Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e3138302e302f32322d3234203d3e2035363530.roa
File: 35312e3134362e3138302e302f32322d3234203d3e2035363530.roa (raw, json)
Hash identifier: FMaPCcrmUoHe4zqMqFf/3+CKLDnjDdKMcO0BStatPt8=
Subject key identifier: CB:54:54:9A:E7:C9:67:E9:32:29:69:AB:99:27:A9:81:4B:60:B9:1A
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 7CB7B520CF9D947BD89378D754E9DECC123D230B
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e3138302e302f32322d3234203d3e2035363530.roa
Signing time: Mon 09 Mar 2026 16:25:00 +0000
ROA not before: Mon 09 Mar 2026 16:20:00 +0000
ROA not after: Mon 08 Mar 2027 16:25:00 +0000
asID: 5650
IP address blocks: 51.146.180.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:b7:b5:20:cf:9d:94:7b:d8:93:78:d7:54:e9:de:cc:12:3d:23:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Mar 9 16:20:00 2026 GMT
Not After : Mar 8 16:25:00 2027 GMT
Subject: CN=CB54549AE7C967E9322969AB9927A9814B60B91A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:67:17:5f:5d:89:aa:d2:41:e7:3c:c2:08:29:
9a:85:18:38:76:45:fd:2f:64:e8:35:67:bb:e6:8c:
a7:72:85:63:a1:23:83:56:ac:29:ad:43:e6:1a:36:
31:ed:47:23:bf:16:c2:92:4e:23:93:d8:d5:cd:c7:
8f:63:3a:86:c7:8b:48:de:65:fc:b9:0f:99:6a:4b:
2c:9d:64:be:6d:0f:41:fb:cb:dc:ae:20:3d:74:6d:
8c:03:4f:07:65:32:32:35:7f:18:c4:49:a5:83:b6:
e4:be:f1:97:6b:a8:0a:5d:1f:24:f6:31:8c:b8:72:
a6:16:64:07:09:4f:7d:f6:11:57:fa:9a:17:ef:db:
82:69:d3:0f:e5:0e:77:dc:b1:1b:c4:8c:8c:1e:02:
30:fd:bb:7a:0a:55:e5:6d:ae:16:36:c8:84:86:5a:
2a:0d:3f:d4:6e:28:c9:b5:23:38:13:b0:33:2d:f3:
c3:c6:11:5b:d4:05:fb:b3:94:ba:4d:53:fc:0d:d1:
2b:6e:6e:83:9c:68:23:ab:13:92:39:ed:ad:6d:e8:
8c:ce:2c:c7:95:e4:51:89:37:3d:20:de:55:39:ce:
a2:b8:34:ba:02:a6:0b:74:ab:90:ee:6d:2c:1f:00:
69:b5:56:23:2d:8f:cb:ae:01:d4:ba:8c:25:0f:fc:
c3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:54:54:9A:E7:C9:67:E9:32:29:69:AB:99:27:A9:81:4B:60:B9:1A
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e3138302e302f32322d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.180.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:37:b3:ee:bd:6b:bb:29:93:e3:18:4e:b8:7c:4e:b4:b4:4c:
f1:dd:56:17:b3:ae:1a:08:6c:bb:ae:87:57:99:d8:f8:71:9f:
26:84:5f:78:04:41:4a:05:26:c8:a3:68:c6:8f:01:03:5e:40:
71:e5:ea:94:1f:4d:0d:9c:5a:09:c8:09:6b:21:af:12:03:41:
b4:64:d5:28:b0:c2:81:58:e5:7f:e1:c4:aa:77:e0:59:72:cf:
95:d6:d0:42:43:90:a4:62:17:e4:57:3b:d0:40:5f:fd:fa:53:
a3:3b:74:ec:fc:50:38:a8:9a:9d:83:d9:5b:da:58:79:e0:17:
d0:1d:85:59:db:93:f8:9e:41:0c:5e:6d:ea:5d:35:e9:28:8f:
c5:ac:ab:31:5d:1e:71:9f:55:b5:97:77:d3:f3:09:d8:46:5d:
11:cd:74:b8:c2:c8:d7:31:8f:a6:6a:38:9e:7c:d8:8f:89:d6:
be:27:a7:a3:6f:cf:fe:00:e3:38:12:eb:82:20:2b:e6:ee:41:
3d:34:72:ba:a4:05:01:c0:56:2d:98:fe:22:8f:e0:86:3f:ee:
f7:27:7c:25:4a:48:41:bf:b1:ef:a0:b6:84:9b:5a:1f:57:99:
5c:f0:04:a6:0a:01:d2:6d:0a:61:2d:1c:86:27:9f:09:1c:3c:
cc:0b:72:1b
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUfLe1IM+dlHvYk3jXVOnezBI9IwswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjAzMDkxNjIwMDBaFw0yNzAzMDgxNjI1MDBaMDMxMTAvBgNV
BAMTKENCNTQ1NDlBRTdDOTY3RTkzMjI5NjlBQjk5MjdBOTgxNEI2MEI5MUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbZxdfXYmq0kHnPMIIKZqFGDh2
Rf0vZOg1Z7vmjKdyhWOhI4NWrCmtQ+YaNjHtRyO/FsKSTiOT2NXNx49jOobHi0je
Zfy5D5lqSyydZL5tD0H7y9yuID10bYwDTwdlMjI1fxjESaWDtuS+8ZdrqApdHyT2
MYy4cqYWZAcJT332EVf6mhfv24Jp0w/lDnfcsRvEjIweAjD9u3oKVeVtrhY2yISG
WioNP9RuKMm1IzgTsDMt88PGEVvUBfuzlLpNU/wN0StuboOcaCOrE5I57a1t6IzO
LMeV5FGJNz0g3lU5zqK4NLoCpgt0q5DubSwfAGm1ViMtj8uuAdS6jCUP/MNLAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUy1RUmufJZ+kyKWmrmSepgUtguRowHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTZlNGFjODYt
MTgwMy00OTRkLThhN2ItYzA1MWE2MzEwNzUyLzAvMzUzMTJlMzEzNDM2MmUzMTM4
MzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTM2MzUzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAjOS
tDANBgkqhkiG9w0BAQsFAAOCAQEAbjez7r1ruymT4xhOuHxOtLRM8d1WF7OuGghs
u66HV5nY+HGfJoRfeARBSgUmyKNoxo8BA15AceXqlB9NDZxaCcgJayGvEgNBtGTV
KLDCgVjlf+HEqnfgWXLPldbQQkOQpGIX5Fc70EBf/fpTozt07PxQOKianYPZW9pY
eeAX0B2FWduT+J5BDF5t6l016SiPxayrMV0ecZ9VtZd30/MJ2EZdEc10uMLI1zGP
pmo4nnzYj4nWvieno2/P/gDjOBLrgiAr5u5BPTRyuqQFAcBWLZj+Io/ghj/u9yd8
JUpIQb+x76C2hJtaH1eZXPAEpgoB0m0KYS0chiefCRw8zAtyGw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:13:16 2026 by rpki-client