Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138332e302f32342d3234203d3e20383334.roa
File: 3134372e3132352e3138332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: qLCilMAT//IpcpOymh/N+vRS8ggQDLd2dAROMSiTTCw=
Subject key identifier: 59:EE:EB:AC:A6:C8:22:44:B7:21:59:2A:D4:7E:77:58:4B:2B:43:89
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 7F245C05CF43238EA74AB775B92A212EE8E6E826
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138332e302f32342d3234203d3e20383334.roa
Signing time: Sun 07 Jun 2026 09:16:10 +0000
ROA not before: Sun 07 Jun 2026 09:11:10 +0000
ROA not after: Sun 06 Jun 2027 09:16:10 +0000
asID: 834
IP address blocks: 147.125.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:24:5c:05:cf:43:23:8e:a7:4a:b7:75:b9:2a:21:2e:e8:e6:e8:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Jun 7 09:11:10 2026 GMT
Not After : Jun 6 09:16:10 2027 GMT
Subject: CN=59EEEBACA6C82244B721592AD47E77584B2B4389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:89:38:35:0f:bf:88:ff:30:18:1e:cb:be:4b:
5d:17:f2:1f:ed:9a:54:4b:15:97:e7:7a:1b:d5:d0:
62:ef:bd:d7:95:77:46:21:10:00:64:66:b0:5f:7a:
52:bb:0f:72:a3:32:d5:76:74:ed:e4:12:ac:cb:19:
8c:cd:50:a2:dc:6b:53:52:d8:44:28:7f:d9:22:9f:
2c:03:72:c6:ea:22:d8:aa:2c:53:60:48:11:06:7d:
d5:36:4a:61:55:bc:87:10:3f:38:ab:ba:22:fd:b2:
74:7d:1d:ad:53:7e:97:81:6f:02:ed:ac:d6:ef:70:
20:73:04:68:41:85:e3:d8:eb:cf:22:d0:d3:5b:6b:
ed:e5:47:74:fa:6d:59:0c:a3:f0:0c:71:2f:9d:dd:
2e:f8:71:45:f0:52:97:08:5b:7c:9d:ef:8f:49:2a:
a4:51:8e:13:9b:51:6a:36:ec:1f:5b:df:43:34:0d:
d0:f0:d1:02:3c:80:60:a3:5f:db:b9:cc:f1:80:f3:
b9:85:5a:46:ff:c6:65:5c:e6:b2:62:cd:45:19:61:
f4:52:d1:eb:6c:47:43:b5:93:5e:c3:35:7e:9d:d6:
16:40:38:43:d7:01:55:8c:ea:b0:47:a9:6f:45:3f:
10:b8:e2:cd:5c:3f:bf:cb:34:d4:95:ff:ad:76:0c:
fe:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:EE:EB:AC:A6:C8:22:44:B7:21:59:2A:D4:7E:77:58:4B:2B:43:89
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.183.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:4b:b2:8a:71:f6:3c:e0:d3:33:27:41:2b:f4:96:46:fb:e7:
83:1c:44:82:fb:18:b8:b5:6f:8e:69:0d:c0:dd:e3:c8:4e:08:
e1:ed:69:ca:1b:a8:9f:c0:c7:ff:60:2e:ca:ba:98:7d:13:68:
94:5f:da:6c:d9:e7:7b:77:db:19:a0:7c:0c:4c:51:84:ef:f2:
78:92:59:22:8d:56:ae:d8:ce:91:17:dd:71:40:74:dc:02:30:
d0:fc:cc:b6:04:2f:3d:9c:5f:5c:9b:cc:c2:d3:55:c2:fd:f6:
28:59:70:17:dd:ab:95:20:aa:83:a3:98:05:58:2e:90:78:46:
58:db:cb:21:65:26:b1:fa:d0:c4:ae:03:33:b4:2b:e4:91:77:
51:73:bd:c3:e8:e6:6b:de:fc:53:32:db:65:d4:0a:4f:40:83:
c0:d6:23:6c:9f:0d:c2:ae:b1:81:a0:17:b3:fb:94:e0:88:0b:
ea:d7:e5:4d:e6:07:cf:14:91:a9:6e:cc:3c:e2:04:cb:c1:65:
fb:d9:f2:fd:be:24:2e:71:ba:94:59:df:12:b8:4b:74:58:21:
eb:42:9a:b5:78:00:ea:c0:76:e3:f3:f3:a3:58:b1:3c:a2:b9:
02:ed:aa:47:65:44:42:da:95:e5:49:1b:8c:db:8b:62:69:58:
e6:8d:ba:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:53:05 2026 by rpki-client