Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3139342e35392e302f32342d3234203d3e2036303739.roa
File: 35312e3139342e35392e302f32342d3234203d3e2036303739.roa (raw, json)
Hash identifier: Oc+0W2h+KkNKTDA4vO87QtDHDlgyGefNEGFhViOJFOQ=
Subject key identifier: A8:B2:E4:A3:1C:C6:1D:DB:0B:17:EF:78:EF:38:C7:62:B6:BD:F3:49
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 181A6E96FD8F33CEF81BA15789C869B41B06044D
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3139342e35392e302f32342d3234203d3e2036303739.roa
Signing time: Wed 25 Mar 2026 07:48:32 +0000
ROA not before: Wed 25 Mar 2026 07:43:32 +0000
ROA not after: Wed 24 Mar 2027 07:48:32 +0000
asID: 6079
IP address blocks: 51.194.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:1a:6e:96:fd:8f:33:ce:f8:1b:a1:57:89:c8:69:b4:1b:06:04:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Mar 25 07:43:32 2026 GMT
Not After : Mar 24 07:48:32 2027 GMT
Subject: CN=A8B2E4A31CC61DDB0B17EF78EF38C762B6BDF349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4f:53:d2:d7:57:13:a0:e7:f8:bf:7d:b4:8d:
57:8c:a4:6b:d0:09:a7:f8:72:1f:96:0e:f9:bb:74:
83:f1:04:00:fe:ba:aa:aa:98:fb:61:d9:95:d2:09:
9a:68:4c:5c:56:50:25:1d:bf:ef:ad:99:14:de:94:
a9:60:a2:f6:42:16:af:fd:0a:0c:9d:a9:bd:9e:e4:
c8:54:d9:08:ca:0f:4b:c8:17:15:ea:51:4c:b6:dd:
1b:ef:53:e4:de:04:ab:30:6a:63:65:c5:e1:54:18:
4f:ca:ef:c6:67:60:ba:90:56:b5:ae:b7:9a:b3:fe:
a8:7f:34:ef:ef:c4:70:15:f6:f8:2c:4d:a0:c2:eb:
79:8e:a0:31:02:68:4e:82:07:62:13:6d:2e:cd:35:
eb:5a:73:46:42:4e:b2:f3:de:c4:77:2c:ec:66:40:
4e:90:3d:2a:ac:3d:23:c7:53:fa:0a:f5:67:c0:6a:
de:4d:f2:9e:a8:b8:42:a9:fa:03:bb:db:df:d0:42:
cb:5f:2c:cc:92:dd:f3:91:3b:57:7f:31:c5:8c:b9:
0b:35:0b:db:99:bd:f2:a7:24:ec:04:2e:ce:ab:55:
01:5d:01:3a:d8:ff:c5:98:92:bf:8f:b9:42:ce:99:
d5:f9:90:54:91:8a:ae:13:bf:de:0a:ea:7e:22:7b:
c4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B2:E4:A3:1C:C6:1D:DB:0B:17:EF:78:EF:38:C7:62:B6:BD:F3:49
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3139342e35392e302f32342d3234203d3e2036303739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.59.0/24
Signature Algorithm: sha256WithRSAEncryption
00:42:fc:4f:4d:6d:a1:7e:9e:4e:bf:25:bd:5d:ca:46:e4:53:
e5:9b:25:18:90:c6:45:0b:d0:30:c9:23:dd:47:bd:6e:91:43:
eb:e3:ee:54:f6:ea:34:d9:e2:ae:b2:90:96:6b:53:8e:47:a8:
d2:28:4c:ed:12:a3:58:b6:aa:01:bf:a4:92:c9:5f:5c:41:f7:
4e:ce:d9:c6:83:10:e0:eb:2e:e4:df:7e:98:b4:1b:fa:12:c4:
23:70:60:9e:78:8c:2b:ed:bd:7a:b4:a8:80:48:7e:0b:9b:0d:
3a:01:01:f1:ce:84:e1:cb:b9:f2:f8:7c:a5:6e:cf:57:de:ef:
b9:06:89:c0:51:8c:f2:b5:4d:b1:65:b2:e5:0b:12:6b:52:94:
f2:18:ab:af:a6:b9:9f:d4:13:26:d1:a1:25:87:81:81:b5:9d:
af:92:74:c5:87:e5:18:11:e1:71:02:22:14:53:84:86:23:1e:
f8:b0:5a:52:00:f4:7b:be:6a:fc:62:a3:9d:7f:51:48:8b:ff:
b8:5f:ae:59:a2:da:51:5d:ad:57:d8:84:e5:92:69:d7:a7:6b:
a4:8e:43:0c:9c:68:62:98:c2:6a:f7:fc:d4:b3:a4:e2:f3:9e:
d7:ba:ae:9e:cf:f0:2e:c7:98:c7:cc:73:fe:78:4a:54:e6:2b:
50:73:d1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:38:35 2026 by rpki-client