Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e3138362e302f32342d3234203d3e20323135323934.roa
File: 35312e3134362e3138362e302f32342d3234203d3e20323135323934.roa (raw, json)
Hash identifier: 57EDqjX+4ibm5YWCLQhnF0HhzDCVlWXJP2u5ylNF7U8=
Subject key identifier: 60:5F:CC:D2:64:58:7F:32:2C:52:85:3C:01:13:67:FE:5C:18:5E:4D
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 024299C4DB4784B16102605EF0B9EA8F9C5A6A56
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e3138362e302f32342d3234203d3e20323135323934.roa
Signing time: Tue 10 Mar 2026 09:07:19 +0000
ROA not before: Tue 10 Mar 2026 09:02:19 +0000
ROA not after: Tue 09 Mar 2027 09:07:19 +0000
asID: 215294
IP address blocks: 51.146.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 24 Mar 2026 18:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:42:99:c4:db:47:84:b1:61:02:60:5e:f0:b9:ea:8f:9c:5a:6a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Mar 10 09:02:19 2026 GMT
Not After : Mar 9 09:07:19 2027 GMT
Subject: CN=605FCCD264587F322C52853C011367FE5C185E4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bb:01:5f:bf:b9:ef:83:a8:bf:98:8b:4d:77:
a3:fa:e6:47:8d:9c:ce:d7:86:68:d5:d2:9b:5f:6f:
f1:dc:1d:1f:7c:3d:d3:b2:9a:d4:af:3f:1e:ca:95:
fc:5c:e6:f1:a8:37:b1:d5:a7:04:71:5d:f9:2f:3b:
e3:b1:de:a0:53:3e:1f:43:cb:00:37:81:44:d8:d0:
cc:e6:1d:6d:9b:83:42:00:7a:5f:4d:57:83:9c:11:
53:86:ae:28:97:f6:68:4a:0a:d3:87:a8:bc:65:a7:
e5:e8:fe:45:5c:c0:97:d8:b4:8b:9c:71:44:a1:32:
5c:5f:a9:4a:44:75:4b:d7:06:09:0c:02:62:8e:0d:
7d:cc:83:c4:28:58:82:a0:69:4e:a8:94:10:f4:50:
d4:39:91:fe:c2:62:23:16:05:fa:59:96:7e:5c:40:
2e:09:ec:95:9a:cf:d4:d4:f2:31:84:52:c1:a7:5a:
84:aa:7a:59:f3:59:10:36:da:21:80:63:cc:48:31:
ad:5b:5e:e5:96:8b:56:32:21:e5:14:1c:34:b4:83:
63:c9:27:b6:88:ea:12:fc:3a:f8:c3:1f:ad:e3:7f:
8b:ad:8c:c6:9b:de:87:db:37:97:c4:52:b9:bd:ea:
50:8b:8a:eb:3b:bf:20:dd:cf:be:aa:77:d6:5f:bb:
53:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5F:CC:D2:64:58:7F:32:2C:52:85:3C:01:13:67:FE:5C:18:5E:4D
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e3138362e302f32342d3234203d3e20323135323934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.186.0/24
Signature Algorithm: sha256WithRSAEncryption
08:b2:0b:94:a9:25:fc:64:77:b9:fc:9e:21:cf:34:f5:7b:cd:
51:ef:fa:22:64:84:2d:12:47:98:e2:95:e0:1e:17:76:47:93:
a9:16:39:3d:e9:f3:e4:36:cd:a0:79:50:01:08:ef:b0:29:34:
d3:96:3a:da:2a:71:ad:b9:28:f3:54:17:32:8a:bd:72:2b:d9:
28:b3:7d:f8:e6:02:58:fa:f0:19:d5:3a:75:3f:0e:a1:7d:5b:
75:36:05:54:1c:6d:76:31:3c:9c:32:55:a8:66:38:bf:e2:a3:
f0:f8:e2:e3:ef:ca:48:53:49:f4:5f:06:83:87:db:05:60:5c:
aa:cb:ca:f2:56:70:8c:38:6f:f4:58:95:7f:15:d9:9c:3e:57:
b4:66:7a:aa:65:98:9d:af:d5:9e:4b:95:df:9f:62:0c:28:ee:
4c:2c:0e:5b:b0:9d:85:67:a8:a6:ca:a1:69:94:25:ee:ea:f8:
f4:74:19:f1:91:1f:8f:31:d0:4b:f7:ca:b5:c1:c2:ea:b3:ba:
0a:02:f3:42:a1:f7:33:30:40:0a:a1:27:fd:b7:c0:dd:d0:fe:
fa:69:99:bc:9f:f3:47:54:b5:93:c1:27:03:99:20:34:d7:ff:
34:73:94:8a:fb:c5:90:fe:4d:b7:62:6f:c0:f2:d7:b3:f5:e3:
53:6d:4b:b7
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUAkKZxNtHhLFhAmBe8Lnqj5xaalYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjAzMTAwOTAyMTlaFw0yNzAzMDkwOTA3MTlaMDMxMTAvBgNV
BAMTKDYwNUZDQ0QyNjQ1ODdGMzIyQzUyODUzQzAxMTM2N0ZFNUMxODVFNEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1uwFfv7nvg6i/mItNd6P65keN
nM7XhmjV0ptfb/HcHR98PdOymtSvPx7Klfxc5vGoN7HVpwRxXfkvO+Ox3qBTPh9D
ywA3gUTY0MzmHW2bg0IAel9NV4OcEVOGriiX9mhKCtOHqLxlp+Xo/kVcwJfYtIuc
cUShMlxfqUpEdUvXBgkMAmKODX3Mg8QoWIKgaU6olBD0UNQ5kf7CYiMWBfpZln5c
QC4J7JWaz9TU8jGEUsGnWoSqelnzWRA22iGAY8xIMa1bXuWWi1YyIeUUHDS0g2PJ
J7aI6hL8OvjDH63jf4utjMab3ofbN5fEUrm96lCLius7vyDdz76qd9Zfu1MrAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUYF/M0mRYfzIsUoU8ARNn/lwYXk0wHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTZlNGFjODYt
MTgwMy00OTRkLThhN2ItYzA1MWE2MzEwNzUyLzAvMzUzMTJlMzEzNDM2MmUzMTM4
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzUzMjM5MzQucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAAzkrowDQYJKoZIhvcNAQELBQADggEBAAiyC5SpJfxkd7n8niHPNPV7zVHv+iJk
hC0SR5jileAeF3ZHk6kWOT3p8+Q2zaB5UAEI77ApNNOWOtoqca25KPNUFzKKvXIr
2SizffjmAlj68BnVOnU/DqF9W3U2BVQcbXYxPJwyVahmOL/io/D44uPvykhTSfRf
BoOH2wVgXKrLyvJWcIw4b/RYlX8V2Zw+V7RmeqplmJ2v1Z5Lld+fYgwo7kwsDluw
nYVnqKbKoWmUJe7q+PR0GfGRH48x0Ev3yrXBwuqzugoC80Kh9zMwQAqhJ/23wN3Q
/vppmbyf80dUtZPBJwOZIDTX/zRzlIr7xZD+Tbdib8Dy17P141NtS7c=
-----END CERTIFICATE-----
Generated at Tue Mar 24 07:58:17 2026 by rpki-client