Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e3135352e302f32342d3234203d3e2035353131.roa
File: 35312e3134362e3135352e302f32342d3234203d3e2035353131.roa (raw, json)
Hash identifier: LnW7CZybwafKwqWU1l565Bzoa5G+FdW0wbyl+D86PCE=
Subject key identifier: 36:16:87:49:62:D0:DD:98:19:1F:DF:C2:1E:2D:5A:0C:7E:14:1C:D7
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 7B46AFB465724DA969A8AB657D4DAE2C4A32A878
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e3135352e302f32342d3234203d3e2035353131.roa
Signing time: Mon 16 Mar 2026 17:16:39 +0000
ROA not before: Mon 16 Mar 2026 17:11:39 +0000
ROA not after: Mon 15 Mar 2027 17:16:39 +0000
asID: 5511
IP address blocks: 51.146.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:46:af:b4:65:72:4d:a9:69:a8:ab:65:7d:4d:ae:2c:4a:32:a8:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Mar 16 17:11:39 2026 GMT
Not After : Mar 15 17:16:39 2027 GMT
Subject: CN=3616874962D0DD98191FDFC21E2D5A0C7E141CD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f5:99:f0:d3:ae:d7:a6:16:5e:37:15:da:ac:
43:41:1f:8d:66:ef:ab:f8:cb:4f:3d:7a:79:99:c1:
66:57:23:67:6f:6f:a7:51:67:4c:d2:6a:0e:41:3e:
0b:c6:94:41:44:2b:c7:09:bb:8b:e9:0d:9f:75:3c:
0a:f0:b8:cd:35:18:ae:65:74:f8:b0:53:76:07:f2:
0e:d8:f5:66:c8:9b:2a:f0:32:da:40:35:11:b4:7f:
3b:23:50:76:30:cc:c9:10:c0:94:73:45:8c:8b:58:
b2:c0:2c:31:45:a7:83:d8:98:4b:49:5d:8d:66:16:
23:db:f6:9f:33:e6:e7:ce:b1:72:56:35:14:16:8d:
fd:fd:13:f4:b3:21:4c:68:56:98:5c:78:48:d1:74:
15:50:94:18:b8:c7:38:f2:a5:2e:31:4b:5f:93:28:
ea:c9:76:6b:6e:57:9a:0d:8b:b0:a0:2b:f2:3a:11:
58:da:7b:3c:bd:f6:61:27:bb:d8:09:eb:71:7d:68:
64:ce:cf:02:98:bf:ed:8d:55:48:f9:01:f2:1c:c1:
a4:59:4a:b3:fc:a7:b3:57:79:47:0e:3a:f1:53:6c:
25:36:6c:42:4e:be:8f:35:f5:16:33:44:e7:aa:6d:
1b:2f:92:54:50:a6:20:b4:a6:ff:46:81:d9:40:de:
1c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:16:87:49:62:D0:DD:98:19:1F:DF:C2:1E:2D:5A:0C:7E:14:1C:D7
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e3135352e302f32342d3234203d3e2035353131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.155.0/24
Signature Algorithm: sha256WithRSAEncryption
30:95:3e:e2:92:1e:56:dc:08:5a:2a:65:ba:24:bf:6c:b1:7a:
9a:dc:2b:05:2f:08:1e:06:23:d1:af:97:fa:85:b0:77:8d:9c:
44:11:d6:01:4f:51:ad:8c:4c:8f:ce:3e:60:49:44:45:20:de:
f5:e8:f8:4a:f8:93:f0:d9:e8:96:da:9c:bf:4b:2d:ad:99:bd:
e0:10:5a:a2:25:45:58:ff:6d:9b:cc:72:e9:46:98:d7:7e:33:
fa:fc:15:16:42:7d:09:91:e9:d9:6e:47:3f:40:cb:95:9f:a2:
ff:4e:b0:c7:ab:39:b4:af:f7:a3:ad:b0:e9:db:ea:13:50:c5:
06:94:eb:c4:54:d2:75:dc:15:03:db:be:99:16:99:99:26:46:
ff:a8:74:ce:ea:af:9c:77:a9:07:3f:65:38:3c:a4:36:2a:2b:
75:14:25:ce:9b:f9:fd:69:1a:b0:77:11:64:d8:d2:71:93:7f:
b5:a1:10:c9:9c:ad:de:cd:79:e9:0c:d2:fe:e5:55:f2:e5:84:
94:e6:ec:74:96:7e:aa:ea:b2:77:fd:a5:08:ac:7f:99:1d:c2:
05:01:a1:9a:36:88:e8:d9:03:73:3b:e8:6d:6b:90:1e:6b:d7:
0e:01:13:3c:19:0f:b1:db:5f:51:c4:e2:58:6c:93:5c:c2:95:
f6:f9:0c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:36:50 2026 by rpki-client