Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e3139302e302f32342d3234203d3e2035353131.roa
File: 35312e3134362e3139302e302f32342d3234203d3e2035353131.roa (raw, json)
Hash identifier: p84p/rXnvAj5j0Q2a+HeAeS6RN/SCkoQtWMtuERuI0k=
Subject key identifier: 1F:F3:FE:F5:C7:D0:09:42:B2:27:7D:D5:71:09:8A:81:40:C3:40:54
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 209680EFE06C216C95EFC879C708CF3DF0FEB9B9
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e3139302e302f32342d3234203d3e2035353131.roa
Signing time: Mon 16 Mar 2026 17:16:43 +0000
ROA not before: Mon 16 Mar 2026 17:11:43 +0000
ROA not after: Mon 15 Mar 2027 17:16:43 +0000
asID: 5511
IP address blocks: 51.146.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:96:80:ef:e0:6c:21:6c:95:ef:c8:79:c7:08:cf:3d:f0:fe:b9:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Mar 16 17:11:43 2026 GMT
Not After : Mar 15 17:16:43 2027 GMT
Subject: CN=1FF3FEF5C7D00942B2277DD571098A8140C34054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bc:e3:ba:82:c0:9e:db:18:52:ea:4a:e7:ff:
55:4f:dc:66:4c:37:d3:94:17:4a:13:3b:c7:2a:ac:
c8:ad:6c:d1:2d:f9:d4:10:94:5e:e5:fd:6d:e3:d0:
78:fe:e7:41:0f:93:3c:e0:13:d8:2d:8d:73:5a:71:
63:b0:56:b3:85:91:85:68:12:1e:f6:70:42:45:42:
5e:9c:fd:9e:8f:0b:e1:ab:ab:5b:8e:f4:c0:80:98:
9e:cf:f7:08:cc:0e:57:87:cf:69:50:4e:b5:72:65:
d9:62:33:a5:d2:29:77:cd:c8:ff:ac:d6:fa:08:d0:
1d:2a:31:9e:63:e5:74:dd:d7:93:51:01:7d:1a:6c:
34:5e:ad:f0:ca:9f:f4:f5:ec:f3:76:75:8d:59:74:
43:b5:f4:75:78:e9:76:28:df:45:3e:88:f8:5a:38:
b2:4e:35:f7:b6:d2:90:1b:98:7e:c6:43:09:08:02:
e9:5c:fc:1d:f4:d5:f8:7f:c5:08:04:20:de:07:b9:
9e:1c:1a:15:87:9f:17:3d:2d:e1:cb:b2:20:20:00:
a0:e7:d1:b0:d9:87:76:2e:2f:67:6e:3d:86:8c:82:
57:96:0b:57:e9:6f:5c:e2:d8:d7:c1:f4:02:2d:38:
79:fe:65:d8:66:28:e6:5e:23:7f:f1:ea:06:dc:45:
56:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F3:FE:F5:C7:D0:09:42:B2:27:7D:D5:71:09:8A:81:40:C3:40:54
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e3139302e302f32342d3234203d3e2035353131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.190.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:c2:5e:ad:5a:b6:63:12:f0:32:0d:7f:41:6b:56:76:32:a7:
74:a2:9a:1e:2a:4d:8f:ff:b4:04:52:15:68:90:e0:e7:8a:6a:
90:d7:98:55:06:2d:6b:d9:bb:f4:80:bb:af:3b:10:0d:36:be:
15:56:8b:47:7e:26:7c:ad:18:06:29:5a:d0:b3:75:60:56:52:
41:8f:24:99:f3:e1:9f:d5:da:5e:56:69:a0:9c:a3:51:ae:2d:
88:1d:ec:fc:5e:ba:ba:00:c3:2c:16:53:8c:93:bf:ee:c8:a6:
71:30:f1:7a:e8:91:e1:11:9f:d4:c4:68:17:34:b3:12:2e:51:
4b:5f:48:84:70:6f:b7:da:25:17:b2:5b:e4:67:72:4c:24:37:
5f:d9:b4:de:3a:c8:91:81:f5:f5:85:0e:1d:46:d6:5b:0b:24:
3d:ae:22:00:61:96:07:0d:b0:bc:38:7e:b5:41:ce:7f:eb:42:
4d:53:bc:d7:93:38:f9:56:58:1a:ec:95:b2:28:3d:05:9f:7f:
c8:f8:a1:52:96:f4:03:fd:b8:87:0c:97:f2:a3:de:86:0d:fa:
7a:33:ce:5a:f6:9f:5f:bc:5a:3f:81:aa:7c:22:6f:9d:ba:00:
c4:a7:3f:aa:02:cd:7d:1d:5b:4e:30:ea:74:7d:52:f5:56:06:
5d:5e:2e:0d
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUIJaA7+BsIWyV78h5xwjPPfD+ubkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjAzMTYxNzExNDNaFw0yNzAzMTUxNzE2NDNaMDMxMTAvBgNV
BAMTKDFGRjNGRUY1QzdEMDA5NDJCMjI3N0RENTcxMDk4QTgxNDBDMzQwNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYvOO6gsCe2xhS6krn/1VP3GZM
N9OUF0oTO8cqrMitbNEt+dQQlF7l/W3j0Hj+50EPkzzgE9gtjXNacWOwVrOFkYVo
Eh72cEJFQl6c/Z6PC+Grq1uO9MCAmJ7P9wjMDleHz2lQTrVyZdliM6XSKXfNyP+s
1voI0B0qMZ5j5XTd15NRAX0abDRerfDKn/T17PN2dY1ZdEO19HV46XYo30U+iPha
OLJONfe20pAbmH7GQwkIAulc/B301fh/xQgEIN4HuZ4cGhWHnxc9LeHLsiAgAKDn
0bDZh3YuL2duPYaMgleWC1fpb1zi2NfB9AItOHn+ZdhmKOZeI3/x6gbcRVb7AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUH/P+9cfQCUKyJ33VcQmKgUDDQFQwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTZlNGFjODYt
MTgwMy00OTRkLThhN2ItYzA1MWE2MzEwNzUyLzAvMzUzMTJlMzEzNDM2MmUzMTM5
MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNTM1MzEzMS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEADOS
vjANBgkqhkiG9w0BAQsFAAOCAQEAfcJerVq2YxLwMg1/QWtWdjKndKKaHipNj/+0
BFIVaJDg54pqkNeYVQYta9m79IC7rzsQDTa+FVaLR34mfK0YBila0LN1YFZSQY8k
mfPhn9XaXlZpoJyjUa4tiB3s/F66ugDDLBZTjJO/7simcTDxeuiR4RGf1MRoFzSz
Ei5RS19IhHBvt9olF7Jb5GdyTCQ3X9m03jrIkYH19YUOHUbWWwskPa4iAGGWBw2w
vDh+tUHOf+tCTVO815M4+VZYGuyVsig9BZ9/yPihUpb0A/24hwyX8qPehg36ejPO
WvafX7xaP4GqfCJvnboAxKc/qgLNfR1bTjDqdH1S9VYGXV4uDQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:22:37 2026 by rpki-client