Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e3139362e302f32322d3234203d3e2037303239.roa
File: 35312e3134362e3139362e302f32322d3234203d3e2037303239.roa (raw, json)
Hash identifier: ZP2KU975RwoejGljA10lQOg+CEChcAaj72ZL/id/HhY=
Subject key identifier: C1:BE:F2:94:AB:77:FA:6D:8F:07:0A:1C:24:48:2B:D4:4C:D7:22:AF
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 6AA9D26C648C36D02091DC9A079490405AC4E2C4
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e3139362e302f32322d3234203d3e2037303239.roa
Signing time: Fri 13 Mar 2026 23:24:16 +0000
ROA not before: Fri 13 Mar 2026 23:19:16 +0000
ROA not after: Fri 12 Mar 2027 23:24:16 +0000
asID: 7029
IP address blocks: 51.146.196.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:a9:d2:6c:64:8c:36:d0:20:91:dc:9a:07:94:90:40:5a:c4:e2:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Mar 13 23:19:16 2026 GMT
Not After : Mar 12 23:24:16 2027 GMT
Subject: CN=C1BEF294AB77FA6D8F070A1C24482BD44CD722AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6a:cc:c7:b7:4f:98:b8:d7:e8:61:d3:51:08:
62:49:9c:f9:3f:ec:80:3e:c8:09:70:7f:32:d1:d9:
1e:ab:1e:95:49:f5:ee:74:99:bf:f9:ea:90:d7:92:
09:b9:96:13:2f:a1:d6:54:a3:85:b1:09:cf:f0:54:
9f:27:25:74:a8:7e:40:9b:e3:6e:e6:3a:38:74:84:
14:24:99:5c:2c:0f:c7:41:20:cb:ab:b6:c0:73:af:
e9:12:aa:b9:c9:6e:d7:63:8c:0d:6e:f6:f9:5d:3f:
fd:d5:53:58:c0:e1:07:af:ae:67:d2:28:43:f6:73:
33:a6:67:14:75:ff:c0:a7:7e:e9:02:59:7e:ca:ea:
94:d2:24:42:46:d1:ed:94:07:14:d9:bf:a5:52:75:
9d:11:30:d7:07:7a:08:31:8a:16:67:95:be:12:47:
9b:c1:c4:16:7f:ac:85:30:ba:6c:55:6c:e6:98:aa:
f8:6d:1d:44:10:4b:93:58:d8:05:9b:cf:7c:9d:9f:
39:ff:66:dd:a3:e3:eb:d5:d9:26:fd:61:e6:1a:00:
8d:e5:5d:68:eb:7b:8f:39:09:1c:6a:fd:de:5d:1c:
65:6b:3a:86:25:9f:5a:ae:fd:9f:fb:9e:2c:7a:07:
48:56:b6:4a:7e:eb:a7:f9:9e:76:11:a0:87:57:4f:
f3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:BE:F2:94:AB:77:FA:6D:8F:07:0A:1C:24:48:2B:D4:4C:D7:22:AF
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e3139362e302f32322d3234203d3e2037303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.196.0/22
Signature Algorithm: sha256WithRSAEncryption
26:35:07:eb:cd:7b:c8:f3:2e:92:ca:f4:e3:f8:81:21:3b:b3:
66:00:73:3a:bb:03:4a:77:25:46:a2:ab:12:73:d6:2a:84:2a:
e4:20:9a:5e:0c:f4:1c:77:67:27:2d:31:65:f3:0e:dc:cc:3c:
34:17:95:84:02:f2:a7:c9:01:99:2c:c2:3d:c9:23:fb:72:c7:
f1:9f:48:7f:b6:18:25:9d:be:a8:0b:b0:a9:9f:0a:91:b7:18:
78:c6:f8:cf:d5:e8:77:7e:52:77:53:c1:69:0d:4b:70:ca:69:
1b:86:44:da:ca:0d:8e:d6:68:57:9d:f2:91:24:2b:64:eb:9b:
2d:46:ea:c7:89:0b:f4:5b:fb:b0:ee:c3:91:45:e7:be:6c:9a:
8a:95:ed:a5:e5:09:8b:7d:32:79:78:25:69:70:cb:d6:55:84:
01:ac:d4:52:c4:6e:08:83:9e:2e:60:6a:99:fd:f6:01:68:e6:
fc:52:d6:8d:71:b4:0d:71:7f:29:c7:9e:29:26:8a:c5:ac:10:
80:1f:39:9d:ae:f6:6e:53:cb:88:56:82:b7:d8:54:61:f6:14:
97:6c:5b:24:b1:bc:3f:f9:65:ef:fc:f3:1f:b6:a7:42:06:5d:
03:72:06:92:47:ce:7a:2c:08:3b:97:58:28:57:e0:aa:b1:de:
09:18:74:93
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUaqnSbGSMNtAgkdyaB5SQQFrE4sQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjAzMTMyMzE5MTZaFw0yNzAzMTIyMzI0MTZaMDMxMTAvBgNV
BAMTKEMxQkVGMjk0QUI3N0ZBNkQ4RjA3MEExQzI0NDgyQkQ0NENENzIyQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjaszHt0+YuNfoYdNRCGJJnPk/
7IA+yAlwfzLR2R6rHpVJ9e50mb/56pDXkgm5lhMvodZUo4WxCc/wVJ8nJXSofkCb
427mOjh0hBQkmVwsD8dBIMurtsBzr+kSqrnJbtdjjA1u9vldP/3VU1jA4QevrmfS
KEP2czOmZxR1/8CnfukCWX7K6pTSJEJG0e2UBxTZv6VSdZ0RMNcHeggxihZnlb4S
R5vBxBZ/rIUwumxVbOaYqvhtHUQQS5NY2AWbz3ydnzn/Zt2j4+vV2Sb9YeYaAI3l
XWjre485CRxq/d5dHGVrOoYln1qu/Z/7nix6B0hWtkp+66f5nnYRoIdXT/N7AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUwb7ylKt3+m2PBwocJEgr1EzXIq8wHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTZlNGFjODYt
MTgwMy00OTRkLThhN2ItYzA1MWE2MzEwNzUyLzAvMzUzMTJlMzEzNDM2MmUzMTM5
MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNzMwMzIzOS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAjOS
xDANBgkqhkiG9w0BAQsFAAOCAQEAJjUH6817yPMuksr04/iBITuzZgBzOrsDSncl
RqKrEnPWKoQq5CCaXgz0HHdnJy0xZfMO3Mw8NBeVhALyp8kBmSzCPckj+3LH8Z9I
f7YYJZ2+qAuwqZ8KkbcYeMb4z9Xod35Sd1PBaQ1LcMppG4ZE2soNjtZoV53ykSQr
ZOubLUbqx4kL9Fv7sO7DkUXnvmyaipXtpeUJi30yeXglaXDL1lWEAazUUsRuCIOe
LmBqmf32AWjm/FLWjXG0DXF/KceeKSaKxawQgB85na72blPLiFaCt9hUYfYUl2xb
JLG8P/ll7/zzH7anQgZdA3IGkkfOeiwIO5dYKFfgqrHeCRh0kw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:21:40 2026 by rpki-client