Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138302e302f32342d3234203d3e20383334.roa
File: 3134372e3132352e3138302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: NueqixnwPwBF0ZjeG8dcJ3CID1pPDaNrNFv1icIowwU=
Subject key identifier: E1:92:30:50:B8:8C:52:CF:19:15:56:BA:78:6F:DE:9C:CE:A1:D6:EB
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 490AF6BBE2DFB47FA91DE6DC25A50E3A5DBC89A9
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138302e302f32342d3234203d3e20383334.roa
Signing time: Sun 07 Jun 2026 13:13:43 +0000
ROA not before: Sun 07 Jun 2026 13:08:43 +0000
ROA not after: Sun 06 Jun 2027 13:13:43 +0000
asID: 834
IP address blocks: 147.125.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:0a:f6:bb:e2:df:b4:7f:a9:1d:e6:dc:25:a5:0e:3a:5d:bc:89:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Jun 7 13:08:43 2026 GMT
Not After : Jun 6 13:13:43 2027 GMT
Subject: CN=E1923050B88C52CF191556BA786FDE9CCEA1D6EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b0:85:58:9e:53:5e:98:e2:ba:f4:c3:6d:b1:
63:99:74:7f:60:b8:4a:e3:dc:b8:71:3f:35:e5:4d:
c4:b5:2c:2e:ec:67:fa:66:a9:c0:99:84:b7:15:97:
85:de:fc:17:aa:0f:17:c0:57:d1:08:d7:12:06:cf:
e3:3e:0a:58:69:90:6f:e5:e0:1a:0b:11:2c:ca:7a:
12:16:ab:ed:bf:e3:70:ba:b9:e1:87:d4:94:8c:3a:
ee:46:6e:4c:c4:31:f6:66:3a:76:81:96:0c:c3:35:
1e:f7:e8:ed:18:6d:ad:c6:17:68:86:eb:f0:b4:f3:
4b:46:ce:ab:6a:92:22:88:d5:99:05:3f:a8:21:1e:
31:56:6f:60:3e:cd:40:dc:2c:c5:02:fa:39:fd:ff:
bf:98:f2:ef:e5:e9:aa:ba:82:b4:b8:e8:ee:b6:c6:
c1:30:4a:40:ae:44:e3:8f:2d:02:11:25:4b:04:80:
46:20:87:f7:cd:15:19:fb:46:10:21:9b:15:10:0e:
5a:f2:36:50:d4:8f:b4:96:7f:4d:65:7c:5a:c1:b2:
96:1c:c8:c1:7f:1a:9c:35:a7:6d:4f:36:93:21:0c:
f7:9e:81:df:94:0a:49:99:d2:05:f6:0c:88:6d:0b:
99:45:ab:17:4e:4e:9d:01:77:21:cf:8c:3e:ac:3e:
dd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:92:30:50:B8:8C:52:CF:19:15:56:BA:78:6F:DE:9C:CE:A1:D6:EB
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.180.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:d9:d4:01:b1:5c:c7:97:af:3e:0f:6e:57:d5:cd:f8:d0:e6:
a7:6b:94:3c:2e:ff:ce:ea:13:d4:aa:ad:84:d1:f7:38:c8:86:
c9:de:6b:f4:8e:a2:c5:e8:a4:bc:fe:26:f9:ad:0e:9c:a8:5c:
c7:5a:00:4b:c3:36:22:d9:d3:0f:01:4a:b5:f5:26:03:29:04:
46:cc:ed:56:42:ec:7e:75:0c:aa:b1:6c:57:11:4f:53:4c:06:
35:88:69:6f:28:7c:f2:8d:1c:8f:54:27:80:76:04:f9:fa:4d:
60:f1:d0:31:be:26:73:94:b6:e0:29:ea:0d:cd:1b:d0:7e:56:
f0:06:04:04:d2:d7:e4:a2:56:5f:f7:8d:5e:3f:ca:92:cd:36:
1e:b9:21:b5:d6:6b:da:7b:32:21:98:84:67:af:ca:82:36:62:
c1:8f:a6:06:6f:6e:7c:ee:1d:f8:9e:a7:3a:4f:6d:9a:76:99:
9d:21:e3:96:bc:fd:8b:f5:b2:ec:fa:ad:8a:5d:06:81:f2:e1:
f2:b9:45:8f:a3:39:68:65:02:cf:2f:d2:69:ab:fa:58:9a:65:
58:b5:48:1e:5e:7f:15:4d:37:c7:c2:af:6d:03:0f:2f:ce:a8:
87:3d:4d:96:7d:1b:ba:a6:98:f2:83:88:c5:0b:00:89:89:af:
94:10:0d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:53:16 2026 by rpki-client