Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e3135342e302f32342d3234203d3e203432363839.roa
File: 35312e3134362e3135342e302f32342d3234203d3e203432363839.roa (raw, json)
Hash identifier: 2qWfZdbwvrjKXEv2dYpxSQ9CeUkrzLqouR5DDGFeejo=
Subject key identifier: 54:FC:10:C1:06:4D:4E:56:AD:E0:21:67:FC:0F:8C:1C:02:FB:E6:61
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 3EF6D81099480D246C67DF2FCA7A810BD0F83AE8
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e3135342e302f32342d3234203d3e203432363839.roa
Signing time: Tue 17 Mar 2026 14:56:12 +0000
ROA not before: Tue 17 Mar 2026 14:51:12 +0000
ROA not after: Tue 16 Mar 2027 14:56:12 +0000
asID: 42689
IP address blocks: 51.146.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:f6:d8:10:99:48:0d:24:6c:67:df:2f:ca:7a:81:0b:d0:f8:3a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Mar 17 14:51:12 2026 GMT
Not After : Mar 16 14:56:12 2027 GMT
Subject: CN=54FC10C1064D4E56ADE02167FC0F8C1C02FBE661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:05:50:16:12:01:28:66:7d:c4:ad:94:f7:47:
5b:5f:12:a2:7e:c3:cb:60:10:77:2f:16:c5:d9:9f:
87:9f:a1:9e:0a:7e:97:1a:da:92:51:bf:7a:33:a1:
66:d3:c5:71:c0:3b:6f:17:81:0f:9b:41:d9:df:8a:
97:65:e7:e5:7e:34:91:8f:87:8c:ad:02:fe:11:63:
66:4e:36:ed:3a:47:21:2c:ac:b9:13:dc:95:e7:59:
3a:19:eb:0b:84:ce:a7:3f:fb:b4:5b:bd:42:f5:76:
6e:bc:70:59:ea:86:0a:2f:7d:6d:92:30:42:95:06:
95:eb:23:99:5b:2b:dd:a4:9d:ff:82:26:b5:7e:85:
66:cc:2c:09:7d:05:a0:77:b8:a0:71:be:7f:2c:c8:
59:78:ff:f0:8a:61:06:15:e4:d0:7a:ca:83:c5:4b:
fe:9e:57:0a:51:d8:3b:be:8d:7d:e8:a0:61:af:3c:
d5:f5:ae:20:b2:74:5b:79:31:74:87:9c:5b:cc:1c:
61:62:bd:c5:3c:12:99:c7:ce:9d:0e:f5:a1:a0:48:
50:80:e0:3f:59:31:63:ba:04:5f:82:25:2f:ee:d0:
da:c4:38:46:94:9d:c9:6c:38:5f:f8:5f:9f:68:64:
57:99:05:77:9a:c6:2f:60:23:b8:44:ec:94:27:5a:
0e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:FC:10:C1:06:4D:4E:56:AD:E0:21:67:FC:0F:8C:1C:02:FB:E6:61
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e3135342e302f32342d3234203d3e203432363839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.154.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:08:18:ab:c8:ba:e1:9f:b2:de:ef:ec:15:7a:87:41:a5:71:
df:66:ac:f9:a6:2f:ab:2a:39:2b:46:5c:64:55:2d:11:c9:f8:
7f:b4:4c:f2:c8:e3:2a:e8:de:79:14:88:1f:60:5e:a3:32:fb:
7d:78:f2:88:9b:99:d5:38:81:20:90:7a:96:a4:30:d7:cc:78:
ca:7d:32:31:b2:4a:19:27:3d:be:a6:95:33:bf:7f:91:c9:dd:
55:fb:ce:b2:70:39:52:5b:93:47:8a:9c:a7:f2:f8:df:bd:32:
34:25:82:6c:03:b9:24:b6:7b:3f:6a:61:78:41:32:d7:5d:f8:
a9:e1:44:0a:d1:5d:6c:1a:92:6d:2c:e7:bf:31:c7:a1:51:96:
8e:70:c7:5e:d9:db:67:10:33:77:5e:26:0c:96:18:72:94:8c:
3c:3b:a4:20:3e:5c:89:50:2f:a7:f0:7f:c5:0d:37:ee:e4:21:
b6:c6:10:b0:92:9b:b1:99:2d:5c:2b:ef:78:35:9c:dd:c5:7b:
75:fa:d9:b4:e5:44:d4:b5:71:e6:d7:a6:22:4b:3e:8d:60:1c:
61:87:57:a0:35:4d:89:42:05:4b:09:e5:62:05:dd:67:8e:94:
55:c2:ad:0e:4e:28:14:74:2c:8b:0e:c3:80:ba:08:80:b6:17:
ee:25:eb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:40:16 2026 by rpki-client