Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234342e302f32322d3234203d3e20383334.roa
File: 3134372e3132352e3234342e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: 6tNux8+XOyEdLqNzYEDq+Ycb1y0PXrQe5pK+U+Drx2g=
Subject key identifier: 97:88:5E:A9:7A:85:1A:05:49:ED:26:30:5A:A5:FF:7E:BC:84:5D:91
Certificate issuer: /CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Certificate serial: 49DD48F4DB69B7DDB4DA2AA70242D0C23848F503
Authority key identifier: 6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234342e302f32322d3234203d3e20383334.roa
Signing time: Tue 04 Nov 2025 15:28:25 +0000
ROA not before: Tue 04 Nov 2025 15:23:25 +0000
ROA not after: Tue 03 Nov 2026 15:28:25 +0000
asID: 834
IP address blocks: 147.125.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:08:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:dd:48:f4:db:69:b7:dd:b4:da:2a:a7:02:42:d0:c2:38:48:f5:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccdc82bae7800f7d507c737924869bdeb5a76ea
Validity
Not Before: Nov 4 15:23:25 2025 GMT
Not After : Nov 3 15:28:25 2026 GMT
Subject: CN=97885EA97A851A0549ED26305AA5FF7EBC845D91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c8:8c:eb:66:0c:a1:35:84:61:ed:a8:96:f6:
2f:45:70:cc:19:ac:ae:17:27:e3:33:00:f8:16:70:
5f:b2:62:40:bb:a8:94:ef:e4:5b:7b:c7:fc:56:0f:
a4:ff:c7:2a:b9:45:ed:c0:22:35:ae:68:d5:d7:b8:
9e:3c:76:ce:36:88:0e:8f:b8:8a:20:0d:13:53:a6:
e1:d6:f1:f5:56:23:0b:4b:07:10:3f:82:22:23:f3:
f9:92:8f:31:f9:d7:03:35:63:bc:46:86:f1:8b:39:
8d:4a:18:c5:11:d0:0d:e2:e2:21:26:01:08:8c:b3:
6e:c3:bd:20:14:c4:81:8d:18:98:78:2f:f9:07:92:
22:ec:ea:c3:d5:73:0b:19:ee:53:9d:6a:33:de:a4:
40:d1:59:13:5c:29:0c:2f:5f:18:86:f2:2b:e8:f7:
17:6e:32:43:c8:f4:c7:ec:51:53:1c:a5:63:32:97:
0b:a9:00:36:1f:6d:b9:2c:b9:6d:44:8a:c7:9f:09:
1a:03:56:ca:94:ec:e0:d7:5b:3d:aa:8f:cd:65:20:
1a:9a:2f:95:ee:a4:f5:2b:f8:5c:1e:c3:31:4a:9f:
80:45:88:0a:47:52:3d:88:28:35:cc:62:a1:8e:48:
73:0a:5c:73:be:54:e1:45:da:98:05:6d:f3:50:98:
94:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:88:5E:A9:7A:85:1A:05:49:ED:26:30:5A:A5:FF:7E:BC:84:5D:91
X509v3 Authority Key Identifier:
keyid:6C:CD:C8:2B:AE:78:00:F7:D5:07:C7:37:92:48:69:BD:EB:5A:76:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/6CCDC82BAE7800F7D507C737924869BDEB5A76EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM3IK654APfVB8c3kkhpvetaduo.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ccd3884a-c385-4b65-9866-4f6383172672/0/3134372e3132352e3234342e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.125.244.0/22
Signature Algorithm: sha256WithRSAEncryption
82:9b:57:9b:14:ac:16:cf:2b:ea:b0:c2:83:97:4d:44:02:f3:
ad:3f:9e:c7:46:48:b3:e2:9d:ac:7d:40:16:0a:88:90:7a:b9:
48:48:73:bf:92:cc:d5:33:54:1f:3a:eb:8e:ff:b8:97:2b:ef:
bf:5d:84:7f:d5:b5:08:8c:5a:d9:d1:df:ce:cf:99:ff:66:32:
63:51:3f:0a:c4:2a:e9:4b:7e:3a:1f:1c:a3:0b:9b:9d:a9:ec:
6f:1f:a9:00:71:e0:d2:da:79:72:8d:98:95:b6:5a:d0:7a:f1:
ed:db:6b:f1:20:3a:5d:4e:b0:15:70:3f:2e:41:0f:ea:21:ab:
50:9a:03:9d:11:d7:c3:4f:3f:40:17:10:3d:4c:7d:29:ec:85:
46:21:42:81:cf:e2:16:53:62:56:56:92:30:2b:94:27:fb:e2:
f2:75:9c:11:de:87:2e:35:19:b3:c2:32:53:98:d4:9b:c4:26:
06:dc:5c:bb:23:e3:77:e4:04:1f:c2:dd:41:c4:93:a3:53:01:
56:4d:77:86:c7:67:2a:6e:4e:d6:cf:30:4d:c7:e8:c9:72:60:
8c:3c:60:aa:e8:6a:86:2d:96:58:f9:8b:cf:c4:60:78:c4:3c:
f8:d8:9c:b8:07:c3:ac:bb:16:5d:01:07:34:03:52:24:d8:7d:
d9:25:36:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:02:47 2025 by rpki-client