Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139322e302f32322d3234203d3e20383334.roa
File: 3134372e3132352e3139322e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: dr6WsWrSvCvM18KWivYBkAirtx/k7WAy+ajkem31AR4=
Subject key identifier: AE:B0:13:50:2E:E2:7B:51:6F:A9:EE:85:86:CC:0A:3C:09:36:4F:A5
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 5A1882F543319708D389A10A8CC66044174A2B82
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139322e302f32322d3234203d3e20383334.roa
Signing time: Tue 28 Jul 2026 19:36:40 +0000
ROA not before: Tue 28 Jul 2026 19:31:40 +0000
ROA not after: Tue 27 Jul 2027 19:36:40 +0000
asID: 834
IP address blocks: 147.125.192.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:22:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:18:82:f5:43:31:97:08:d3:89:a1:0a:8c:c6:60:44:17:4a:2b:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Jul 28 19:31:40 2026 GMT
Not After : Jul 27 19:36:40 2027 GMT
Subject: CN=AEB013502EE27B516FA9EE8586CC0A3C09364FA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:de:19:04:41:60:16:8d:e3:89:02:ac:97:5c:
f9:49:7d:47:2a:2c:c9:42:08:e4:75:e4:79:e1:9f:
18:25:2f:5f:12:66:5c:1e:f3:a8:9f:2d:b8:15:93:
1a:3b:4f:4e:90:0e:6e:a0:44:65:00:46:f2:3e:b5:
f9:94:76:87:e6:86:f0:80:90:92:52:9f:86:5f:87:
44:61:bf:67:a2:12:b3:2b:c9:ed:8f:a8:b1:31:79:
f4:95:40:2f:80:60:d1:91:fb:cc:98:f5:70:a2:4c:
97:0d:17:25:c2:ad:d6:5d:0f:ab:6c:21:06:0e:26:
63:0a:97:b7:6c:ed:98:fc:83:2e:97:fd:a6:a2:b5:
55:94:80:6d:02:19:fe:cd:23:d2:21:c8:65:70:b2:
86:2c:da:0e:9a:70:2a:7f:95:5c:46:65:50:71:c9:
82:e1:a0:2b:03:c7:94:e6:f2:b7:f4:09:76:79:4f:
bf:a8:b6:32:46:83:f4:4f:db:e5:4d:69:c2:b8:7f:
a4:f7:88:65:99:56:08:c8:3e:2e:7e:1a:d9:9b:b3:
f0:88:39:17:93:ed:8a:3d:62:05:d4:5c:9e:97:14:
fc:ec:5b:b5:4a:91:04:5b:e8:88:2a:88:4f:49:f3:
ff:12:08:81:91:a1:15:8f:85:db:77:02:90:61:ca:
12:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B0:13:50:2E:E2:7B:51:6F:A9:EE:85:86:CC:0A:3C:09:36:4F:A5
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3139322e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.192.0/22
Signature Algorithm: sha256WithRSAEncryption
14:30:4c:05:5a:85:71:4c:6a:b2:34:33:48:25:3d:53:d4:45:
ee:d3:f1:d8:b9:33:98:41:ff:b4:81:7c:24:82:eb:55:ff:3b:
d5:b9:df:16:14:a7:8b:5a:26:ee:1b:14:ad:a9:75:63:ee:53:
d9:ea:d0:6b:5f:4b:59:24:10:c9:a6:d1:ca:2a:aa:a4:a7:a7:
ef:3c:df:d0:de:b5:4d:fc:ea:ef:90:ae:d1:8d:75:2a:c1:84:
3b:52:42:ad:f0:30:04:fb:ab:34:30:55:86:45:2e:56:2b:a9:
6e:00:1e:4e:6c:87:ff:dd:a2:cc:c9:33:99:df:80:d3:66:28:
7d:c9:2d:33:03:51:07:ca:73:bf:bc:2f:db:89:95:32:5b:f2:
17:4c:51:88:1a:c4:44:61:01:cb:dc:b5:e9:74:a2:ee:87:0e:
bd:f1:ae:ef:05:c1:c4:2a:c4:89:0d:45:4f:eb:16:96:b2:1e:
97:03:0a:89:bf:92:15:6c:ca:df:66:89:bf:6c:46:0e:69:af:
b8:ff:ac:a1:89:a3:61:5c:76:af:45:8c:4f:3b:3f:78:c3:7e:
9d:08:d8:61:85:8c:a6:71:b7:cb:8b:b1:e6:fb:0a:b0:07:71:
9b:52:ae:a1:d4:8c:11:1d:48:6c:6c:ff:46:b1:ed:1f:6f:fc:
1d:ee:83:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:31:20 2026 by rpki-client