Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234322e302f32342d3234203d3e2039333138.roa
File: 3134372e3132352e3234322e302f32342d3234203d3e2039333138.roa (raw, json)
Hash identifier: 25peyHxCzpVy8vbkJ52FO0ImUfED4/UMUvDXlZozOPQ=
Subject key identifier: 56:AF:68:D4:7A:4C:FF:BC:44:E5:07:54:3B:14:02:79:5E:92:7E:EA
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 5A6EF9974DDAA681A14BFB730ACC61A27F7F8E3E
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234322e302f32342d3234203d3e2039333138.roa
Signing time: Tue 04 Nov 2025 15:27:05 +0000
ROA not before: Tue 04 Nov 2025 15:22:05 +0000
ROA not after: Tue 03 Nov 2026 15:27:05 +0000
asID: 9318
IP address blocks: 147.125.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:6e:f9:97:4d:da:a6:81:a1:4b:fb:73:0a:cc:61:a2:7f:7f:8e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Nov 4 15:22:05 2025 GMT
Not After : Nov 3 15:27:05 2026 GMT
Subject: CN=56AF68D47A4CFFBC44E507543B1402795E927EEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:42:73:69:9c:14:20:13:ba:dc:fb:52:e9:4b:
19:3f:eb:4f:17:85:0b:4a:60:7a:02:06:99:4c:67:
e5:0e:8b:e5:6b:06:02:47:b6:75:99:06:45:93:c8:
3b:5c:37:e5:6e:5c:6e:70:95:63:e7:8a:ea:01:48:
fe:8a:aa:fb:64:d7:f2:61:21:f5:e8:ed:21:c4:d6:
83:aa:d8:b7:8a:72:cc:03:ce:8c:7f:ee:aa:65:61:
2b:46:5d:90:4e:ef:07:23:70:8e:fc:9b:01:a6:17:
45:e7:4b:4a:b5:c6:79:cd:3e:76:5b:b2:41:74:c6:
f8:60:76:6c:fc:28:6a:2c:0b:60:e3:9f:f1:e3:7e:
ac:8f:05:ee:a8:a5:8a:91:84:ef:0a:cd:b3:cb:f1:
2e:63:0a:70:8e:c6:da:de:5e:dd:15:46:f9:d7:67:
1b:fb:f3:64:c0:ba:64:1a:bf:41:a2:a4:89:b4:2a:
d8:21:f3:75:b0:d4:ad:e2:14:e1:5c:4d:08:cc:4f:
2b:8a:bb:72:f4:3d:01:b0:c8:f4:8f:62:be:f5:bb:
48:9d:77:81:dc:76:54:6a:94:2a:ca:d7:66:ed:6a:
c5:f3:da:df:22:e7:74:d7:c2:ed:c9:bd:90:c0:35:
69:81:80:bc:a0:38:45:ca:e4:38:01:d1:8e:84:7d:
bd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:AF:68:D4:7A:4C:FF:BC:44:E5:07:54:3B:14:02:79:5E:92:7E:EA
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234322e302f32342d3234203d3e2039333138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.242.0/24
Signature Algorithm: sha256WithRSAEncryption
64:e0:9c:b0:3b:f5:92:85:9c:a8:21:17:4e:03:17:95:72:bf:
e6:05:b1:f7:c1:07:cc:3d:4c:04:e1:34:ea:76:0e:55:35:12:
74:8a:0b:d0:1e:d9:be:6a:ea:9b:5e:db:ca:58:39:10:bb:fa:
d5:13:63:e1:f3:92:b9:3d:32:6d:3e:11:25:db:34:42:5f:95:
f2:b6:1a:9c:56:2d:eb:9d:86:1c:f0:2e:2f:ec:a0:5c:b4:a9:
40:cf:86:e8:3b:d2:8a:02:5e:13:a7:1a:be:0a:b3:9c:dc:e0:
9e:57:3a:9d:e4:7e:13:18:c6:5c:07:56:b5:77:0e:88:6b:12:
01:6d:ff:51:29:3f:9a:ed:30:0e:fb:d1:53:1d:9b:33:bc:90:
8b:fc:9c:ed:27:a4:64:6e:ca:18:87:9a:a6:ab:e0:8c:e9:c4:
87:3e:0f:83:65:f8:bf:69:76:7e:30:ef:86:0e:6c:0d:71:dd:
ed:ad:bc:27:6f:e6:a4:63:d2:d6:50:34:57:85:21:fa:dd:88:
ac:ad:6e:ad:5a:69:05:4f:03:12:b7:d3:28:8f:be:e2:96:24:
bd:05:17:e8:4d:dc:42:a5:ca:17:22:4b:51:88:ad:cf:fc:4c:
05:d4:83:61:61:c1:78:38:e1:ba:f9:68:86:80:8a:2e:76:eb:
4a:90:18:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:47:05 2025 by rpki-client