Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e3139312e302f32342d3234203d3e2036373632.roa
File: 35312e3134362e3139312e302f32342d3234203d3e2036373632.roa (raw, json)
Hash identifier: MmgHo5kpudM6YedKGlOpROSLyGeI40fOtyNbEUJg8T8=
Subject key identifier: 73:F1:0B:67:3A:DE:68:B5:29:8C:4A:AA:76:BB:30:FA:7E:45:C4:22
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 38C0E01DF0F8A58D1A167D36F1598595894D96BB
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e3139312e302f32342d3234203d3e2036373632.roa
Signing time: Fri 20 Mar 2026 12:54:48 +0000
ROA not before: Fri 20 Mar 2026 12:49:48 +0000
ROA not after: Fri 19 Mar 2027 12:54:48 +0000
asID: 6762
IP address blocks: 51.146.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 11:13:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:c0:e0:1d:f0:f8:a5:8d:1a:16:7d:36:f1:59:85:95:89:4d:96:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Mar 20 12:49:48 2026 GMT
Not After : Mar 19 12:54:48 2027 GMT
Subject: CN=73F10B673ADE68B5298C4AAA76BB30FA7E45C422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:1f:1c:7d:ae:d7:ce:4c:10:92:08:4e:de:b5:
94:08:3c:6e:e5:5e:87:b1:90:24:82:77:70:60:b3:
be:2d:64:c3:5c:e4:d7:fe:ab:85:b2:63:80:c5:a5:
03:bf:cc:7c:3e:83:a0:8c:e5:1c:d7:e4:7e:cc:34:
04:65:31:50:e1:27:ef:45:4f:f2:1c:c2:9c:d0:a9:
1a:89:b3:20:50:2c:d5:4e:29:54:de:fe:83:36:38:
59:fb:4b:9e:65:1c:d1:b8:94:1b:20:54:74:1a:66:
20:b1:39:29:3c:77:17:26:7e:f1:29:82:39:cc:00:
83:a3:be:fe:28:47:fc:34:0d:cf:ff:76:ef:da:a3:
77:61:bc:e1:3a:66:ce:53:3f:85:a6:d3:c6:be:43:
20:b6:30:db:c3:d1:fb:24:c7:01:88:b9:f9:9e:2a:
c2:fe:94:82:5a:34:51:24:9e:c6:71:30:49:a8:7d:
a5:9b:1a:f5:79:53:73:f5:b5:d6:32:51:85:00:88:
2e:a8:6f:a7:a0:04:ed:d9:81:ed:06:be:f9:94:5d:
55:1e:a5:3b:d1:f8:39:70:28:d5:2d:87:df:78:a6:
67:32:26:f0:94:f8:ed:a4:9f:a5:dc:43:39:29:6e:
10:8c:c7:0a:9f:8a:c3:2d:30:16:07:22:79:30:55:
d2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F1:0B:67:3A:DE:68:B5:29:8C:4A:AA:76:BB:30:FA:7E:45:C4:22
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e3139312e302f32342d3234203d3e2036373632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.191.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:93:5c:3b:dc:e8:36:11:e0:3f:31:da:17:8b:2f:3c:b5:e4:
74:0a:c3:89:ce:18:3d:70:bf:6e:fe:b6:6d:f1:44:62:f7:d9:
0b:0f:8c:47:28:e2:48:6a:fa:6d:87:a0:2b:59:57:f0:32:d6:
c6:4d:6b:60:d4:e7:44:eb:f7:f3:c6:27:f2:72:94:10:14:23:
89:8e:80:7a:f4:9c:28:d4:36:22:63:46:d6:34:7a:48:7b:bf:
97:4e:90:ad:e7:e9:fb:35:cc:13:0f:6b:90:eb:f4:50:24:d4:
c2:81:97:88:66:86:67:cc:4a:b3:85:8c:e0:09:c6:da:08:2d:
3f:9b:24:78:43:71:68:54:26:b8:01:c5:48:94:da:7c:a0:2e:
00:d8:7d:bf:9e:47:67:78:25:d8:b5:19:b6:35:0a:80:8a:25:
31:40:31:b5:fa:53:9d:da:b2:68:3d:77:de:cb:a6:18:0c:28:
ae:88:a5:ff:f1:79:9d:c7:ff:53:26:5f:f9:e5:1a:82:1b:57:
fd:2a:dc:c6:c1:44:e3:ea:9a:27:80:0b:d7:1d:93:ea:4d:2c:
0f:53:2e:1d:8a:9b:94:f1:4b:48:75:c2:89:88:23:4f:e0:91:
e2:55:23:3c:8d:86:00:af:bf:b2:5a:f4:65:b2:ec:1a:c0:77:
dc:9c:00:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:48:13 2026 by rpki-client