Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e3138372e302f32342d3234203d3e2035353131.roa
File: 35312e3134362e3138372e302f32342d3234203d3e2035353131.roa (raw, json)
Hash identifier: bc+j5M4ZN8LpivH75KIy8pR6YpKWXQ+m5FGIACUm/+Y=
Subject key identifier: 35:BA:88:4C:AC:C6:B5:29:BC:6B:FC:5C:5A:67:81:DD:CE:2C:D7:A9
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 490528D70304AD8A6772C50C8852D4903AA7CBEB
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e3138372e302f32342d3234203d3e2035353131.roa
Signing time: Mon 16 Mar 2026 17:16:42 +0000
ROA not before: Mon 16 Mar 2026 17:11:42 +0000
ROA not after: Mon 15 Mar 2027 17:16:42 +0000
asID: 5511
IP address blocks: 51.146.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:05:28:d7:03:04:ad:8a:67:72:c5:0c:88:52:d4:90:3a:a7:cb:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Mar 16 17:11:42 2026 GMT
Not After : Mar 15 17:16:42 2027 GMT
Subject: CN=35BA884CACC6B529BC6BFC5C5A6781DDCE2CD7A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1f:2e:7c:0c:73:dc:53:b0:cc:d2:1f:58:c9:
91:87:e7:73:2d:02:47:14:b8:bb:14:e5:9b:9a:0c:
5e:ca:d1:84:60:51:15:b5:bf:91:2e:fe:8a:04:d4:
cb:8d:d3:1a:13:1c:ca:d0:0e:68:42:ee:93:a4:48:
7e:c5:cf:15:59:06:97:b1:25:4c:d2:09:b3:bb:9b:
d5:11:76:2a:20:2f:c7:e8:89:2c:91:14:87:71:6d:
9f:6f:0f:d7:af:65:93:ca:5e:94:0b:29:da:69:ec:
d7:11:d8:7d:6e:7d:a1:74:4f:6f:53:ac:63:12:96:
ae:07:a6:f6:c9:9a:86:49:dd:74:7c:c7:46:b4:f1:
e6:b4:1d:e7:56:d3:5e:10:a4:44:b7:52:1d:94:77:
86:71:40:95:35:70:39:83:8d:cc:c7:23:a9:47:c4:
4b:85:23:3f:1c:a8:41:64:a2:94:59:78:87:47:48:
fc:3f:86:dc:39:2a:08:18:33:0d:13:40:6e:ea:33:
a9:1d:6d:96:bf:4d:1f:5e:ee:cf:90:c7:8c:ab:a1:
08:0b:c1:d4:fa:7f:74:ac:10:d4:c9:76:7a:b2:af:
80:92:18:6b:5c:29:d8:48:81:07:ad:8a:54:b4:47:
84:a3:c3:ee:d6:df:3f:6c:6d:c3:c5:4a:71:03:b6:
cb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:BA:88:4C:AC:C6:B5:29:BC:6B:FC:5C:5A:67:81:DD:CE:2C:D7:A9
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e3138372e302f32342d3234203d3e2035353131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.187.0/24
Signature Algorithm: sha256WithRSAEncryption
76:fd:43:81:a5:56:89:03:82:0b:a6:7d:26:e0:f9:5c:72:74:
e8:1c:bf:80:4e:5a:ce:d8:98:ca:b6:58:b4:87:37:b0:3d:43:
4e:c8:b1:91:05:46:4d:2b:a6:77:92:62:ed:28:f7:c1:93:24:
dd:2a:82:95:4d:44:4a:b6:e4:a1:cf:5b:26:60:3d:51:81:da:
25:cd:f8:c9:2d:61:db:ef:62:3b:20:56:9d:9d:93:10:70:93:
e5:53:12:b1:aa:e2:c5:e2:b6:c6:81:6f:95:a1:75:65:ef:6f:
59:db:2d:94:12:5e:4a:1f:57:ce:b0:e4:74:6e:e4:fe:5b:04:
64:43:ad:14:86:5d:95:cb:ed:60:ad:50:40:89:e4:18:98:96:
e4:ee:ed:6d:03:b2:a9:69:c0:30:ff:41:24:e2:88:b7:39:ee:
dd:47:0a:dd:f3:01:12:80:72:ca:06:57:66:15:43:b1:b1:36:
d9:64:8e:e8:dd:19:e4:eb:c9:f0:0c:43:87:13:6f:19:97:71:
ba:db:f5:bf:20:2a:9a:1c:70:b1:b2:99:4d:d6:1e:da:e1:1d:
57:eb:13:e9:9c:1e:36:6d:ef:34:cf:e0:83:1b:10:e0:48:99:
1a:45:0e:15:01:b3:3d:d8:6b:e0:d4:db:e2:9d:d4:67:e0:f1:
92:bc:8f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:36:40 2026 by rpki-client