Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e3135362e302f32342d3234203d3e2035353131.roa
File: 35312e3134362e3135362e302f32342d3234203d3e2035353131.roa (raw, json)
Hash identifier: 188MpWpkvfDUU51l1QVcb5+fLVK4EfYXsZ2IcLniH0I=
Subject key identifier: 4B:F8:08:33:6D:EE:88:AC:35:25:DC:DA:E9:5B:CC:E3:23:71:E0:4D
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 78D6F9BDB80C403319E1D175DAE304AC760AE3F9
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e3135362e302f32342d3234203d3e2035353131.roa
Signing time: Mon 16 Mar 2026 17:16:40 +0000
ROA not before: Mon 16 Mar 2026 17:11:40 +0000
ROA not after: Mon 15 Mar 2027 17:16:40 +0000
asID: 5511
IP address blocks: 51.146.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:d6:f9:bd:b8:0c:40:33:19:e1:d1:75:da:e3:04:ac:76:0a:e3:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Mar 16 17:11:40 2026 GMT
Not After : Mar 15 17:16:40 2027 GMT
Subject: CN=4BF808336DEE88AC3525DCDAE95BCCE32371E04D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a5:85:02:c2:89:46:6b:1d:17:cd:47:fa:ad:
75:f5:70:44:f9:4e:06:ce:f9:e8:0d:47:92:d8:17:
46:3e:0b:89:56:0e:d0:cb:a1:e2:83:b0:b5:2f:ca:
4d:39:33:b1:38:f6:3a:42:d9:1c:15:c7:e2:21:98:
bb:5f:21:c2:01:93:5c:f4:5e:81:b0:2b:d3:2c:fe:
4c:6d:9c:73:5b:51:dc:3a:7d:56:28:cc:d7:00:11:
71:29:d0:23:0e:4c:00:f8:71:d2:da:67:17:48:66:
b4:d6:ed:51:2c:4d:44:ff:99:f6:e2:eb:cb:01:3f:
cd:e8:53:0f:ab:10:a1:1c:78:95:40:d3:bf:bc:a7:
38:6c:f7:2e:7b:f1:a7:0d:34:be:61:8b:26:07:ac:
06:e6:b4:b4:48:da:e1:f1:58:f2:4c:7c:ab:3f:c9:
bd:09:a9:04:82:79:71:7e:1d:69:96:4f:ad:38:dc:
27:76:c8:fa:3d:b3:ef:8e:9c:21:53:95:1e:20:28:
31:09:b4:91:d1:cc:d9:4e:7f:f0:10:ad:22:94:e5:
42:2e:c6:db:21:3c:56:91:27:54:4c:71:09:3a:82:
78:2d:79:ae:85:9c:9b:fb:0d:0a:56:9f:12:c1:3e:
ec:6e:10:30:9e:f0:73:a8:ea:1d:9f:1b:a9:7d:22:
cd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F8:08:33:6D:EE:88:AC:35:25:DC:DA:E9:5B:CC:E3:23:71:E0:4D
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e3135362e302f32342d3234203d3e2035353131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.156.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:ee:24:01:80:da:17:45:7f:13:79:25:78:61:c4:a9:ea:49:
18:9a:6c:22:2f:94:e2:5b:1e:35:ba:6c:0b:43:92:97:bd:17:
39:01:84:bc:ec:ef:79:e5:e1:08:70:cd:f1:8e:86:4f:a0:b6:
ba:10:8c:7b:b4:39:52:b6:12:db:1d:8b:18:fc:4c:55:aa:3e:
f9:31:5d:8e:bb:71:83:e7:98:51:b9:8a:6a:07:42:71:25:3f:
51:75:1a:ec:b5:b4:5b:ec:54:5f:36:02:2e:e1:5e:96:22:35:
59:3f:bd:74:5b:e8:7b:4b:89:95:a6:01:6a:d4:c5:37:88:30:
2a:66:3a:21:7b:f5:d9:68:13:44:e0:90:ea:fd:c3:c2:1d:a5:
d2:b6:2a:04:a1:25:d0:34:77:ad:b2:22:eb:da:93:6f:9c:bb:
86:b0:2f:c8:99:53:60:f7:b0:ee:58:38:ef:e8:02:2b:74:d3:
66:0d:a8:78:fe:ab:99:08:6d:a7:db:85:15:ea:03:8f:17:0c:
f8:3e:8b:f3:66:89:d8:2a:8d:dc:5e:ce:91:2b:84:7d:e3:70:
fc:04:0a:93:2d:f1:36:9a:8b:9c:1a:a4:db:3f:e9:e2:31:b6:
f6:b5:ea:09:54:9e:3d:4e:47:fb:02:92:db:f9:03:ef:5e:04:
b6:e1:ed:4e
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUeNb5vbgMQDMZ4dF12uMErHYK4/kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjAzMTYxNzExNDBaFw0yNzAzMTUxNzE2NDBaMDMxMTAvBgNV
BAMTKDRCRjgwODMzNkRFRTg4QUMzNTI1RENEQUU5NUJDQ0UzMjM3MUUwNEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzpYUCwolGax0XzUf6rXX1cET5
TgbO+egNR5LYF0Y+C4lWDtDLoeKDsLUvyk05M7E49jpC2RwVx+IhmLtfIcIBk1z0
XoGwK9Ms/kxtnHNbUdw6fVYozNcAEXEp0CMOTAD4cdLaZxdIZrTW7VEsTUT/mfbi
68sBP83oUw+rEKEceJVA07+8pzhs9y578acNNL5hiyYHrAbmtLRI2uHxWPJMfKs/
yb0JqQSCeXF+HWmWT6043Cd2yPo9s++OnCFTlR4gKDEJtJHRzNlOf/AQrSKU5UIu
xtshPFaRJ1RMcQk6gngtea6FnJv7DQpWnxLBPuxuEDCe8HOo6h2fG6l9Is0jAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUS/gIM23uiKw1Jdza6VvM4yNx4E0wHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTZlNGFjODYt
MTgwMy00OTRkLThhN2ItYzA1MWE2MzEwNzUyLzAvMzUzMTJlMzEzNDM2MmUzMTM1
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTM1MzEzMS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADOS
nDANBgkqhkiG9w0BAQsFAAOCAQEACu4kAYDaF0V/E3kleGHEqepJGJpsIi+U4lse
NbpsC0OSl70XOQGEvOzveeXhCHDN8Y6GT6C2uhCMe7Q5UrYS2x2LGPxMVao++TFd
jrtxg+eYUbmKagdCcSU/UXUa7LW0W+xUXzYCLuFeliI1WT+9dFvoe0uJlaYBatTF
N4gwKmY6IXv12WgTROCQ6v3Dwh2l0rYqBKEl0DR3rbIi69qTb5y7hrAvyJlTYPew
7lg47+gCK3TTZg2oeP6rmQhtp9uFFeoDjxcM+D6L82aJ2CqN3F7OkSuEfeNw/AQK
ky3xNpqLnBqk2z/p4jG29rXqCVSePU5H+wKS2/kD714EtuHtTg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:22:45 2026 by rpki-client