Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231302e302f32342d3234203d3e20383334.roa
File: 3134372e3132352e3231302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: mY2nCk+EJyiSPKlxlfT4GB7t5tzmaz8407OutjJ0Eus=
Subject key identifier: 0D:1F:B5:F0:75:88:C5:63:8E:E3:97:13:9B:12:46:D0:24:04:58:39
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 1C47F134F8DA69378CF96D98C6CF9D8604111A57
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231302e302f32342d3234203d3e20383334.roa
Signing time: Sun 24 May 2026 16:27:55 +0000
ROA not before: Sun 24 May 2026 16:22:55 +0000
ROA not after: Sun 23 May 2027 16:27:55 +0000
asID: 834
IP address blocks: 147.125.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:47:f1:34:f8:da:69:37:8c:f9:6d:98:c6:cf:9d:86:04:11:1a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: May 24 16:22:55 2026 GMT
Not After : May 23 16:27:55 2027 GMT
Subject: CN=0D1FB5F07588C5638EE397139B1246D024045839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4d:6e:f9:be:ad:d2:96:11:b6:1d:7a:c4:7f:
23:a7:9d:f5:60:41:5c:c6:11:33:aa:38:86:7a:43:
d6:5d:8f:d2:52:50:fb:ff:2c:6b:65:2f:73:85:b5:
54:38:0e:84:f7:74:67:06:6e:19:5c:d8:17:9b:d0:
8b:58:17:db:7c:e5:de:e6:45:58:23:fa:c2:c8:2e:
1e:0a:79:35:5d:e4:8a:dc:fa:c6:80:b3:20:db:c6:
ec:91:6a:f1:6b:b9:51:30:78:04:2d:f0:ab:ac:10:
d5:24:4d:38:bf:33:0c:e9:fa:39:81:38:0c:09:6f:
1d:2e:8d:6f:5c:e3:d9:bb:ba:c9:3a:42:d2:bd:c1:
1d:7c:8c:a3:3d:0f:f6:35:56:90:39:cd:16:05:8c:
b5:db:9b:2e:97:f9:70:f5:aa:5a:26:ab:d3:08:fd:
e0:e5:d5:91:ec:0e:e7:eb:39:c0:03:9b:9e:f1:d1:
41:40:cb:fe:a0:00:07:2d:b3:5d:4b:e4:16:b9:24:
bd:1f:1c:74:c8:36:d0:53:2b:c1:7a:61:2e:01:52:
ca:1d:c3:9b:e0:58:fe:a0:22:f5:7f:13:b7:92:97:
be:c2:c5:c5:42:5b:75:98:c2:6e:51:52:ae:60:93:
a9:04:aa:5b:c5:57:28:e4:ef:b0:17:47:39:3d:c4:
97:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:1F:B5:F0:75:88:C5:63:8E:E3:97:13:9B:12:46:D0:24:04:58:39
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.210.0/24
Signature Algorithm: sha256WithRSAEncryption
56:f1:fc:d0:73:5a:4a:87:13:68:22:ac:17:0c:d7:da:d1:ec:
9a:04:13:dc:6d:19:81:41:e7:9c:85:87:be:12:4e:55:ce:41:
a0:03:9e:f5:33:1d:7c:71:e5:28:2d:de:86:cd:68:25:b3:ea:
a8:a3:eb:a2:98:bb:e0:26:a7:c4:ec:ad:08:d2:4c:9c:ea:6b:
65:8f:92:17:f5:71:df:97:71:4a:5d:7f:88:61:cc:a6:15:37:
67:8c:5a:a4:3a:01:21:ae:e2:3e:a5:d5:d3:4c:b8:b2:66:84:
76:c1:da:12:33:da:63:fa:25:9c:6f:8c:33:36:e1:85:d7:46:
c1:ed:e2:d6:37:c3:1e:0f:d5:56:46:c7:06:01:ac:1b:1a:74:
fb:32:88:ea:3c:89:b6:c2:f9:c2:6b:76:77:e1:c3:19:4f:86:
7e:6f:ef:b0:ad:aa:c0:52:00:d8:69:e7:59:17:f2:82:f9:22:
56:71:b3:42:c9:f0:a0:96:32:14:46:0e:2c:01:89:eb:de:0d:
e4:c4:f6:12:84:68:66:eb:95:1e:4d:8c:cf:a0:60:b6:8d:c3:
42:1f:87:b7:f0:f6:c6:13:64:cb:b0:72:de:76:f4:e0:10:19:
ca:3b:3c:dd:4e:ad:b0:ae:e2:33:f8:36:7c:39:9d:15:53:db:
4c:b1:92:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:45:22 2026 by rpki-client