Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e3135392e302f32342d3234203d3e203432363839.roa
File: 35312e3134362e3135392e302f32342d3234203d3e203432363839.roa (raw, json)
Hash identifier: Uglq98nLLJoxiPOJUlM/XxuaRYCBW2ikmiR8rYpLC9o=
Subject key identifier: 1A:D2:37:20:0A:2B:57:AD:D8:A3:07:36:BA:00:BB:CA:2A:63:C6:65
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 7A33B1503AE645A4C822269189F73A47E6DFB0C4
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e3135392e302f32342d3234203d3e203432363839.roa
Signing time: Tue 17 Mar 2026 14:56:14 +0000
ROA not before: Tue 17 Mar 2026 14:51:14 +0000
ROA not after: Tue 16 Mar 2027 14:56:14 +0000
asID: 42689
IP address blocks: 51.146.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 11:13:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:33:b1:50:3a:e6:45:a4:c8:22:26:91:89:f7:3a:47:e6:df:b0:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Mar 17 14:51:14 2026 GMT
Not After : Mar 16 14:56:14 2027 GMT
Subject: CN=1AD237200A2B57ADD8A30736BA00BBCA2A63C665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5c:68:a1:f8:12:39:92:fa:68:b3:d9:5d:74:
83:5d:71:9a:56:b3:32:4e:12:4a:2b:53:db:66:02:
15:eb:11:26:ea:97:5e:cf:d7:0b:9b:d6:70:53:23:
96:0c:7a:b5:d3:c0:c5:0a:d4:a3:6a:6e:56:a1:d9:
c4:4c:98:88:15:68:6a:16:36:85:7a:a3:6c:f8:ab:
e0:05:9a:f0:64:f3:98:ac:bd:e9:fa:da:1a:1d:16:
0d:04:9b:94:01:ae:a8:33:a5:aa:ac:57:64:91:30:
e8:e9:f8:00:dc:a0:e2:c7:df:98:9f:58:a5:dd:c3:
b2:25:83:be:4e:89:12:ca:b9:98:3f:fe:10:0e:0b:
55:11:fd:1e:8b:4c:8f:49:27:51:bc:f1:c0:c9:14:
7e:8c:ab:e2:7e:03:6c:65:29:20:02:b7:ec:39:a7:
25:b9:fa:fc:1a:77:04:39:bb:7a:a4:53:5c:7b:b4:
1d:06:1a:be:41:3e:70:62:37:35:c7:99:93:1b:2f:
dd:27:81:0a:aa:53:19:10:14:06:9d:f7:3e:48:39:
cf:64:cc:7e:63:4d:9f:86:ee:9d:7b:49:86:85:f0:
08:5d:50:e3:21:f5:54:83:13:12:dc:16:29:ed:11:
81:3a:a4:49:eb:b0:58:32:a0:ae:c4:d1:42:4a:0c:
f6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D2:37:20:0A:2B:57:AD:D8:A3:07:36:BA:00:BB:CA:2A:63:C6:65
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e3135392e302f32342d3234203d3e203432363839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.159.0/24
Signature Algorithm: sha256WithRSAEncryption
02:58:83:7f:41:1f:be:a5:86:31:35:52:5c:f2:2b:33:67:99:
1e:ab:06:d8:4e:f4:0d:84:0f:c1:d9:e7:4b:be:23:04:34:f7:
d1:20:92:f9:03:b3:73:42:9a:cb:e3:a4:69:6d:a7:4a:54:77:
b9:8b:3f:c9:ee:9e:76:b0:08:0a:07:c5:9c:6f:c6:e0:7d:2c:
14:a0:8e:1b:05:da:26:e3:70:0d:91:10:35:4f:0d:24:3f:3c:
bd:e1:9f:fc:01:00:f5:4e:5e:d0:9c:86:e9:f0:d3:38:86:dc:
cd:1a:06:54:db:c8:3f:96:c3:2c:90:e5:6b:4f:7a:ba:6b:a0:
70:60:9d:16:a7:f8:28:7b:de:70:71:df:c7:98:70:dd:10:59:
3a:34:76:cc:5c:e2:1d:d7:f3:13:70:f0:23:3f:ce:b9:cd:dd:
32:38:3d:54:92:7c:f8:4d:0e:32:c8:3d:c7:72:1b:5a:4d:66:
2c:c0:8e:c1:bf:9f:67:21:00:96:12:69:7e:6d:ac:4f:5f:2a:
29:b7:12:65:5c:bc:90:8d:54:1c:76:3c:16:77:f6:82:d4:65:
d3:43:c5:da:57:98:ae:02:c4:79:4c:21:58:af:3e:63:f0:e0:
23:97:19:7c:ff:ad:9b:da:76:59:f1:a0:3a:db:3e:9d:f3:87:
36:a9:be:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:03:03 2026 by rpki-client