Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139302e302f32342d3234203d3e20383334.roa
File: 3134372e3132352e3139302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 9Fh1FEljV2/Za7N67CYLpTYGvAUNmk1jP9moIcd1VV0=
Subject key identifier: EE:7B:A8:E6:2C:62:DB:30:10:E5:AA:12:20:A2:54:DE:09:2D:44:58
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 7A3DF584C5DF499B0CB37560DD61BD1F9AA2B825
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139302e302f32342d3234203d3e20383334.roa
Signing time: Thu 28 May 2026 05:01:43 +0000
ROA not before: Thu 28 May 2026 04:56:43 +0000
ROA not after: Thu 27 May 2027 05:01:43 +0000
asID: 834
IP address blocks: 147.125.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:3d:f5:84:c5:df:49:9b:0c:b3:75:60:dd:61:bd:1f:9a:a2:b8:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: May 28 04:56:43 2026 GMT
Not After : May 27 05:01:43 2027 GMT
Subject: CN=EE7BA8E62C62DB3010E5AA1220A254DE092D4458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:5f:aa:ed:ec:a3:11:57:dc:df:6d:e6:59:5d:
0b:e9:29:6a:d0:2f:a3:b7:ea:47:7f:cd:28:cf:73:
6c:97:bc:08:4e:27:4d:38:37:c7:58:fa:52:82:73:
29:18:d0:82:0a:22:5c:e8:ed:dc:59:49:77:c1:88:
98:08:97:64:14:be:2e:f0:1a:d3:36:7c:cf:b7:36:
aa:54:2d:ea:15:03:32:26:ca:6b:17:5e:f1:ed:07:
87:99:fa:f5:34:06:77:96:6c:db:c1:cf:f2:b8:f2:
9b:bb:08:88:78:cd:4a:b2:64:8a:4e:c8:40:d9:74:
f5:2f:f1:de:40:1b:b6:ab:ba:37:c6:81:17:1c:6a:
cc:01:7a:ca:b0:d7:9e:06:a4:18:cf:50:66:fe:30:
87:79:8f:d4:71:e8:19:92:45:33:d5:77:d1:a7:38:
05:e6:ab:26:37:8f:56:c5:e2:b4:89:1f:47:8d:37:
1b:e3:21:16:0b:d9:3a:10:fa:0c:6d:82:5a:a7:1b:
58:09:de:89:0d:b0:d4:3d:ed:cd:b5:c5:2f:bb:24:
da:26:7f:42:0b:47:9b:40:ed:f5:29:a3:e2:3d:e4:
77:e8:39:47:1e:95:ae:e4:76:59:b6:07:d9:b0:70:
cf:c8:ca:c0:7a:55:22:9f:2d:d1:ef:99:90:fa:55:
83:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7B:A8:E6:2C:62:DB:30:10:E5:AA:12:20:A2:54:DE:09:2D:44:58
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.190.0/24
Signature Algorithm: sha256WithRSAEncryption
03:6e:cc:6b:d9:7b:a6:f4:5d:c4:b4:b8:1d:b0:70:4b:3e:44:
96:18:79:74:8d:12:f6:d6:e5:e1:b0:c3:9a:dc:3b:aa:95:73:
b6:4b:33:bf:d7:56:5b:47:cd:7e:ed:cd:cd:fa:be:a8:a8:06:
c7:c6:d0:eb:2b:0b:11:c3:fa:c0:a0:ab:ee:a0:bb:d1:21:c8:
04:96:92:0d:42:d1:c8:e6:13:34:27:34:6b:24:91:d9:08:fd:
ef:7b:8d:d7:b8:a9:dd:c9:90:66:20:f7:a2:47:62:be:dc:55:
39:ab:e7:8a:a9:f2:d1:b2:4c:b8:73:09:ed:66:10:7a:1d:a5:
17:e9:0b:d9:14:41:7b:56:57:9f:b3:41:a9:e4:1b:67:43:38:
c4:7c:48:2e:e1:64:3a:2d:ec:f6:ab:2e:9d:73:3b:e1:f5:bc:
35:10:c2:c1:16:83:21:fa:d7:c8:2c:2d:b2:48:40:d0:9c:ce:
dc:2e:f9:e1:ed:34:ed:b7:f0:6a:a4:9f:c6:1d:4f:c1:47:b3:
86:85:28:90:d4:b1:1e:68:99:ad:45:10:ef:f1:e7:eb:68:16:
29:29:d5:52:55:34:52:4c:81:57:71:9a:2f:86:14:a2:b2:ac:
16:2d:f2:c7:9b:97:9c:81:cb:e5:d8:fa:5d:22:da:9c:e2:d5:
ff:62:52:53
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUej31hMXfSZsMs3Vg3WG9H5qiuCUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl
YjVhNzZlYTAeFw0yNjA1MjgwNDU2NDNaFw0yNzA1MjcwNTAxNDNaMDMxMTAvBgNV
BAMTKEVFN0JBOEU2MkM2MkRCMzAxMEU1QUExMjIwQTI1NERFMDkyRDQ0NTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtX6rt7KMRV9zfbeZZXQvpKWrQ
L6O36kd/zSjPc2yXvAhOJ004N8dY+lKCcykY0IIKIlzo7dxZSXfBiJgIl2QUvi7w
GtM2fM+3NqpULeoVAzImymsXXvHtB4eZ+vU0BneWbNvBz/K48pu7CIh4zUqyZIpO
yEDZdPUv8d5AG7arujfGgRccaswBesqw154GpBjPUGb+MId5j9Rx6BmSRTPVd9Gn
OAXmqyY3j1bF4rSJH0eNNxvjIRYL2ToQ+gxtglqnG1gJ3okNsNQ97c21xS+7JNom
f0ILR5tA7fUpo+I95HfoOUcela7kdlm2B9mwcM/IysB6VSKfLdHvmZD6VYMtAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU7nuo5ixi2zAQ5aoSIKJU3gktRFgwHwYDVR0j
BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy
NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0
YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt
YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMx
MzkzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJN9
vjANBgkqhkiG9w0BAQsFAAOCAQEAA27Ma9l7pvRdxLS4HbBwSz5Elhh5dI0S9tbl
4bDDmtw7qpVztkszv9dWW0fNfu3Nzfq+qKgGx8bQ6ysLEcP6wKCr7qC70SHIBJaS
DULRyOYTNCc0aySR2Qj973uN17ip3cmQZiD3okdivtxVOavniqny0bJMuHMJ7WYQ
eh2lF+kL2RRBe1ZXn7NBqeQbZ0M4xHxILuFkOi3s9qsunXM74fW8NRDCwRaDIfrX
yCwtskhA0JzO3C754e007bfwaqSfxh1PwUezhoUokNSxHmiZrUUQ7/Hn62gWKSnV
UlU0UkyBV3GaL4YUorKsFi3yx5uXnIHL5dj6XSLanOLV/2JSUw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:53:07 2026 by rpki-client