Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139312e302f32342d3234203d3e20323033303438.roa
File: 3134372e3132352e3139312e302f32342d3234203d3e20323033303438.roa (raw, json)
Hash identifier: S16rRD31d5A8gZF00M7MLWEgUPcSyZrSoA2Zn0nzcSw=
Subject key identifier: 78:40:81:1F:C9:38:52:BA:86:8C:7E:96:4D:5E:99:AB:25:BD:37:8A
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 1EC844C4AAA2039B117B4E33B7653C7ECB737B3B
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139312e302f32342d3234203d3e20323033303438.roa
Signing time: Thu 28 May 2026 05:01:40 +0000
ROA not before: Thu 28 May 2026 04:56:40 +0000
ROA not after: Thu 27 May 2027 05:01:40 +0000
asID: 203048
IP address blocks: 147.125.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 04:38:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:c8:44:c4:aa:a2:03:9b:11:7b:4e:33:b7:65:3c:7e:cb:73:7b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: May 28 04:56:40 2026 GMT
Not After : May 27 05:01:40 2027 GMT
Subject: CN=7840811FC93852BA868C7E964D5E99AB25BD378A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:de:02:ce:b1:73:c6:06:bc:ae:f3:7c:c3:74:
c8:78:6e:e0:ab:71:49:83:dd:ec:da:19:54:07:08:
12:fd:2b:70:c7:f3:79:0a:a4:2a:21:a8:ee:aa:f2:
df:1d:9e:f2:9b:58:43:85:e2:3d:35:33:bb:cd:2d:
62:6b:99:c9:09:1d:25:15:0f:48:32:84:2e:b6:fd:
3e:39:c2:44:4c:37:4e:50:84:68:21:7b:24:9e:7f:
45:e3:78:cc:c9:22:cb:4c:5e:f5:3e:0c:e5:f5:89:
16:5f:49:9f:ea:ce:09:83:18:e5:3f:33:9a:f8:e7:
2b:76:89:d4:f5:bb:de:7f:07:54:84:5d:a2:db:e1:
d6:2b:0d:b7:8f:cb:c6:a1:a3:55:1c:a8:17:96:e5:
a3:4d:a8:ee:c8:30:42:b1:f4:5c:eb:78:23:7b:a7:
2f:af:a6:5a:f6:f2:8c:86:7b:77:f3:b7:a3:52:22:
b9:29:13:85:1c:16:8a:19:0f:49:a7:55:4d:73:8a:
59:d0:9d:16:35:03:f4:fd:b9:3f:80:4a:25:76:d4:
d8:22:e5:25:f7:d5:9f:89:58:64:73:bb:86:12:d8:
43:4c:86:92:d3:3a:e2:5e:c9:3e:c0:7e:0c:a7:89:
1d:75:07:b8:b2:46:99:e2:2e:e4:28:b7:fc:43:e5:
01:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:40:81:1F:C9:38:52:BA:86:8C:7E:96:4D:5E:99:AB:25:BD:37:8A
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139312e302f32342d3234203d3e20323033303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.191.0/24
Signature Algorithm: sha256WithRSAEncryption
53:42:fb:4c:e8:ff:25:d5:a1:90:0f:54:99:08:e1:0b:f7:f7:
87:0d:58:22:f2:77:5a:e7:50:24:e0:cb:14:cb:74:56:15:ba:
6c:fa:28:57:a8:b1:7e:6f:1d:bc:a7:f3:8f:cc:f9:e7:cd:21:
3e:c2:8a:33:10:61:7e:90:97:82:43:ef:5d:e8:53:33:3f:79:
9f:d2:47:17:b4:c7:32:40:2b:ce:d5:8a:58:68:a9:e7:07:30:
bc:55:77:81:08:66:ba:db:8e:c3:97:a4:71:e5:2e:15:30:c7:
e2:fc:b0:92:6c:e6:24:a6:e6:09:1c:bd:b9:b6:8e:c9:2c:0c:
7e:38:b9:45:20:c6:df:43:c6:b4:e5:92:ff:f0:6b:3e:0f:ec:
a0:45:fc:95:4d:cb:43:1b:fd:2e:31:21:09:86:e5:8d:8b:ad:
50:74:94:1e:6c:f2:95:ce:b0:ce:23:03:54:a6:f6:0a:b2:4b:
1b:6c:f7:61:01:22:a0:e7:20:b1:0e:57:6d:a9:1e:a9:6c:04:
39:78:d1:84:b8:91:6e:97:01:77:6c:a4:f8:72:19:a9:66:ff:
6f:dd:3a:b5:e3:83:fa:44:ad:d2:87:80:1e:32:aa:ff:f8:25:
1b:0b:1d:b3:ad:ef:69:d1:b0:d4:91:97:36:d6:99:69:e2:ea:
64:91:86:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:31:31 2026 by rpki-client