Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138342e302f32332d3234203d3e20383334.roa
File: 3134372e3132352e3138342e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: OOaAmNH58zJU1i9egxAblEdYxBZxZHzLJoQRx6GTyfk=
Subject key identifier: C1:9C:5E:0A:AF:96:91:6C:4F:A1:71:38:4A:56:80:5A:FC:54:AF:FD
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 340FDA902D7B3CC5FBAFBFD019C1837EC8ABECEA
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138342e302f32332d3234203d3e20383334.roa
Signing time: Fri 05 Jun 2026 16:13:41 +0000
ROA not before: Fri 05 Jun 2026 16:08:41 +0000
ROA not after: Fri 04 Jun 2027 16:13:41 +0000
asID: 834
IP address blocks: 147.125.184.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:0f:da:90:2d:7b:3c:c5:fb:af:bf:d0:19:c1:83:7e:c8:ab:ec:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Jun 5 16:08:41 2026 GMT
Not After : Jun 4 16:13:41 2027 GMT
Subject: CN=C19C5E0AAF96916C4FA171384A56805AFC54AFFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e4:f5:97:0b:f9:63:e9:2b:e5:ca:41:4f:a9:
8c:f6:a1:89:55:25:c5:94:f3:b9:7d:61:c5:d6:64:
d4:1b:be:9c:3a:f7:65:33:73:75:e7:d5:cc:7c:ea:
29:b9:09:80:e6:85:7f:cd:1d:fb:a1:0a:9b:4b:8f:
c0:b8:34:3f:be:4a:f5:96:f8:28:6c:2a:41:e9:ba:
48:50:47:0e:22:67:b2:95:39:f4:53:4f:fa:99:86:
ff:cd:84:27:cf:69:70:dd:be:a1:ad:2a:22:b5:e6:
84:36:96:c5:43:ec:34:ab:18:ef:5c:30:ca:df:47:
d7:47:6e:73:35:6c:9e:1e:d6:cd:90:50:f1:56:d3:
ff:46:3a:9d:ee:fc:70:43:8c:f7:02:36:88:f1:ba:
7a:26:f2:8f:b9:86:87:68:6d:5c:1f:14:16:1b:ae:
10:19:38:6c:b5:56:95:d7:86:8e:da:cd:74:1d:2e:
93:3a:36:f4:f0:91:ca:ae:cc:66:dd:98:7b:f2:0e:
b8:ec:69:d8:76:7b:a8:4c:89:17:66:04:f7:a8:61:
ad:6c:66:b7:47:79:0d:9d:0f:55:db:b6:b0:58:20:
52:3b:29:8c:47:90:3c:91:e5:ee:44:77:d3:91:a6:
87:9a:24:2d:5b:67:5e:96:11:7a:fd:97:7c:32:6c:
0f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9C:5E:0A:AF:96:91:6C:4F:A1:71:38:4A:56:80:5A:FC:54:AF:FD
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3138342e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.184.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:e4:e9:e1:0f:45:4e:1e:20:74:50:bd:e0:59:6f:5d:5e:41:
db:94:ce:ec:0e:04:85:0d:98:f2:ed:4f:cd:53:60:8f:f5:27:
d5:56:c6:00:51:fc:42:79:a7:ed:5e:7d:0d:62:a3:8d:ca:71:
54:34:94:af:4d:58:05:0f:a7:32:26:c5:0a:b1:f9:d7:b5:45:
b0:e1:81:3d:f9:40:b4:39:e7:17:92:6a:f1:fc:9f:0d:81:1b:
98:4e:9c:b8:5b:dc:68:9f:50:99:6d:24:79:2d:3c:a6:a9:ab:
fc:5f:e8:2b:ba:a0:3c:5e:a4:1f:8d:3b:8f:37:34:b3:3b:1b:
8d:0e:b6:2a:0b:8e:ef:a0:21:24:67:83:d4:0e:29:b7:50:7b:
5f:c9:2c:5e:1f:12:5e:a2:43:b9:e4:e8:c0:bd:6c:4b:3a:e2:
79:5b:4d:da:5d:34:d3:cb:95:4b:6e:58:7c:9b:c0:e9:92:bb:
79:5d:fd:a7:10:cd:05:3e:b4:58:9f:2f:ed:9c:01:66:88:ad:
32:3c:99:24:22:df:78:55:d0:4f:be:c6:70:25:f9:76:01:8b:
3b:d2:5f:1c:57:44:70:8f:df:e3:59:cc:04:7c:d7:3c:96:6e:
69:44:7f:75:8b:b7:49:65:73:26:60:00:a5:8e:79:a3:ad:10:
c5:9c:da:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:53:26 2026 by rpki-client