Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3139342e36342e302f31382d3234203d3e20383334.roa
File: 35312e3139342e36342e302f31382d3234203d3e20383334.roa (raw, json)
Hash identifier: YKwV6bGMdfbTE0G/fyq+YnA/RHUUKX7z9IRCWSQZxxo=
Subject key identifier: 1F:AE:74:C0:A2:1E:A4:A6:AB:D8:51:06:EA:37:37:57:F1:FB:C4:93
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 7170245557D32A03F3E0FDD37C6691C765E41FB8
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3139342e36342e302f31382d3234203d3e20383334.roa
Signing time: Mon 16 Mar 2026 21:50:56 +0000
ROA not before: Mon 16 Mar 2026 21:45:56 +0000
ROA not after: Mon 15 Mar 2027 21:50:56 +0000
asID: 834
IP address blocks: 51.194.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 11:13:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:70:24:55:57:d3:2a:03:f3:e0:fd:d3:7c:66:91:c7:65:e4:1f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Mar 16 21:45:56 2026 GMT
Not After : Mar 15 21:50:56 2027 GMT
Subject: CN=1FAE74C0A21EA4A6ABD85106EA373757F1FBC493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ba:ff:cd:95:86:51:25:0e:40:0f:31:80:59:
ba:3b:9a:94:d4:2f:f4:95:4e:53:c8:58:ae:42:8d:
3b:71:61:0a:ab:78:8b:ee:d5:82:7e:53:5b:6a:04:
5b:26:ee:51:6b:3a:b0:54:0b:83:e4:cc:5f:fa:95:
e7:9e:1a:78:67:e5:5f:b1:9a:39:22:d7:dd:a1:25:
ff:4f:7a:a1:be:00:f2:a6:a1:d1:fd:9c:bf:5f:06:
2e:e6:aa:75:f4:dc:e0:73:f6:3e:23:06:33:1e:85:
46:cf:c1:48:e5:0e:34:b3:fc:6a:3f:59:6f:55:9e:
3e:22:44:ad:92:03:e5:34:9e:9e:8f:d6:29:b5:68:
a9:71:49:24:30:2f:e2:b8:d0:ef:68:9d:f1:da:99:
22:bc:81:36:c2:fe:7d:1e:eb:4a:85:7d:b0:08:86:
7a:f6:da:25:ce:95:20:61:a4:b8:ab:1c:8f:69:e2:
75:62:63:bb:df:dc:6d:b0:76:c6:0a:2a:18:24:4e:
cd:67:ea:d8:dc:5c:e2:9b:4d:12:91:e8:48:de:26:
2e:87:fc:de:cd:d5:14:7f:e0:2c:f9:d2:5a:6b:44:
0b:a7:6f:26:04:bd:17:9b:6e:4b:27:85:a1:20:a6:
35:0c:4f:73:63:4d:c6:0f:e1:8c:4c:a1:6f:dd:07:
c3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:AE:74:C0:A2:1E:A4:A6:AB:D8:51:06:EA:37:37:57:F1:FB:C4:93
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3139342e36342e302f31382d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.64.0/18
Signature Algorithm: sha256WithRSAEncryption
38:82:90:d8:6f:1b:84:ac:3b:0e:16:26:da:64:6e:27:ad:67:
1a:ea:a6:82:5f:61:a4:96:75:60:b7:eb:50:83:96:b8:e7:f5:
16:42:26:1b:1e:70:c8:3b:cf:08:11:5c:03:ae:cf:16:9f:42:
57:d2:d1:c1:26:ea:e6:b1:05:02:f1:a5:19:63:d6:1a:09:6a:
52:c9:5a:50:ea:b4:45:9e:b9:23:83:67:bd:e8:4c:c7:ac:8a:
14:a5:2d:66:bd:80:4c:18:c4:f4:2e:e3:a5:68:86:d5:38:1c:
80:94:72:fa:1c:47:45:4d:71:85:12:77:c4:5f:73:4f:ac:9e:
70:7b:e2:40:44:00:c5:04:da:80:0e:22:31:f4:75:92:b1:02:
0a:88:69:06:88:8d:c1:44:2c:0f:91:f6:dd:d1:f7:b3:f3:5e:
45:9e:de:56:2f:4c:ae:83:72:dd:e0:ef:0b:75:89:b0:9d:da:
bb:bd:72:7f:ea:ad:eb:7a:39:8d:bb:77:5d:4e:88:08:80:4b:
7a:48:5a:3f:9a:f3:70:25:68:ce:8d:a0:71:fa:a2:4b:2e:8e:
22:21:da:b5:97:80:e6:23:ed:5b:61:0a:c7:87:0f:cf:57:1b:
fc:b8:bd:94:23:f1:02:b1:0e:7c:7b:69:09:4c:7b:7c:4c:a3:
5e:fa:a2:21
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUcXAkVVfTKgPz4P3TfGaRx2XkH7gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjAzMTYyMTQ1NTZaFw0yNzAzMTUyMTUwNTZaMDMxMTAvBgNV
BAMTKDFGQUU3NEMwQTIxRUE0QTZBQkQ4NTEwNkVBMzczNzU3RjFGQkM0OTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwuv/NlYZRJQ5ADzGAWbo7mpTU
L/SVTlPIWK5CjTtxYQqreIvu1YJ+U1tqBFsm7lFrOrBUC4PkzF/6leeeGnhn5V+x
mjki192hJf9PeqG+APKmodH9nL9fBi7mqnX03OBz9j4jBjMehUbPwUjlDjSz/Go/
WW9Vnj4iRK2SA+U0np6P1im1aKlxSSQwL+K40O9onfHamSK8gTbC/n0e60qFfbAI
hnr22iXOlSBhpLirHI9p4nViY7vf3G2wdsYKKhgkTs1n6tjcXOKbTRKR6EjeJi6H
/N7N1RR/4Cz50lprRAunbyYEvRebbksnhaEgpjUMT3NjTcYP4YxMoW/dB8OBAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUH650wKIepKar2FEG6jc3V/H7xJMwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTZlNGFjODYt
MTgwMy00OTRkLThhN2ItYzA1MWE2MzEwNzUyLzAvMzUzMTJlMzEzOTM0MmUzNjM0
MmUzMDJmMzEzODJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGM8JAMA0G
CSqGSIb3DQEBCwUAA4IBAQA4gpDYbxuErDsOFibaZG4nrWca6qaCX2GklnVgt+tQ
g5a45/UWQiYbHnDIO88IEVwDrs8Wn0JX0tHBJurmsQUC8aUZY9YaCWpSyVpQ6rRF
nrkjg2e96EzHrIoUpS1mvYBMGMT0LuOlaIbVOByAlHL6HEdFTXGFEnfEX3NPrJ5w
e+JARADFBNqADiIx9HWSsQIKiGkGiI3BRCwPkfbd0fez815Fnt5WL0yug3Ld4O8L
dYmwndq7vXJ/6q3rejmNu3ddTogIgEt6SFo/mvNwJWjOjaBx+qJLLo4iIdq1l4Dm
I+1bYQrHhw/PVxv8uL2UI/ECsQ58e2kJTHt8TKNe+qIh
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:47:48 2026 by rpki-client