Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3139342e31362e302f32312d3234203d3e2035363530.roa
File: 35312e3139342e31362e302f32312d3234203d3e2035363530.roa (raw, json)
Hash identifier: gMgUODgFJmeBPj1HNOfG1fnCll7XzxhvuwC0AXPx7v8=
Subject key identifier: 66:3E:01:38:72:A1:AF:AC:E2:7D:AA:CD:CD:43:A1:B8:54:2D:D7:54
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 7A55F381F2B758F9BC8946F7545CA9D9FDA66E63
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3139342e31362e302f32312d3234203d3e2035363530.roa
Signing time: Tue 24 Mar 2026 12:59:01 +0000
ROA not before: Tue 24 Mar 2026 12:54:01 +0000
ROA not after: Tue 23 Mar 2027 12:59:01 +0000
asID: 5650
IP address blocks: 51.194.16.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 11:13:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:55:f3:81:f2:b7:58:f9:bc:89:46:f7:54:5c:a9:d9:fd:a6:6e:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Mar 24 12:54:01 2026 GMT
Not After : Mar 23 12:59:01 2027 GMT
Subject: CN=663E013872A1AFACE27DAACDCD43A1B8542DD754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:4c:07:00:24:e9:03:ed:85:00:b5:8e:59:a4:
86:16:c8:c8:5b:8e:50:d7:32:8f:0a:31:66:fe:37:
92:07:d5:e6:28:0e:07:b8:30:01:62:91:c7:a2:a2:
1a:1a:ed:cd:fc:1d:b0:83:02:cc:82:b4:d2:f9:15:
9f:0e:63:59:60:ac:3b:23:2c:5b:5c:c5:6b:45:f7:
09:c2:2b:1c:f0:54:6f:67:4d:b8:cd:77:50:7c:34:
b4:07:4e:5a:75:33:7f:04:f8:08:c0:25:13:8a:f0:
7a:8f:59:c6:b1:e8:c8:b2:da:71:8c:f4:df:64:93:
18:ba:14:60:47:7f:96:b3:51:65:54:1d:c6:7b:08:
cf:9b:4c:20:f5:a1:4b:9b:96:d3:7d:7f:01:26:88:
26:0f:42:d2:96:3b:30:59:06:e5:65:82:0d:31:df:
ba:68:fc:49:81:8f:4d:2c:f3:90:c9:d9:b8:79:fb:
d7:f0:f5:94:1f:4d:d4:88:cf:81:54:3e:d1:2c:1a:
26:8d:6d:56:ae:38:de:bd:07:0a:fd:d5:44:8d:14:
69:b5:69:8d:88:75:a2:d4:16:2f:08:3a:a4:e8:89:
8a:d0:10:93:48:61:99:76:f9:6a:20:31:2c:e8:85:
77:db:4e:2b:3a:86:af:a3:6b:17:8d:9b:26:5c:01:
01:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:3E:01:38:72:A1:AF:AC:E2:7D:AA:CD:CD:43:A1:B8:54:2D:D7:54
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3139342e31362e302f32312d3234203d3e2035363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.16.0/21
Signature Algorithm: sha256WithRSAEncryption
90:92:10:67:56:5c:a4:7b:61:28:cd:87:65:8b:4e:18:d3:6a:
01:66:89:64:a7:e1:a4:a9:32:74:da:b0:a5:db:95:0d:f1:03:
79:76:23:04:cc:97:34:12:6b:22:46:c6:c6:26:4c:96:38:51:
42:20:91:a0:d7:33:27:40:b5:6b:b3:c3:fe:48:22:14:79:ff:
65:71:36:e0:af:cd:af:d4:f1:a2:74:ae:d3:45:bd:6e:d6:9a:
0b:ac:b9:49:51:59:54:c2:30:bf:b5:c2:e5:33:f0:c2:34:cb:
81:6d:ab:c4:6b:ea:47:d6:9c:c9:26:31:df:04:1d:5c:07:fc:
63:f2:68:9d:f9:32:66:23:42:3c:11:4a:ae:31:81:0e:2e:88:
73:30:b8:34:c3:c2:54:10:d9:50:e8:12:24:98:43:26:6b:37:
18:89:22:65:4f:e9:57:f9:cb:59:28:fd:85:ed:e4:5a:ad:ce:
a2:92:d5:3c:92:ef:fb:22:c5:87:9f:fd:d3:d2:2b:b0:00:b6:
9c:d8:9a:10:0e:a7:01:1c:5a:a5:36:bc:ce:90:47:bd:cb:0f:
f4:6c:3c:88:7b:86:4b:b5:be:70:cf:08:69:43:f5:a3:d1:c7:
7d:55:0a:7c:23:28:46:3e:e0:7b:56:29:e9:1e:35:ef:cc:89:
f0:67:c0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:23:05 2026 by rpki-client