Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e3135372e302f32342d3234203d3e203432363839.roa
File: 35312e3134362e3135372e302f32342d3234203d3e203432363839.roa (raw, json)
Hash identifier: sY6a42VlcNadXgR2+5n78gaeT7PIu9e3ngAH8tvQDDU=
Subject key identifier: 19:75:43:D3:CA:A3:25:B9:E7:3C:F9:03:BF:5B:87:C5:C0:10:D9:B3
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 777B0618C9FFA3F32D648910EA044B59F8FC1D2C
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e3135372e302f32342d3234203d3e203432363839.roa
Signing time: Tue 17 Mar 2026 14:56:13 +0000
ROA not before: Tue 17 Mar 2026 14:51:13 +0000
ROA not after: Tue 16 Mar 2027 14:56:13 +0000
asID: 42689
IP address blocks: 51.146.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:46:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:7b:06:18:c9:ff:a3:f3:2d:64:89:10:ea:04:4b:59:f8:fc:1d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Mar 17 14:51:13 2026 GMT
Not After : Mar 16 14:56:13 2027 GMT
Subject: CN=197543D3CAA325B9E73CF903BF5B87C5C010D9B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:04:00:28:92:2b:ab:4a:dc:02:99:00:64:d1:
21:4b:2c:b3:88:75:45:0b:30:ea:a5:a0:96:a3:a3:
35:37:e3:81:e2:5d:59:e2:aa:44:af:c9:25:68:e8:
3d:4d:3b:14:74:7f:c4:9a:8f:b5:01:bb:af:b9:12:
5c:ee:22:f3:28:b8:2d:72:e1:d3:47:ff:4e:ae:5a:
c1:b8:e7:3f:88:d4:81:d3:b0:2b:d5:96:82:39:57:
b2:81:1e:6c:db:a4:41:7e:2c:6e:a8:e5:3f:15:a9:
0d:07:33:bf:45:70:ba:a9:eb:22:fc:81:a3:12:8b:
c5:ad:e1:b3:18:84:23:19:dd:09:97:e7:93:da:8f:
32:33:28:b2:f3:7c:d7:03:5e:8b:29:26:ca:5c:b7:
a4:31:e3:ae:41:be:09:b5:b8:35:6c:98:78:f1:0f:
4b:e8:bf:df:43:81:4d:30:de:f1:22:e8:e2:99:11:
87:8d:b5:97:a9:ae:db:e1:8e:b9:f8:fc:7a:cf:6c:
b7:f1:29:42:e4:ad:eb:73:9f:ee:3b:46:e9:e7:31:
a8:5f:41:3d:db:a3:b5:1f:b2:3b:1a:3f:c8:95:a1:
2c:e6:42:63:47:9d:58:e5:db:48:89:5c:3d:75:01:
b8:09:4e:c2:0d:d4:8c:92:eb:1e:56:a0:39:8e:49:
c4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:75:43:D3:CA:A3:25:B9:E7:3C:F9:03:BF:5B:87:C5:C0:10:D9:B3
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e3135372e302f32342d3234203d3e203432363839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.157.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:60:0f:39:23:1c:52:39:c1:74:e3:56:0a:fc:ad:13:d4:64:
e2:20:d5:8c:a4:4f:92:61:81:a2:12:68:a8:25:75:b0:c4:da:
2c:69:5e:0e:a1:2d:a3:75:10:b9:42:f1:0b:62:bd:c1:0c:82:
21:fa:dd:18:73:6a:d4:27:aa:19:b1:20:80:a1:4c:9b:87:63:
66:e7:f3:06:b7:1e:21:23:42:92:15:96:17:50:fa:7c:6c:5d:
37:33:c5:3c:7c:b6:48:27:9b:01:3d:87:97:fa:9b:21:bc:8c:
cc:6e:1c:9a:20:1d:1e:95:6e:1b:86:de:5c:e3:64:eb:c8:41:
3d:02:7c:1e:9c:20:77:93:d8:5c:80:e1:d8:c4:9a:99:b7:3a:
55:b3:0d:ef:9b:7c:57:61:db:13:30:e9:e7:3b:c5:5d:a0:be:
a6:60:13:8c:b8:b2:ce:d2:f1:43:f3:9c:96:9b:fa:da:82:56:
db:67:31:89:0d:6f:fe:36:f9:0b:1b:50:fb:41:e3:4d:94:62:
15:95:7c:3d:5c:3e:c2:28:2e:1b:ed:c6:b1:65:c5:fe:8d:e3:
af:74:ec:45:b6:7a:2e:d3:cf:ff:3f:a6:11:7f:50:55:17:82:
11:3f:fc:7f:04:ce:1c:b2:03:60:9f:b9:86:30:20:2b:0d:14:
10:52:2d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:01:46 2026 by rpki-client