Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e3231312e302f32342d3234203d3e2036373632.roa
File: 35312e3134362e3231312e302f32342d3234203d3e2036373632.roa (raw, json)
Hash identifier: Dw1gLdJTpwJDWaiTHSU3af8jEhT2B8jWmvpPVYoZ7qU=
Subject key identifier: F1:51:F1:DB:15:0E:D1:04:D6:6A:98:0C:14:CF:B9:F5:06:29:20:9A
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 2D2E8619D5F0329EF829C590103EF2F8AE8A0B1A
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e3231312e302f32342d3234203d3e2036373632.roa
Signing time: Fri 20 Mar 2026 12:54:49 +0000
ROA not before: Fri 20 Mar 2026 12:49:49 +0000
ROA not after: Fri 19 Mar 2027 12:54:49 +0000
asID: 6762
IP address blocks: 51.146.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:2e:86:19:d5:f0:32:9e:f8:29:c5:90:10:3e:f2:f8:ae:8a:0b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Mar 20 12:49:49 2026 GMT
Not After : Mar 19 12:54:49 2027 GMT
Subject: CN=F151F1DB150ED104D66A980C14CFB9F50629209A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:68:e2:5f:89:e8:7e:5a:54:a9:1d:dc:ef:46:
15:5d:46:6d:bf:10:a8:1e:e2:70:a3:98:0c:b0:23:
76:90:d0:cf:83:55:70:19:2f:35:47:6f:4b:a6:09:
5d:d7:19:f3:12:d2:0a:27:cb:51:3d:84:dd:09:e5:
21:de:0a:52:9d:e2:2d:d1:ec:97:9f:b9:3d:cd:19:
17:51:0c:0a:a8:4e:8e:00:32:24:98:d0:18:e2:73:
2d:8e:27:94:c1:08:07:50:bb:3e:09:bf:05:42:19:
fb:80:c8:70:a4:55:65:d5:97:04:1c:0b:76:40:17:
95:01:4d:9f:ee:d8:46:2c:01:8d:57:94:27:a2:8b:
41:ad:b2:19:c5:b2:ac:a4:92:36:b6:70:4d:4c:22:
ab:cc:d2:24:6c:36:79:df:0f:35:6a:8b:b7:36:a5:
cf:73:bc:72:cd:b6:96:2a:82:95:4b:9e:09:3f:c9:
c5:d0:c8:fa:9e:a3:02:04:cf:2f:17:2a:65:eb:cf:
47:f0:4e:96:b6:57:76:8c:47:4d:2c:dc:4a:c1:ab:
8b:4f:57:8f:db:4c:35:43:c3:c5:31:47:8b:41:2c:
51:1c:f8:ea:07:b2:f8:fe:33:b6:b9:dd:6a:a2:d3:
2c:8e:4f:0b:85:02:5c:09:fe:9a:6b:de:a0:3c:31:
ed:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:51:F1:DB:15:0E:D1:04:D6:6A:98:0C:14:CF:B9:F5:06:29:20:9A
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e3231312e302f32342d3234203d3e2036373632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.211.0/24
Signature Algorithm: sha256WithRSAEncryption
14:70:26:9a:26:ff:bc:bf:83:89:e1:96:71:89:26:e1:70:a9:
ff:f4:1a:93:9d:07:26:b9:29:0d:d0:3b:2d:f6:a3:f5:77:60:
c2:03:09:39:22:77:31:1e:96:cc:dc:fb:1a:73:b0:68:5f:68:
ea:ae:e5:66:aa:40:ef:4e:97:e6:51:86:2c:17:50:2c:d6:26:
aa:52:32:64:ea:5a:69:57:b3:6d:0a:de:23:89:5b:b0:89:34:
d0:44:8b:74:da:d9:46:4e:2c:6a:a5:34:04:af:a9:0b:99:e1:
9e:9e:ea:8c:b2:c0:2c:76:df:c7:18:90:e4:ba:ce:39:ac:1d:
3b:9f:ba:87:93:2f:d5:79:b7:cc:8f:72:4e:87:59:e9:78:d2:
20:b8:5c:62:b3:4d:1c:fe:18:23:73:d9:01:24:b4:0b:a2:aa:
23:6a:63:cc:bc:70:c0:24:dd:e7:ef:c9:98:d8:f9:1c:7a:0f:
43:1b:03:23:b7:7c:6d:fd:fd:68:86:b3:8a:68:26:ec:4d:86:
42:ea:7f:b0:fd:fc:90:14:f4:c4:39:b7:d8:7f:7a:4e:50:8d:
b7:3c:3e:90:51:5e:52:4f:d2:6c:ed:dc:fb:45:d8:20:9f:ba:
5e:15:ea:bf:93:20:c1:af:fe:cb:18:cf:19:dc:09:a0:c4:da:
96:0d:70:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:14:02 2026 by rpki-client