6:06:0d:71:c2:e3:ac:9a:7b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Sep 23 07:05:45 2026 GMT
Not After : Sep 22 07:10:45 2027 GMT
Subject: CN=0BEB527F11C417187A6FF31239920BDD658CA4C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:06:97:04:e7:63:67:82:f8:22:ec:e3:b8:56:
6f:9a:6a:66:48:35:2c:a7:1f:bc:39:f6:9c:a5:73:
7d:26:d5:55:a6:1e:95:f6:4e:a7:40:c6:26:35:bb:
e5:14:e2:29:36:2e:7c:9b:c5:84:ad:a6:5d:8e:39:
b9:46:e7:b4:c8:e4:9f:51:83:a8:fe:85:12:a2:df:
c5:88:4a:04:b4:64:40:d7:8a:c2:c4:10:f5:86:5b:
0d:60:cb:4c:2e:9d:91:3e:e9:37:f7:5d:c0:78:de:
d2:af:fa:7e:7a:64:80:24:8f:8d:db:70:a2:b0:7f:
1f:23:47:81:8a:63:97:40:1b:af:f2:e0:aa:b8:ba:
3a:ee:54:c7:50:f3:3a:b6:00:ff:d6:c5:81:03:30:
be:e5:cc:64:97:e6:a9:db:2b:32:7f:98:49:be:1c:
ce:eb:af:d6:01:31:d8:cd:8d:4c:bd:aa:30:d5:e1:
d3:bb:57:e3:61:89:21:89:e1:55:7b:1c:c2:a9:b0:
92:87:35:6a:6d:7f:c7:c3:3e:6a:73:f4:33:27:57:
14:70:77:dc:11:74:df:72:05:89:63:53:8e:07:f7:
ce:02:d8:64:7b:3b:ed:83:54:75:f7:38:23:c9:74:
f1:26:18:47:e5:5e:a2:65:79:56:49:3c:0b:ca:09:
8a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:EB:52:7F:11:C4:17:18:7A:6F:F3:12:39:92:0B:DD:65:8C:A4:C7
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3137362e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.176.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:a5:14:fc:78:c2:87:03:9c:e1:12:4c:6a:5b:32:c3:a9:3f:
f7:93:cd:07:85:93:f8:9c:39:c2:0f:30:ac:b2:5e:76:60:47:
a4:60:e6:26:63:d6:4c:69:d1:13:8c:34:37:9f:65:d7:4d:6d:
b3:6c:93:6c:b8:85:9e:6b:bf:a7:54:e6:ff:14:17:d6:0a:33:
05:73:fb:bf:ab:47:cd:12:04:ec:ce:95:dc:bd:19:59:03:f7:
df:0e:00:a4:0c:52:44:f7:2f:2f:2c:6b:75:41:9d:af:1a:a2:
d6:23:34:aa:f2:8f:da:7a:0b:74:49:6b:0d:be:94:83:75:24:
43:3d:33:63:38:0f:7c:4f:86:9d:a2:d3:3b:cc:ce:73:92:c1:
05:a7:7f:df:ca:81:3a:7a:75:b5:b2:a5:c1:13:66:00:4c:08:
94:18:1b:4f:e7:3e:e7:d1:dd:c2:6e:50:12:8c:eb:e8:f7:24:
8f:91:34:f9:8b:62:9b:d5:ea:a6:5d:68:c0:d1:7c:a3:51:9e:
27:09:13:b6:0c:39:53:9b:ee:c9:79:a6:03:51:cd:e5:26:cc:
cf:a5:ea:02:91:40:33:b1:8c:d2:48:ef:e6:9c:08:e2:3c:1c:
f1:7f:d6:32:49:b2:54:15:03:2f:56:5a:47:9e:dd:8d:97:b9:
e5:58:41:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:40:47 2026 by rpki-client