Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3139342e302e302f32312d3234203d3e20333937333733.roa
File: 35312e3139342e302e302f32312d3234203d3e20333937333733.roa (raw, json)
Hash identifier: +3pjqCbwwGUituEyZsHG9tHze1KfsKgsKk8nfpGMgz0=
Subject key identifier: 89:32:95:CD:40:EF:F5:C7:B0:72:0A:64:47:B0:06:F3:E6:E7:33:3D
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 15D65A27840B425A3EA175AD5A1A713BB1F052E3
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3139342e302e302f32312d3234203d3e20333937333733.roa
Signing time: Mon 16 Mar 2026 21:48:29 +0000
ROA not before: Mon 16 Mar 2026 21:43:29 +0000
ROA not after: Mon 15 Mar 2027 21:48:29 +0000
asID: 397373
IP address blocks: 51.194.0.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 11:13:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:d6:5a:27:84:0b:42:5a:3e:a1:75:ad:5a:1a:71:3b:b1:f0:52:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Mar 16 21:43:29 2026 GMT
Not After : Mar 15 21:48:29 2027 GMT
Subject: CN=893295CD40EFF5C7B0720A6447B006F3E6E7333D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6c:57:c4:80:bb:17:ed:09:26:f9:fa:d0:c7:
14:76:e3:9a:cd:c4:08:98:06:c9:7d:c2:af:0b:f1:
eb:4a:12:92:0b:c7:f2:73:a6:bb:64:8e:b3:1f:67:
e8:6a:cb:de:9a:0e:a5:24:4e:10:db:7b:13:74:fd:
ef:6a:83:0d:c0:5a:9f:75:d2:d4:35:b8:ad:c3:34:
9f:d6:da:b0:ee:68:e4:ae:12:93:2a:8f:9d:6d:18:
60:c4:54:4e:4c:dc:7c:24:c1:a0:96:e3:89:12:ab:
0d:8c:82:b0:ac:c2:0f:ac:16:f7:65:73:70:3c:b9:
6d:d8:76:9c:2f:83:92:e6:18:1c:66:e8:e9:05:e6:
55:b5:ec:b7:ec:4e:63:ed:db:5f:6b:95:72:20:6b:
8f:22:1d:da:06:24:62:70:7d:d0:3c:64:58:7d:a8:
0c:81:35:c6:7a:05:87:78:fb:c5:f1:94:d9:39:0e:
88:82:aa:0e:25:30:4d:36:b8:2a:68:e5:f2:35:7a:
74:be:71:5c:77:0f:93:aa:ec:88:c7:b1:c3:ed:5c:
ac:96:1d:7f:21:20:c0:66:72:28:28:e2:af:42:ac:
ac:b7:f2:b5:c4:ef:3d:c0:3f:46:b4:3b:b1:25:0f:
ce:a1:96:1d:3e:a0:bb:d8:de:d1:d7:5d:07:84:bc:
d6:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:32:95:CD:40:EF:F5:C7:B0:72:0A:64:47:B0:06:F3:E6:E7:33:3D
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3139342e302e302f32312d3234203d3e20333937333733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.0.0/21
Signature Algorithm: sha256WithRSAEncryption
5a:31:5a:80:5f:5a:76:44:77:97:90:e0:d9:32:72:04:09:06:
c1:82:74:c1:e5:18:21:ce:83:cb:0e:4d:76:ff:7d:4b:da:c7:
de:64:f7:5d:c8:a8:b6:99:4e:c8:81:92:03:84:1d:16:81:d5:
97:97:04:16:90:e0:33:2f:97:85:e0:f2:ba:0d:37:59:bd:21:
65:1a:dc:57:9b:cb:a6:94:e4:c3:04:8b:34:44:84:68:79:37:
14:65:b4:01:72:29:bc:31:6b:cd:28:87:68:14:e0:57:f1:c8:
ac:10:f4:68:54:c7:8f:09:bb:3d:7a:8c:a9:3c:9c:89:c2:f6:
27:37:2e:8e:6e:8c:1a:41:24:22:15:a2:28:00:8a:bd:0d:97:
a6:05:b3:0e:0d:5a:ce:38:81:b3:d6:23:11:7a:3d:26:a0:db:
d6:6f:41:42:65:76:9d:6e:a2:ba:9a:68:ca:dd:7f:30:70:bd:
20:a6:d6:2a:6a:79:f1:07:99:b2:19:e9:21:c5:d4:93:9f:f6:
c7:44:39:99:33:72:bd:f7:fe:33:4c:d8:be:7b:c1:c3:cd:f4:
de:d0:9d:34:88:92:41:f7:fc:e2:c7:52:be:03:95:ae:cc:9b:
d9:07:a7:af:12:7c:22:e5:62:5c:97:0b:dd:d6:5c:da:94:4f:
da:39:8b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:47:49 2026 by rpki-client