Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e3230302e302f32312d3234203d3e203131343236.roa
File: 35312e3134362e3230302e302f32312d3234203d3e203131343236.roa (raw, json)
Hash identifier: +AAvS73MT3GzlwbkW5KP4Wupgd29W4HuKo2PBf3Syfg=
Subject key identifier: 91:9A:8F:24:7B:3C:73:AA:53:16:6E:1F:14:F2:48:92:8B:50:F0:26
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 36628B9D5455E02C80C6C445ED97E7FF69DB0320
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e3230302e302f32312d3234203d3e203131343236.roa
Signing time: Mon 16 Mar 2026 21:48:30 +0000
ROA not before: Mon 16 Mar 2026 21:43:30 +0000
ROA not after: Mon 15 Mar 2027 21:48:30 +0000
asID: 11426
IP address blocks: 51.146.200.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:62:8b:9d:54:55:e0:2c:80:c6:c4:45:ed:97:e7:ff:69:db:03:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Mar 16 21:43:30 2026 GMT
Not After : Mar 15 21:48:30 2027 GMT
Subject: CN=919A8F247B3C73AA53166E1F14F248928B50F026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bd:29:f0:bb:ab:ab:a7:5c:9d:43:2c:a0:74:
1e:1c:d3:ca:59:dd:2f:2b:74:fb:72:bc:70:95:33:
90:eb:90:83:45:67:d5:bb:45:81:2c:b9:70:f4:d4:
03:98:3b:69:80:d0:06:53:c7:fa:ea:8a:d1:aa:9d:
c2:d0:06:c1:77:f1:e5:f8:90:c4:03:c7:46:fa:0b:
76:f8:ce:ab:f1:e0:4d:d2:6b:b2:e0:b6:7d:56:74:
01:53:ac:34:de:6b:06:1d:87:c4:ef:b7:64:94:10:
9f:70:b1:d8:81:cf:23:ba:18:eb:b4:56:ff:cf:7f:
18:82:57:3e:44:52:50:1f:ae:14:54:60:15:44:92:
26:e0:38:14:19:9a:45:9d:97:ea:89:99:11:62:17:
21:ed:05:6b:7d:8a:86:dd:f5:2f:54:c6:b1:16:23:
6e:5b:f1:0b:db:4d:be:c9:a4:09:d9:6f:83:8d:d2:
54:e4:33:dd:bb:fa:61:4d:8a:71:1e:af:a9:16:e1:
c7:22:7d:99:69:cb:1a:3b:c0:ae:92:07:72:cb:cc:
f1:b3:8c:15:08:e1:17:ea:85:48:e3:a8:39:51:1e:
a1:6a:56:cf:4e:56:6d:82:7c:25:d1:ef:82:b8:f0:
3f:22:05:32:a3:b8:fe:89:78:af:47:f9:84:fd:76:
43:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9A:8F:24:7B:3C:73:AA:53:16:6E:1F:14:F2:48:92:8B:50:F0:26
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e3230302e302f32312d3234203d3e203131343236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.200.0/21
Signature Algorithm: sha256WithRSAEncryption
2c:53:27:10:31:39:55:d8:ac:b7:8e:2a:62:54:ad:85:bf:21:
d9:e8:80:4e:02:ce:84:5c:cb:c1:ee:c6:8b:20:da:db:2a:94:
50:66:9d:1c:2f:e1:64:91:72:b0:1b:ab:1a:40:a8:20:d5:da:
e3:ca:08:de:97:42:30:71:e4:d3:02:91:1d:fe:7b:0f:1b:b6:
85:1c:2f:80:53:f3:6c:ce:aa:48:dd:ab:a8:a9:81:cf:c4:85:
77:64:b5:88:5e:2c:92:78:4c:43:eb:fb:73:67:a1:7e:4d:3d:
c9:93:76:81:e1:69:b9:dc:6f:a0:8d:f0:0e:c7:14:0f:d0:ec:
94:da:6c:e7:ba:21:91:1c:93:3c:6c:9d:90:ce:13:f0:48:f4:
61:1b:d7:3e:d9:e6:c0:80:12:2f:23:67:28:8c:a7:4a:d8:c6:
d3:1c:f1:9a:8e:97:cc:51:75:fe:1a:7f:87:73:65:5d:94:31:
4a:1d:35:a4:3c:02:f3:86:59:da:6b:e0:45:81:d5:a3:9d:16:
51:01:8c:13:9e:c4:1d:d4:66:65:18:81:3b:43:94:d7:59:45:
dd:0f:93:21:5d:df:28:3a:8c:b4:82:44:e9:4b:f4:4d:0d:fd:
26:d0:2e:77:e5:7b:7d:7a:3f:4d:c0:f6:97:b2:88:94:39:39:
39:51:18:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:36:17 2026 by rpki-client