Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/AS51031.roa
File: AS51031.roa (raw, json)
Hash identifier: OzneDxNvJNHqlvyvf7VkmQ8VCkRNauoGXQD6j2k00So=
Subject key identifier: E6:CE:48:FC:2B:D5:03:58:D3:1E:84:C2:C6:59:4E:B8:DF:53:71:0B
Certificate issuer: /CN=1be240021a287f298973d9ea28dfc80735fd5800
Certificate serial: 21C2F9B2DF3294E56D48DBA8688350FE05E4FA47
Authority key identifier: 1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/AS51031.roa
Signing time: Thu 12 Nov 2026 08:25:19 +0000
ROA not before: Thu 12 Nov 2026 08:20:19 +0000
ROA not after: Thu 11 Nov 2027 08:25:19 +0000
asID: 51031
IP address blocks: 2a0f:1cc5:4100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.mft
rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:c2:f9:b2:df:32:94:e5:6d:48:db:a8:68:83:50:fe:05:e4:fa:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1be240021a287f298973d9ea28dfc80735fd5800
Validity
Not Before: Nov 12 08:20:19 2026 GMT
Not After : Nov 11 08:25:19 2027 GMT
Subject: CN=E6CE48FC2BD50358D31E84C2C6594EB8DF53710B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4a:11:d2:8b:00:5d:d2:91:b4:95:d2:68:06:
04:70:93:30:0a:2b:e3:11:65:75:40:f7:e3:e1:99:
a5:0b:d5:72:db:eb:18:80:53:44:3e:61:80:d1:70:
20:fc:5b:e2:9e:98:f0:b5:c9:c8:99:4e:d5:52:11:
d5:31:5a:a7:b9:11:4e:a8:dd:76:65:13:6f:bf:91:
c9:73:aa:d5:28:31:09:09:93:20:f9:8a:8a:c2:ed:
45:b9:a8:10:5a:43:a6:38:d9:b4:a3:d5:58:0b:67:
75:8d:c4:e0:e5:8c:25:2a:fd:27:b2:c2:dc:9b:61:
4a:25:87:eb:e6:0f:bf:51:24:bb:05:de:02:95:1a:
e0:18:37:72:07:36:07:b0:8e:c6:9c:0a:03:c7:dc:
ee:2d:2b:f9:62:e1:8f:e6:af:15:1c:fc:ec:d4:8b:
e6:e5:3f:01:a6:ad:cb:d7:21:d5:21:66:4d:b0:2c:
f0:0e:f4:93:da:df:af:0a:d0:2b:f4:b8:53:e3:84:
30:c3:da:e8:9c:cb:52:76:3e:26:09:0a:18:ae:21:
b8:50:aa:07:ee:57:1d:f4:55:d0:34:e9:b5:41:90:
ee:c5:9e:d7:32:a4:1f:dd:22:a3:2c:91:35:0e:ad:
ad:df:b3:8a:91:27:97:ad:8a:b4:34:02:6d:3e:38:
0f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:CE:48:FC:2B:D5:03:58:D3:1E:84:C2:C6:59:4E:B8:DF:53:71:0B
X509v3 Authority Key Identifier:
keyid:1B:E2:40:02:1A:28:7F:29:89:73:D9:EA:28:DF:C8:07:35:FD:58:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/1BE240021A287F298973D9EA28DFC80735FD5800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G-JAAhoofymJc9nqKN_IBzX9WAA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/AS51031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1cc5:4100::/40
Signature Algorithm: sha256WithRSAEncryption
8b:e1:3d:d4:0a:0a:4e:ca:a9:7c:d6:7a:a7:55:ab:3d:6f:43:
d3:14:db:19:e5:8a:c9:14:18:65:fd:78:72:f0:29:33:d0:5a:
79:dc:d7:01:86:73:5b:3e:38:c8:6c:d8:7c:e6:32:70:d0:79:
a6:5c:ba:7d:61:7a:5f:10:64:f7:05:ee:6d:57:8f:a1:b3:2e:
7c:77:31:61:7c:cb:a9:03:7b:70:c3:66:a9:b8:1f:07:68:a1:
49:67:8d:2e:59:f3:ba:da:fe:44:aa:5c:56:72:b7:5b:ca:2e:
e7:c9:6a:b8:27:c1:5a:94:7c:4b:d4:a0:ad:be:3b:32:c8:4d:
a9:1e:cd:09:6d:14:4e:9d:f5:1b:ab:ca:d8:c5:32:74:50:32:
e4:34:dc:a4:b1:23:89:f2:95:96:e9:34:e4:4a:47:ed:f5:2b:
b4:ac:ef:7a:22:3a:18:e2:46:39:13:12:cb:20:28:20:ca:86:
0e:10:9b:b0:8b:68:01:9e:7e:3e:28:59:6e:30:7e:a0:8e:28:
13:9c:43:7b:94:d1:35:13:4a:e9:1a:61:fe:52:6b:5d:d2:03:
12:16:dd:bb:29:45:96:35:1e:46:9b:d0:4c:67:6f:88:35:ef:
2e:ff:25:d8:12:40:c5:e4:58:26:48:a8:da:a5:4e:f6:74:7a:
50:e3:33:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:03:00 2026 by rpki-client