Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231322e302f32332d3234203d3e20383334.roa
File: 3134372e3132352e3231322e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: xZS5ReCXuahy9dR+Cw0ARMJyJREdEe4kWK6j7hOL3dE=
Subject key identifier: B7:14:9A:AA:9A:73:83:73:9B:25:7B:B8:C3:53:F9:5A:46:AC:AB:55
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 020157E63FF38ADE3B8D667E0F39602AC3AB57D3
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231322e302f32332d3234203d3e20383334.roa
Signing time: Tue 28 Jul 2026 19:25:49 +0000
ROA not before: Tue 28 Jul 2026 19:20:49 +0000
ROA not after: Tue 27 Jul 2027 19:25:49 +0000
asID: 834
IP address blocks: 147.125.212.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:22:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:01:57:e6:3f:f3:8a:de:3b:8d:66:7e:0f:39:60:2a:c3:ab:57:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Jul 28 19:20:49 2026 GMT
Not After : Jul 27 19:25:49 2027 GMT
Subject: CN=B7149AAA9A7383739B257BB8C353F95A46ACAB55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:75:19:0e:7d:f1:a3:b4:6d:0d:fc:48:d7:2b:
82:80:c6:06:01:6c:ef:fd:fa:37:02:d1:86:60:95:
63:cf:ec:ec:a7:33:a9:55:f8:9d:15:2b:59:0e:ab:
e8:70:4d:a3:38:a7:85:97:7e:88:f7:ea:b8:e5:f3:
82:67:11:3f:b8:55:1e:24:f4:3a:5e:29:ee:42:c9:
98:72:43:1d:f0:3b:c2:42:e8:51:07:e1:4a:f1:a3:
a0:1e:8a:9c:c8:65:fd:e3:d2:61:e7:62:0e:da:30:
3f:e0:4b:a4:bb:b3:f5:8e:6b:05:36:bb:64:a5:d1:
a8:cd:85:72:1d:8a:41:b7:0e:5f:8f:d8:74:09:05:
3f:44:f8:3c:d6:bc:97:63:54:4e:bb:2b:d7:98:46:
c1:94:27:11:bc:f3:4b:0f:9b:79:9b:4d:1c:7d:4a:
2f:53:b0:3c:75:54:36:2e:1b:84:63:c8:9f:0a:ea:
79:bd:65:bc:8c:1a:50:27:c8:5d:96:ab:75:a5:ec:
96:56:36:6d:27:75:54:5b:49:14:f3:64:30:2e:5d:
6c:b7:4b:74:bd:da:fa:6e:9a:af:aa:1f:63:fe:82:
ec:e3:6c:f4:9f:3a:96:19:0a:13:3d:aa:b2:00:8f:
ff:6a:03:aa:1b:bf:2a:a0:62:35:f3:5d:f2:0e:1e:
7a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:14:9A:AA:9A:73:83:73:9B:25:7B:B8:C3:53:F9:5A:46:AC:AB:55
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3231322e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.212.0/23
Signature Algorithm: sha256WithRSAEncryption
44:18:5b:2c:53:31:c9:45:83:a6:af:c4:5c:29:41:7f:c7:cc:
c4:ff:35:8f:12:9d:dc:d0:c4:fc:8a:7a:f2:7c:51:b5:e5:d0:
ee:48:30:48:fd:8f:73:48:a2:4a:97:30:41:62:a4:84:7c:46:
8c:77:93:ff:18:04:68:3a:29:de:a4:c0:da:c2:df:1d:09:f3:
06:5b:c6:2e:2a:86:72:7a:b4:88:80:14:df:c9:56:3d:b1:00:
5a:c2:ab:5d:30:fa:c6:93:f8:1c:3a:89:77:e3:f8:3f:9c:b1:
f7:dc:65:a3:c7:5c:bc:b3:d4:98:aa:94:32:d4:28:3a:5e:b8:
7b:c4:4f:eb:00:9e:35:15:54:5b:d3:92:d7:ba:ec:d1:97:0f:
bf:03:aa:3b:ef:b6:ff:a9:de:fc:e1:d4:1f:5e:50:93:74:8d:
f2:ac:83:a9:6f:6a:46:62:16:de:6d:9b:cd:e4:6b:04:9b:4e:
8d:0e:3d:71:43:f7:9b:f3:28:fb:f9:04:15:d2:7b:43:4b:a8:
03:e8:9e:84:80:ff:71:fd:4f:ce:82:a8:01:65:b1:0f:95:f4:
b9:df:54:98:5e:5c:ad:ec:21:76:31:8f:53:47:48:19:3b:15:
2d:ad:ac:82:d2:79:c2:15:53:f2:0d:13:e2:81:c7:2c:12:73:
7d:7f:93:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:31:20 2026 by rpki-client