Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234312e302f32342d3234203d3e20383334.roa
File: 3134372e3132352e3234312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: ex8cQt4eWgzNHyWAxsRZeEX6oigYIe3q9CFBTval4yU=
Subject key identifier: F0:7D:3A:14:AC:E8:6C:9E:56:AB:1C:AC:89:AD:F3:0D:9A:3E:E8:12
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 42709C0C61E5CF14C72E4444A9AF4FB13E857177
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234312e302f32342d3234203d3e20383334.roa
Signing time: Tue 04 Nov 2025 15:28:25 +0000
ROA not before: Tue 04 Nov 2025 15:23:25 +0000
ROA not after: Tue 03 Nov 2026 15:28:25 +0000
asID: 834
IP address blocks: 147.125.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:70:9c:0c:61:e5:cf:14:c7:2e:44:44:a9:af:4f:b1:3e:85:71:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Nov 4 15:23:25 2025 GMT
Not After : Nov 3 15:28:25 2026 GMT
Subject: CN=F07D3A14ACE86C9E56AB1CAC89ADF30D9A3EE812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:40:ac:27:96:25:0d:cd:56:5e:80:d9:0b:5c:
7d:27:06:85:5f:68:5b:af:86:42:1b:73:8d:28:c2:
40:c7:a4:d1:14:ea:df:54:fa:73:96:5a:73:d6:95:
94:5f:d1:39:72:f3:56:e1:44:00:e1:c5:82:8d:77:
7b:98:0a:38:5c:1b:3a:a8:9e:75:16:e5:e8:eb:11:
dc:dc:c9:58:96:e9:bb:2d:22:20:ad:87:72:ad:0b:
b3:47:21:8b:4a:5e:a7:34:46:63:fb:69:cd:b7:0a:
fc:f5:9d:e8:ee:8d:d7:38:6c:08:f4:ec:15:03:9b:
2f:22:17:ed:25:4c:4b:6b:88:7e:91:45:cd:f8:ae:
f6:d4:9a:f2:23:9c:cf:e3:cf:5f:36:26:41:c1:f2:
79:fd:2e:8d:c3:76:de:86:3b:88:db:0f:14:1d:ea:
bb:b0:b8:d8:e1:26:3f:22:88:6b:8a:bd:89:09:61:
39:a5:b1:1e:31:95:2f:ad:69:bc:66:50:aa:d4:b8:
cd:a2:12:ab:3c:5a:f4:93:d4:57:12:d1:1e:62:81:
00:12:7d:6b:e7:28:03:aa:60:b0:ce:47:b9:3b:36:
1c:ab:4e:9e:65:fd:2f:fd:52:43:a1:14:40:32:a0:
11:4a:c6:69:9b:2a:79:b9:6f:1a:b2:9b:f5:7e:1c:
d3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:7D:3A:14:AC:E8:6C:9E:56:AB:1C:AC:89:AD:F3:0D:9A:3E:E8:12
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.241.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:c5:f0:09:44:2a:32:44:1a:ad:cb:b9:39:2a:19:79:2b:c0:
12:33:17:c8:aa:62:96:90:3a:de:49:04:63:67:7e:28:28:64:
b8:ee:d1:1e:db:60:dc:69:4b:27:d9:0b:f4:d2:da:0c:9f:15:
4e:59:5b:2d:c8:e8:36:1d:3c:95:28:64:06:2a:13:98:80:61:
c5:48:9c:15:3b:a8:51:03:0d:8b:01:94:e1:99:62:b8:e6:19:
5f:64:07:99:d6:19:29:04:23:db:99:db:41:6b:dd:06:5c:4e:
76:52:17:53:d8:31:8d:23:20:93:0b:52:5f:c1:8a:61:29:1f:
30:e7:a3:a0:bb:ea:8a:31:d1:23:ab:a6:8e:5d:75:77:b9:4b:
cf:e6:02:c9:4a:43:0a:d9:a2:f2:2c:70:71:60:83:f9:dc:e1:
6b:26:5e:ec:b8:c9:3b:80:42:73:ce:df:71:04:4f:8b:7f:ea:
d9:b2:7c:c6:77:cb:61:db:05:65:d9:5a:1c:18:a2:8f:64:78:
a3:ec:29:fa:7e:d7:eb:57:d3:36:db:9d:54:f7:55:ff:33:6c:
ee:88:9c:84:72:01:cf:1b:b1:4e:c6:43:19:3d:69:ac:f7:e1:
31:26:d6:c7:ad:90:2b:84:05:96:7c:1e:ac:41:45:84:9b:40:
ed:b0:b3:19
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUQnCcDGHlzxTHLkREqa9PsT6FcXcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNmNjZGM4MmJhZTc4MDBmN2Q1MDdjNzM3OTI0ODY5YmRl
YjVhNzZlYTAeFw0yNTExMDQxNTIzMjVaFw0yNjExMDMxNTI4MjVaMDMxMTAvBgNV
BAMTKEYwN0QzQTE0QUNFODZDOUU1NkFCMUNBQzg5QURGMzBEOUEzRUU4MTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgQKwnliUNzVZegNkLXH0nBoVf
aFuvhkIbc40owkDHpNEU6t9U+nOWWnPWlZRf0Tly81bhRADhxYKNd3uYCjhcGzqo
nnUW5ejrEdzcyViW6bstIiCth3KtC7NHIYtKXqc0RmP7ac23Cvz1nejujdc4bAj0
7BUDmy8iF+0lTEtriH6RRc34rvbUmvIjnM/jz182JkHB8nn9Lo3Ddt6GO4jbDxQd
6ruwuNjhJj8iiGuKvYkJYTmlsR4xlS+tabxmUKrUuM2iEqs8WvST1FcS0R5igQAS
fWvnKAOqYLDOR7k7NhyrTp5l/S/9UkOhFEAyoBFKxmmbKnm5bxqym/V+HNOjAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU8H06FKzobJ5Wqxysia3zDZo+6BIwHwYDVR0j
BBgwFoAUbM3IK654APfVB8c3kkhpvetaduowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEtYzM4NS00YjY1LTk4NjYtNGY2MzgzMTcy
NjcyLzAvNkNDREM4MkJBRTc4MDBGN0Q1MDdDNzM3OTI0ODY5QkRFQjVBNzZFQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JNM0lLNjU0QVBmVkI4YzNra2hwdmV0
YWR1by5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvY2NkMzg4NGEt
YzM4NS00YjY1LTk4NjYtNGY2MzgzMTcyNjcyLzAvMzEzNDM3MmUzMTMyMzUyZTMy
MzQzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJN9
8TANBgkqhkiG9w0BAQsFAAOCAQEAbMXwCUQqMkQarcu5OSoZeSvAEjMXyKpilpA6
3kkEY2d+KChkuO7RHttg3GlLJ9kL9NLaDJ8VTllbLcjoNh08lShkBioTmIBhxUic
FTuoUQMNiwGU4ZliuOYZX2QHmdYZKQQj25nbQWvdBlxOdlIXU9gxjSMgkwtSX8GK
YSkfMOejoLvqijHRI6umjl11d7lLz+YCyUpDCtmi8ixwcWCD+dzhayZe7LjJO4BC
c87fcQRPi3/q2bJ8xnfLYdsFZdlaHBiij2R4o+wp+n7X61fTNtudVPdV/zNs7oic
hHIBzxuxTsZDGT1prPfhMSbWx62QK4QFlnwerEFFhJtA7bCzGQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:02:56 2025 by rpki-client