Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e3135322e302f32312d3234203d3e20383334.roa
File: 35312e3134362e3135322e302f32312d3234203d3e20383334.roa (raw, json)
Hash identifier: Ch0g5z+myPhzHV5O9/OgZE5ARBW5843dV1h1rufLwR8=
Subject key identifier: 1A:49:0C:88:69:2C:C4:46:2A:8F:4D:BE:11:42:47:F4:61:D9:30:0A
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 310FBCF20FB86361703F06260FC489FB613F2498
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e3135322e302f32312d3234203d3e20383334.roa
Signing time: Tue 03 Mar 2026 12:52:14 +0000
ROA not before: Tue 03 Mar 2026 12:47:14 +0000
ROA not after: Tue 02 Mar 2027 12:52:14 +0000
asID: 834
IP address blocks: 51.146.152.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 09:03:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:0f:bc:f2:0f:b8:63:61:70:3f:06:26:0f:c4:89:fb:61:3f:24:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Mar 3 12:47:14 2026 GMT
Not After : Mar 2 12:52:14 2027 GMT
Subject: CN=1A490C88692CC4462A8F4DBE114247F461D9300A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:aa:71:cb:cb:6a:67:34:5f:9c:9b:4a:f5:c6:
6b:8a:d0:84:1f:d8:af:25:44:bf:11:e3:7b:23:94:
a9:9e:a2:14:2d:5a:fe:20:9a:1d:ec:3c:44:d0:56:
da:9f:28:c4:53:cc:3a:19:e6:36:82:92:5a:ca:6d:
8e:85:71:0a:db:52:61:a7:77:0b:07:f9:42:e3:b8:
3b:62:e5:ac:b7:0d:e4:f7:6d:7c:bf:b9:18:d7:a9:
f6:ca:94:b8:de:70:ca:cf:37:fa:05:ac:d8:d1:9b:
3f:59:a9:c9:63:79:75:58:b7:c1:74:fe:bb:0e:ac:
3a:c4:18:16:c6:d7:16:b8:17:93:50:7a:06:bd:d4:
9d:e5:b2:96:59:4c:73:31:4f:eb:bd:96:d5:7a:e3:
77:fb:62:b5:ef:f9:95:88:e5:28:07:c8:f4:13:13:
cd:7c:13:12:46:93:80:e8:49:99:c6:e3:80:38:5c:
96:8e:14:de:32:f2:7c:26:0a:6c:75:96:31:fe:13:
b9:79:46:58:43:3f:1c:d5:fb:1e:1f:c6:88:05:fe:
ab:3e:13:6f:6d:45:5d:aa:74:04:36:7c:f6:28:5c:
70:21:dd:95:ce:62:c6:2a:2b:5a:7f:0b:3a:5b:65:
f0:ef:76:9d:bf:8b:d0:da:da:d2:b3:71:84:d2:d1:
ed:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:49:0C:88:69:2C:C4:46:2A:8F:4D:BE:11:42:47:F4:61:D9:30:0A
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e3135322e302f32312d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.152.0/21
Signature Algorithm: sha256WithRSAEncryption
34:7a:3b:40:3a:bc:48:d4:69:8e:b3:1d:fc:9a:4c:2e:81:54:
60:c7:ee:45:82:56:8b:b6:c9:87:4f:12:e4:a8:e9:72:17:6f:
01:b3:b1:84:38:df:1c:0a:73:3b:db:86:b0:a2:d9:77:e4:61:
36:a9:08:18:ac:35:8f:14:31:43:36:74:8d:bc:42:d9:9d:ba:
dd:05:0c:09:ea:60:8f:25:bb:c4:89:be:8d:52:42:e1:cf:ff:
d3:36:31:e2:9a:94:42:f0:6d:76:56:e4:29:e0:50:7c:66:d0:
26:4a:30:a1:ba:c3:d8:b1:11:c4:3f:55:46:be:7a:55:97:5f:
b0:88:a7:e6:36:cc:a1:1c:a1:07:89:d4:83:45:4c:c9:ad:d8:
5c:35:81:f8:be:81:20:33:69:ce:d3:89:5e:58:22:e1:6d:8e:
f6:73:0b:1f:7b:20:8f:d3:61:25:08:87:eb:8b:1f:cd:34:dc:
db:05:bd:34:9e:a0:05:e3:3f:01:7a:2a:d3:ed:66:f4:b7:4d:
42:1e:d8:24:60:aa:f4:e1:87:61:45:6e:8b:55:87:80:c1:68:
35:5e:4f:e7:6f:d4:03:b4:35:a1:94:74:02:ae:1d:5b:45:59:
9c:bf:d5:50:81:6b:6d:d7:ec:09:d5:0a:3f:1d:cb:af:e6:76:
4e:91:22:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 22:16:35 2026 by rpki-client