Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3139342e33322e302f32302d3234203d3e20383334.roa
File: 35312e3139342e33322e302f32302d3234203d3e20383334.roa (raw, json)
Hash identifier: eHgZMhec17dW/YoPui9oxleCYAzB6OcrG6w0f6sv7H4=
Subject key identifier: E4:2D:C0:77:8D:16:E1:66:EA:00:E3:85:77:9F:84:2C:67:D2:FE:4D
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 2A9C8F1A72AB78EF9DFC83A62B5C0345B4F98C9B
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3139342e33322e302f32302d3234203d3e20383334.roa
Signing time: Wed 25 Mar 2026 06:40:16 +0000
ROA not before: Wed 25 Mar 2026 06:35:16 +0000
ROA not after: Wed 24 Mar 2027 06:40:16 +0000
asID: 834
IP address blocks: 51.194.32.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 11:13:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:9c:8f:1a:72:ab:78:ef:9d:fc:83:a6:2b:5c:03:45:b4:f9:8c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Mar 25 06:35:16 2026 GMT
Not After : Mar 24 06:40:16 2027 GMT
Subject: CN=E42DC0778D16E166EA00E385779F842C67D2FE4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:75:47:9f:3a:da:f3:41:84:5f:cd:ed:a1:35:
74:09:a7:a6:d1:6f:de:f2:ab:b1:5e:dd:d6:e3:73:
5f:5d:26:c6:d9:ce:da:02:83:0e:37:ee:86:20:fd:
88:e5:e3:b1:9c:55:4d:5a:79:52:85:96:a0:0c:ad:
46:3a:8a:cf:cc:91:a8:9f:c1:40:74:82:3f:0a:35:
04:5d:b9:d4:e7:03:01:d2:7a:c7:68:a8:c3:5d:13:
c3:30:3d:c5:43:11:96:3b:71:42:90:32:6d:cf:5e:
cc:13:5b:6a:c3:37:0a:35:0c:7b:63:d0:a1:3d:a0:
c8:df:c0:84:3b:53:94:fa:a7:de:e9:11:66:d4:92:
bd:7a:6e:ca:5b:ff:2f:79:6d:06:4e:40:04:24:8e:
90:d6:fd:a5:63:c3:26:44:0c:2d:99:f9:56:b2:bc:
57:25:44:ae:cf:bb:8b:98:0e:85:d9:04:29:ed:ac:
27:9a:22:b3:b5:b8:f8:c9:87:fb:b1:8b:a7:09:e2:
8d:38:7e:88:62:59:f5:a7:91:ff:f7:6d:8c:ef:a9:
bd:a8:0e:df:3e:ac:ea:2b:e6:71:a5:a1:a0:07:22:
cb:1e:19:b7:18:44:05:2b:09:b7:2d:3b:10:ae:f9:
aa:2b:c4:42:95:75:2d:f0:ec:01:6f:71:0a:1b:c0:
fe:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:2D:C0:77:8D:16:E1:66:EA:00:E3:85:77:9F:84:2C:67:D2:FE:4D
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3139342e33322e302f32302d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.32.0/20
Signature Algorithm: sha256WithRSAEncryption
29:47:3a:14:f2:f6:5b:be:8a:6d:a7:58:14:52:4a:e9:22:f3:
ef:4e:36:1a:72:01:60:43:00:66:05:8f:ac:01:84:7b:e5:09:
8f:3b:31:38:e4:d6:36:63:3f:bd:ed:a1:eb:ec:dc:1c:32:36:
a6:2a:9d:59:06:ff:e6:ba:fa:83:37:1c:17:ee:e0:21:6a:46:
e7:f9:52:d1:11:fb:ac:fc:35:a8:ee:9e:7b:a7:27:61:07:c5:
cd:d1:ad:2f:cd:dd:d0:10:16:c7:d0:3b:d5:c8:c1:c8:c1:2b:
86:85:a9:be:50:17:71:3e:76:38:c7:94:76:df:6d:5f:23:f3:
96:4b:5a:9e:9a:02:a1:80:04:92:f8:6b:e8:ef:10:2a:1b:b6:
93:cb:ee:9a:23:b2:aa:81:d0:ff:e4:0f:be:5f:15:56:12:72:
d3:c2:17:04:2a:68:84:c7:89:94:b1:e8:9c:ac:9d:62:52:f6:
29:63:16:0d:9e:75:2a:f0:b6:d9:04:58:a6:dc:ff:14:81:1b:
3f:b4:3c:9f:56:4f:be:9a:87:3f:cf:81:46:38:28:5c:ec:9f:
82:67:a1:2a:a4:e9:ce:4a:8e:17:f7:80:6e:fd:12:e1:62:d3:
21:a0:69:f3:bb:70:e4:cf:9d:1c:a7:35:d6:2b:2a:e2:a2:2b:
0f:f8:6e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:47:40 2026 by rpki-client