Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234332e302f32342d3234203d3e20383334.roa
File: 3134372e3132352e3234332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 1y0AkZznPILm6svGcLp/o5c4ouKlPQn1DeozpLXDkWU=
Subject key identifier: 1A:51:54:48:93:4A:EA:4A:A5:F1:EF:4D:8D:84:82:BF:E7:FC:F3:5F
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 09E743416620EE210E4B3367DCFA9C20ED6919B5
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234332e302f32342d3234203d3e20383334.roa
Signing time: Tue 04 Nov 2025 15:28:25 +0000
ROA not before: Tue 04 Nov 2025 15:23:25 +0000
ROA not after: Tue 03 Nov 2026 15:28:25 +0000
asID: 834
IP address blocks: 147.125.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:e7:43:41:66:20:ee:21:0e:4b:33:67:dc:fa:9c:20:ed:69:19:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Nov 4 15:23:25 2025 GMT
Not After : Nov 3 15:28:25 2026 GMT
Subject: CN=1A515448934AEA4AA5F1EF4D8D8482BFE7FCF35F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f5:4e:96:cf:bb:97:d6:2b:55:13:92:40:2f:
d1:06:03:b3:1d:ba:63:3e:18:f0:6c:9b:00:7d:fc:
53:b7:16:ba:23:82:ea:00:36:2e:ec:cc:fc:00:72:
06:9b:e7:68:69:9d:ee:8c:c6:e6:85:05:b0:89:c3:
20:c7:b0:50:d4:11:8d:98:90:aa:54:62:c8:e2:07:
46:d8:b5:ff:6a:63:db:56:92:63:00:60:bd:8d:6a:
78:78:ad:49:be:f4:73:63:8a:21:de:b2:e7:b3:39:
c7:50:3d:b8:fa:df:2e:67:a0:88:ec:07:9a:e7:c5:
c0:9c:3c:70:fa:3a:07:9c:8b:fd:c1:61:fa:9a:63:
3f:d1:ef:eb:06:6a:46:56:84:54:1d:d9:fe:53:9a:
88:c3:0e:46:cf:ba:66:36:90:7b:58:8b:88:30:a3:
bd:15:31:b7:19:90:d1:db:c2:9d:88:de:6e:f8:75:
9b:7e:76:25:db:3c:fb:3b:e9:7d:24:94:f9:90:c7:
01:96:fb:53:f7:3f:67:de:70:8f:35:09:d5:f5:83:
30:79:82:a1:53:e2:ff:18:34:f8:78:78:cb:61:28:
82:35:cf:4a:f0:d3:3d:f3:58:81:fd:c5:d8:25:71:
68:51:b4:81:c8:0c:b3:89:e4:4c:c4:85:f9:ad:78:
e5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:51:54:48:93:4A:EA:4A:A5:F1:EF:4D:8D:84:82:BF:E7:FC:F3:5F
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234332e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.243.0/24
Signature Algorithm: sha256WithRSAEncryption
68:46:ca:0a:7c:71:03:e5:6c:59:32:d2:29:7b:33:c4:a5:f8:
e9:8b:d1:bc:ed:23:20:ed:7b:a8:34:78:93:dc:3b:31:83:94:
ef:aa:cc:09:5c:dc:c1:d2:32:13:a6:e8:d7:87:d2:45:1b:8d:
42:fe:f5:b7:c8:b5:ff:49:76:6e:c3:19:24:c5:2c:2f:08:5c:
88:bb:31:72:21:02:3c:7f:4f:6e:23:2b:97:ff:99:79:0a:94:
24:d2:a0:6d:cf:c7:c4:c5:97:04:1d:22:9c:5b:1c:26:1e:1d:
63:8f:3b:b4:f1:81:4b:95:ce:73:1f:c8:47:0b:21:7d:21:b3:
8f:4d:10:61:48:c4:7d:5d:83:ab:1b:9f:4f:d2:f3:80:5d:84:
f0:e8:e4:91:a8:95:0c:82:42:07:82:2a:2c:a8:b6:fb:fc:a2:
cd:d3:1e:cf:20:25:86:80:dc:43:32:52:d0:e0:a8:4d:a7:e9:
8e:14:95:df:51:dd:9d:ac:3f:71:1b:f9:81:7f:0c:f1:83:ee:
75:4d:da:dd:9d:29:a4:be:46:a1:f5:63:23:e5:f5:64:76:9c:
c4:ee:14:7c:d1:c4:1d:e2:ab:2d:fe:30:08:46:50:99:81:e0:
40:37:24:af:ed:99:c7:03:ff:50:8f:09:90:3c:9c:02:74:b5:
2f:da:85:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:02:41 2025 by rpki-client