Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3139342e35322e302f32342d3234203d3e2036303739.roa
File: 35312e3139342e35322e302f32342d3234203d3e2036303739.roa (raw, json)
Hash identifier: EEtmXOKppZWfN4gkYRqv4Q7pDelPuL0THvrANxxtARw=
Subject key identifier: C8:A6:50:01:DE:DE:2C:A6:23:03:33:97:A0:51:F3:0D:B9:45:A7:60
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 3DC90197297D10FC4E5CB3DE81EE81EC3B4E9C00
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3139342e35322e302f32342d3234203d3e2036303739.roa
Signing time: Wed 25 Mar 2026 07:48:25 +0000
ROA not before: Wed 25 Mar 2026 07:43:25 +0000
ROA not after: Wed 24 Mar 2027 07:48:25 +0000
asID: 6079
IP address blocks: 51.194.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:46:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:c9:01:97:29:7d:10:fc:4e:5c:b3:de:81:ee:81:ec:3b:4e:9c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Mar 25 07:43:25 2026 GMT
Not After : Mar 24 07:48:25 2027 GMT
Subject: CN=C8A65001DEDE2CA623033397A051F30DB945A760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8c:63:c2:04:d3:44:2f:71:7e:57:4d:85:9f:
a9:e6:b9:84:39:45:e9:a5:07:b7:b1:6c:0e:71:d2:
75:f0:08:8b:ad:17:0a:c4:4e:f8:4f:11:56:24:48:
55:ca:ed:49:ab:29:f0:22:40:90:85:08:73:a6:07:
a0:29:94:68:f1:55:8f:12:bc:69:03:65:b1:e3:b1:
76:ba:3a:eb:eb:71:a6:7a:83:d9:94:0e:6c:84:40:
6e:b2:88:1b:51:65:2d:73:5d:6a:25:f1:ae:a3:34:
24:95:9f:7e:e1:8e:b8:d7:c5:3c:4a:ff:3a:93:aa:
fc:c3:ca:8e:37:3f:4e:21:cc:65:5f:e5:b5:11:e7:
65:9d:b0:ca:5c:2f:7d:e8:07:b7:77:d1:55:27:09:
47:9c:f7:13:16:f7:ef:d2:c9:fd:10:d7:1d:8a:42:
a1:03:0f:de:16:de:0e:88:86:81:0f:12:ee:bd:b5:
b1:54:44:fb:6a:2d:66:11:79:b9:74:d9:b0:c6:9a:
87:7d:94:8d:28:77:83:51:b6:8d:31:a9:6e:31:8a:
34:4c:37:82:65:8b:bb:fc:e6:48:aa:aa:d0:44:da:
74:37:89:5c:ce:39:51:a2:3a:f5:6f:49:b4:61:be:
2b:ee:05:35:96:06:29:82:93:fe:00:ef:f6:64:e8:
a3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A6:50:01:DE:DE:2C:A6:23:03:33:97:A0:51:F3:0D:B9:45:A7:60
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3139342e35322e302f32342d3234203d3e2036303739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.52.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:8c:7f:04:1f:fc:33:33:79:56:92:d0:46:88:d8:d4:1f:8b:
9e:4f:2a:a1:07:36:d6:10:40:b3:be:9e:60:a5:9d:14:6e:c6:
ca:99:e2:23:a9:ed:5d:b4:6e:32:8e:79:91:c8:0c:fb:e0:c2:
10:c4:fe:32:67:73:47:6d:ed:cd:9e:24:93:e5:ce:6a:36:a3:
a4:13:55:7e:c2:3c:79:36:67:9f:6c:41:fd:c5:7a:e4:c5:a1:
f0:7a:23:4b:73:5e:6f:7e:a1:97:93:f7:1e:7f:a6:ab:ff:52:
41:cf:be:a5:cf:73:b7:ab:01:ce:a1:bb:30:c9:b9:ec:90:ee:
33:7a:e6:f1:37:44:d9:20:9e:b3:e5:c6:99:fd:bc:f4:87:c5:
a7:73:ee:e0:d1:f5:03:32:dc:5b:01:a3:b3:5e:eb:5f:68:b6:
23:a1:5a:0f:b4:7a:34:db:2b:5b:55:79:05:11:aa:30:5c:5b:
68:68:fe:94:8a:e8:0c:c3:5b:5b:78:60:da:6a:75:f0:ef:dd:
a2:8e:c5:5f:fa:e2:ae:f3:85:6f:93:8a:ec:ce:24:ff:4a:3d:
83:d5:2c:03:48:91:3a:58:4b:04:ac:66:e6:83:df:9c:0b:9f:
0e:40:5c:2b:9f:20:73:5f:c5:93:c1:e1:73:84:8f:29:e3:e4:
ef:52:20:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:14:49 2026 by rpki-client