Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e3135332e302f32342d3234203d3e2035353131.roa
File: 35312e3134362e3135332e302f32342d3234203d3e2035353131.roa (raw, json)
Hash identifier: jMg0Grxd9qWLgGJ9s42r3U2vHbW0Wg0VaSRRw6FU1XY=
Subject key identifier: 22:DF:65:7D:99:EA:CF:65:9C:B1:D7:07:EB:D7:EE:AF:1C:C1:E6:D3
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 26AE6B26FA2C5B7ACDDC4B33CB48E84F615D85B9
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e3135332e302f32342d3234203d3e2035353131.roa
Signing time: Mon 16 Mar 2026 17:16:38 +0000
ROA not before: Mon 16 Mar 2026 17:11:38 +0000
ROA not after: Mon 15 Mar 2027 17:16:38 +0000
asID: 5511
IP address blocks: 51.146.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:ae:6b:26:fa:2c:5b:7a:cd:dc:4b:33:cb:48:e8:4f:61:5d:85:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Mar 16 17:11:38 2026 GMT
Not After : Mar 15 17:16:38 2027 GMT
Subject: CN=22DF657D99EACF659CB1D707EBD7EEAF1CC1E6D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:28:81:a1:46:88:64:c1:e3:72:e2:91:a5:40:
cf:15:dc:a0:43:82:e9:31:b6:cf:18:0e:ce:4e:cf:
13:12:a9:e5:fd:12:d3:64:61:a8:e2:f1:46:b5:84:
b0:c0:35:76:48:ad:a6:bf:14:70:d0:c2:ec:3d:3b:
df:ba:07:8c:f9:04:82:ed:39:5a:70:27:63:2a:d4:
18:57:2a:b2:63:b1:7d:28:43:46:2a:8f:fc:5c:e4:
51:32:e3:3b:7e:6c:81:af:24:29:d3:66:9d:89:bc:
ff:76:5b:66:3d:77:b3:9e:30:7a:1d:cd:89:23:e8:
74:f2:93:8a:88:1b:32:99:99:28:68:93:a1:bc:60:
d0:b9:36:55:e7:23:97:57:19:32:00:a1:4c:09:47:
02:44:ce:1b:a0:ec:4c:3a:53:75:16:e1:61:bd:19:
0d:7c:ba:03:db:8b:99:ee:32:68:d0:61:0f:b7:0c:
60:d0:4f:34:20:be:f9:3c:24:d1:9b:0d:c4:a2:cc:
9a:08:52:c8:cf:9c:7e:2a:cd:67:55:64:c8:70:d0:
47:84:db:b1:c3:f2:d0:17:b8:30:63:5a:d0:54:12:
73:2b:ff:08:e1:b6:6a:50:63:57:89:31:78:96:49:
e2:ec:0e:c9:b7:19:fd:1a:06:1b:53:7c:5c:d1:8f:
88:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DF:65:7D:99:EA:CF:65:9C:B1:D7:07:EB:D7:EE:AF:1C:C1:E6:D3
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e3135332e302f32342d3234203d3e2035353131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.153.0/24
Signature Algorithm: sha256WithRSAEncryption
86:f0:37:97:e4:e3:47:22:7d:41:f2:e6:0f:56:a2:15:87:c4:
97:15:fc:50:87:bf:ea:44:35:f5:cb:78:44:cc:b5:7c:9d:38:
7c:28:58:2d:41:4e:a2:5a:bc:a7:53:61:60:9c:21:ba:cd:36:
3d:a0:cf:9e:ca:9e:4d:55:21:e8:bf:9b:bf:a8:c8:c4:40:3d:
40:cb:49:b9:94:f6:a7:27:ae:81:69:90:78:2a:ea:4b:e8:2b:
7e:12:1c:c3:e3:58:cc:2d:86:a4:6a:bf:0c:a5:4a:ad:8d:40:
0f:93:3e:24:29:2d:3b:28:e9:40:14:1b:8d:66:0d:b1:c9:35:
de:f9:5c:5b:3e:bb:4f:dc:37:74:83:32:6f:01:1e:7d:b7:e5:
52:5c:e2:25:16:f7:e0:ce:e5:b3:a2:d2:96:82:4b:ef:fd:8a:
86:1e:6b:72:80:66:7b:8c:bc:6a:43:50:65:7d:e9:86:29:df:
88:8f:ed:09:30:3b:e8:d4:3f:d8:51:89:47:ac:a1:3c:9a:eb:
71:3a:c4:5a:13:40:d2:7b:cb:77:d5:cc:40:48:33:94:e5:05:
a0:f1:d3:8d:9b:c1:79:7d:64:d0:3c:bc:bd:b2:0b:f1:96:77:
e0:50:26:d5:56:20:dd:e1:17:58:ea:05:1d:14:dc:ef:89:a8:
d8:db:13:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:22:54 2026 by rpki-client