Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e3232342e302f31392d3234203d3e20383334.roa
File: 35312e3134362e3232342e302f31392d3234203d3e20383334.roa (raw, json)
Hash identifier: TZd0yXVQT7xl1KV4duY5zn5oiJFD15dl3dY0PPbXvjw=
Subject key identifier: D6:33:07:BA:43:64:D4:9C:D1:ED:4D:74:0A:DB:55:14:57:7C:0E:B6
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 47753119F70E405F8A455666334D8B61796C8E72
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e3232342e302f31392d3234203d3e20383334.roa
Signing time: Mon 09 Mar 2026 16:26:28 +0000
ROA not before: Mon 09 Mar 2026 16:21:28 +0000
ROA not after: Mon 08 Mar 2027 16:26:28 +0000
asID: 834
IP address blocks: 51.146.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 11:13:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:75:31:19:f7:0e:40:5f:8a:45:56:66:33:4d:8b:61:79:6c:8e:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Mar 9 16:21:28 2026 GMT
Not After : Mar 8 16:26:28 2027 GMT
Subject: CN=D63307BA4364D49CD1ED4D740ADB5514577C0EB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ca:5a:a9:4c:94:57:af:e3:f0:9b:52:48:c8:
14:92:5a:c7:c2:81:88:c0:be:d7:c8:da:e4:71:04:
0f:18:a7:9f:b5:6d:a8:e4:10:05:c6:6c:e8:88:fe:
87:d1:64:31:71:66:72:b2:29:77:a8:95:8d:6d:29:
36:81:86:dc:bf:90:41:e5:a0:3d:4e:f5:b9:ce:b9:
7f:fb:0f:36:5f:d7:a4:3e:30:ae:e8:2d:ba:69:9a:
76:fd:ce:a4:ad:d4:2d:c9:fc:d3:9c:9a:1e:df:ad:
18:43:0a:6a:0b:bb:a4:bb:9e:a7:f3:bf:0c:65:54:
3e:5f:07:e4:3c:fa:53:64:8d:ec:80:85:36:9e:9c:
4a:25:24:b6:97:90:db:4c:8c:3b:38:0a:22:68:f8:
ba:8b:83:b4:16:93:96:e2:fd:de:bc:97:0f:eb:f1:
98:ee:a1:8e:9e:88:f0:c6:8d:8c:c2:05:6d:f1:24:
3d:82:ab:96:95:e3:13:73:27:98:83:df:d5:13:5f:
5a:3f:26:43:3f:a9:45:ff:05:2f:3f:51:bf:d7:77:
fd:49:11:1b:44:50:fd:5c:07:59:04:23:5a:66:15:
42:66:57:32:ae:04:37:f4:9b:e5:39:02:b0:8e:c9:
0a:7b:b1:3e:b8:30:83:7c:79:b5:97:30:a7:3b:b7:
be:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:33:07:BA:43:64:D4:9C:D1:ED:4D:74:0A:DB:55:14:57:7C:0E:B6
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e3232342e302f31392d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.224.0/19
Signature Algorithm: sha256WithRSAEncryption
8b:15:2d:e5:fb:99:65:88:28:29:78:86:d5:4e:67:42:95:fe:
b4:b0:a0:0a:65:1d:7b:d9:cc:1a:a4:81:b9:9b:a3:92:88:6a:
90:7b:dc:dd:72:37:38:7e:e2:a7:18:81:03:ad:59:3d:b0:e3:
78:14:bd:99:87:c0:5d:60:66:39:a1:1a:c0:cb:24:72:b7:91:
fa:c1:13:94:aa:cf:ae:58:6b:74:bd:5a:05:6d:1f:d9:3e:50:
47:de:93:1a:f6:04:3b:0b:3d:f3:ea:79:a7:57:bc:23:41:bc:
9b:b4:6a:ef:8b:ab:98:82:f5:72:00:4a:a4:cf:83:0f:97:5e:
a9:ab:2a:46:66:f7:b6:2d:e2:f2:ca:c8:94:cd:35:25:62:1f:
bd:fe:f9:ef:82:bd:6f:7f:1b:7e:ad:53:43:31:e2:f0:0c:cb:
94:8d:78:80:be:8e:39:10:a4:65:22:b9:4b:64:4c:db:16:e8:
72:ac:4a:72:c6:c5:aa:c6:f8:c9:13:e1:69:1a:b8:c5:14:fb:
ae:a9:b0:14:17:96:0b:d3:e1:93:a9:80:1e:10:51:dd:ba:59:
59:4e:63:6c:1a:dd:bd:dd:de:c6:b9:73:44:43:ff:fb:4c:14:
ed:ad:d3:2c:f5:f2:13:e2:33:b5:2d:20:e9:1a:50:94:30:d0:
97:31:1a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:48:20 2026 by rpki-client