Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e3233322e302f32312d3234203d3e20383334.roa
File: 35312e3134362e3233322e302f32312d3234203d3e20383334.roa (raw, json)
Hash identifier: olC+/6usRRmn1dRly95GBjXBzfoKDGi3ZOGq2UBDbfA=
Subject key identifier: B0:28:A4:03:8A:94:02:3E:96:E9:01:E2:EA:33:2F:42:6C:76:8E:E9
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 2700E579EB8FCE8BAAA1FB451D08E8CBD55821EB
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e3233322e302f32312d3234203d3e20383334.roa
Signing time: Thu 26 Mar 2026 16:05:58 +0000
ROA not before: Thu 26 Mar 2026 16:00:58 +0000
ROA not after: Thu 25 Mar 2027 16:05:58 +0000
asID: 834
IP address blocks: 51.146.232.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 31 Mar 2026 13:25:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:00:e5:79:eb:8f:ce:8b:aa:a1:fb:45:1d:08:e8:cb:d5:58:21:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Mar 26 16:00:58 2026 GMT
Not After : Mar 25 16:05:58 2027 GMT
Subject: CN=B028A4038A94023E96E901E2EA332F426C768EE9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cf:35:61:90:4b:61:0d:ef:ab:76:5a:c5:20:
88:4e:da:17:2b:bd:d0:08:cd:69:c7:d7:bc:a2:b8:
9f:1e:f6:12:26:50:2e:f7:f9:07:64:96:f5:f9:18:
f1:17:40:ae:11:0d:3f:08:1b:13:11:bf:7e:10:2b:
1f:45:33:f4:7a:94:66:67:06:58:1a:a7:49:4b:5d:
58:ae:06:b5:de:04:4c:3b:be:23:2d:eb:70:ac:5c:
ea:ac:3b:28:52:a8:e7:e0:93:f7:6e:c5:32:96:9c:
87:1b:30:68:f4:8e:9b:d7:d5:f5:ac:f8:56:25:ef:
46:d7:01:84:e2:e6:ad:8b:49:cc:c0:1a:c4:64:e4:
cb:86:16:77:0b:cf:62:16:42:cb:a0:cf:d4:95:c4:
d6:2d:0d:79:44:df:28:af:72:f4:fa:58:0d:d2:43:
e3:0b:0c:82:4a:b2:16:c9:f9:2c:c8:ca:37:56:88:
ba:a7:4d:85:b3:4c:ce:a8:08:1f:7a:40:a6:9f:17:
81:b0:b5:7d:28:51:e0:22:83:57:f0:39:84:86:22:
37:d1:24:e1:67:8d:1a:14:2e:8f:02:d5:25:f0:6b:
dc:4f:79:95:a6:7d:d4:8a:35:fb:dc:27:73:c6:58:
93:3b:e2:fc:b6:90:07:96:da:9b:1e:09:fa:b2:4b:
c2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:28:A4:03:8A:94:02:3E:96:E9:01:E2:EA:33:2F:42:6C:76:8E:E9
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e3233322e302f32312d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.232.0/21
Signature Algorithm: sha256WithRSAEncryption
62:a0:0c:e4:cb:41:03:9e:df:71:22:17:57:f4:67:f9:7c:e6:
84:79:0d:22:d9:3f:bd:23:ab:55:93:38:d3:d3:0d:31:21:da:
5a:a2:8e:73:92:1e:06:df:0d:62:5c:28:40:17:dd:7a:77:cb:
aa:f3:38:26:6c:3d:a8:1b:bd:ea:b8:21:09:07:7c:48:7c:5b:
a4:8d:3e:77:91:29:41:d3:a0:2a:1b:3d:ef:28:97:c4:69:e1:
51:cf:87:59:df:c3:bb:e9:cf:b3:62:31:8e:73:dc:4d:30:75:
c1:ff:a1:a3:96:0d:0b:9e:41:ac:8e:9c:fd:e9:20:aa:14:e5:
c7:05:e6:7c:d0:23:c2:fc:a7:c5:5b:09:77:6e:fc:c8:08:7d:
19:0e:84:28:c9:c3:be:22:dd:b6:5c:1a:70:d5:54:03:fa:72:
dd:59:25:b8:49:81:7d:b9:e6:e7:14:31:7b:2d:50:ae:a1:8c:
23:ce:7d:c6:8b:a0:17:5f:04:38:4b:50:19:6d:f7:e5:4d:dc:
17:94:7a:f9:9a:73:9b:bb:07:46:b8:a5:1f:76:d5:fc:e1:65:
0a:b2:b5:f4:99:41:89:42:02:5a:2f:4b:90:77:26:72:4f:39:
cb:af:56:0e:9d:c6:22:81:54:70:fc:d8:54:4c:1f:81:74:51:
d8:ce:39:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 23:17:53 2026 by rpki-client