Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3139342e382e302f32312d3234203d3e20383132.roa
File: 35312e3139342e382e302f32312d3234203d3e20383132.roa (raw, json)
Hash identifier: xh39F1f9GW1+mIgqFJZIFBQ2j11PcgMfc+GlcwPAi3Y=
Subject key identifier: 43:E1:F6:E0:30:49:E1:5F:72:6D:5D:50:D3:1B:8B:40:CE:DB:AC:BF
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 7596756927D9BB91E286C8E9EE742734FDA0403C
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3139342e382e302f32312d3234203d3e20383132.roa
Signing time: Mon 23 Mar 2026 16:22:47 +0000
ROA not before: Mon 23 Mar 2026 16:17:47 +0000
ROA not after: Mon 22 Mar 2027 16:22:47 +0000
asID: 812
IP address blocks: 51.194.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 11:13:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:96:75:69:27:d9:bb:91:e2:86:c8:e9:ee:74:27:34:fd:a0:40:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Mar 23 16:17:47 2026 GMT
Not After : Mar 22 16:22:47 2027 GMT
Subject: CN=43E1F6E03049E15F726D5D50D31B8B40CEDBACBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5d:0f:10:90:25:01:f9:75:97:26:fe:c1:1b:
fd:09:ab:6c:74:b2:b6:37:da:ef:29:89:b7:d3:f8:
48:da:cb:5e:dc:32:25:ed:44:66:75:d9:e3:ab:16:
f9:fb:82:d3:96:c2:64:16:3f:3d:e6:1c:f9:73:57:
13:ae:63:68:1f:91:a1:5a:31:16:c6:c3:61:a0:3b:
ca:09:e1:31:fb:02:88:c6:c4:b3:34:e0:32:26:65:
d0:b7:00:02:62:2e:b9:10:43:c9:37:10:fb:24:ec:
e5:83:e8:c1:26:57:92:3d:97:b2:2a:15:30:55:23:
e5:1e:a2:8b:7b:73:ae:12:18:71:ba:5f:e5:f3:52:
9a:43:bb:c4:9a:27:6f:da:2b:ed:ec:84:92:88:89:
dc:fb:41:15:17:35:18:e4:ca:95:3b:5c:5d:17:a5:
1c:e0:ed:fa:6e:b6:02:59:34:c4:bf:f1:97:d6:c3:
be:e1:a5:95:77:50:2b:b0:5b:93:d8:76:04:79:31:
7e:3e:8a:51:b9:d9:b6:47:fc:9f:c5:bb:5c:88:82:
5f:30:20:25:52:db:14:9a:72:8a:0c:a3:5e:32:45:
08:29:49:02:e3:5d:24:f6:3a:bb:0c:80:95:5b:67:
28:45:86:db:4b:aa:92:c3:8c:66:15:53:0c:39:91:
b4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E1:F6:E0:30:49:E1:5F:72:6D:5D:50:D3:1B:8B:40:CE:DB:AC:BF
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3139342e382e302f32312d3234203d3e20383132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.194.8.0/21
Signature Algorithm: sha256WithRSAEncryption
2a:eb:06:24:4d:ce:40:85:23:29:95:90:94:8d:42:45:f7:1d:
34:27:54:9d:aa:6b:e9:08:fb:5f:25:1b:7f:f4:1e:95:59:8e:
26:35:19:98:60:df:26:fc:3f:7e:68:49:43:94:c7:3d:e4:1f:
5d:35:73:a5:48:2c:eb:7c:48:01:80:af:f8:0c:7f:4a:5a:b7:
5f:85:67:0e:7c:20:f7:6c:c0:3e:84:26:06:2b:dd:fc:68:5e:
f3:8d:bd:bc:55:39:7a:75:84:11:5b:73:bc:58:f3:9a:6d:73:
b1:3b:1f:7f:3d:be:c1:41:09:de:00:0e:d8:ba:a4:2b:0a:d5:
46:78:e6:b3:ca:0b:18:2a:8b:26:a3:35:31:b4:c5:96:8a:1a:
bd:94:30:5b:1b:ce:4a:0f:2f:55:b3:ee:7f:63:72:1f:6a:13:
b3:89:81:55:98:3b:4c:c9:b3:d4:54:ef:c7:dd:ac:8d:bb:9b:
4b:ad:a6:fb:12:e6:ad:32:7d:f5:b3:61:48:1c:51:bd:e9:41:
63:3a:21:b5:8f:3a:f9:3a:b5:d0:0e:fc:42:fe:c7:13:dc:50:
94:55:a6:9b:21:48:13:b1:63:ba:6f:64:c0:eb:77:5f:aa:c0:
c7:8e:6c:e3:cc:eb:eb:31:e5:1b:80:dc:58:8a:4c:a2:65:8e:
c6:ed:22:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:22:36 2026 by rpki-client