Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e33362e302f32322d3234203d3e2038383831.roa
File: 35312e3134362e33362e302f32322d3234203d3e2038383831.roa (raw, json)
Hash identifier: zPIL6iLCJGlG5Vy48n69OXWn6CYv0/iahO4RJyvXF4w=
Subject key identifier: ED:02:38:4A:7C:75:F3:0B:70:03:2F:EA:44:60:8A:94:E6:4C:FC:FD
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 380140F7D502DCC8A803AFC583164C67E5115A24
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e33362e302f32322d3234203d3e2038383831.roa
Signing time: Tue 03 Mar 2026 12:51:50 +0000
ROA not before: Tue 03 Mar 2026 12:46:50 +0000
ROA not after: Tue 02 Mar 2027 12:51:50 +0000
asID: 8881
IP address blocks: 51.146.36.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 09:03:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:01:40:f7:d5:02:dc:c8:a8:03:af:c5:83:16:4c:67:e5:11:5a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Mar 3 12:46:50 2026 GMT
Not After : Mar 2 12:51:50 2027 GMT
Subject: CN=ED02384A7C75F30B70032FEA44608A94E64CFCFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:64:f0:82:e4:ef:44:70:58:c2:a6:4a:8e:5d:
d8:80:0f:a4:a2:8c:45:71:5a:8d:28:19:83:c8:af:
8c:16:80:2c:5e:e2:37:6e:5c:1b:ed:e0:60:6d:a9:
f3:57:ac:5f:52:39:a7:48:28:6d:8a:b8:a0:1d:86:
2e:eb:57:c2:38:f9:65:9b:9b:88:f0:1b:ea:be:52:
8a:27:7b:2d:7d:e4:c6:77:84:7a:4d:41:0c:9e:1a:
ce:a1:c4:db:51:0a:7a:52:73:e3:eb:4a:74:9d:d7:
8a:8e:2d:1e:14:ea:ec:62:1d:e0:aa:48:d5:45:a0:
2e:07:eb:a9:8a:16:f7:ad:a4:1c:c6:b8:81:a0:6b:
b0:7e:11:cc:5b:61:f8:bf:f4:d9:c2:62:8a:1f:11:
3d:4c:6c:f2:03:c9:e0:49:03:64:6f:18:ab:6a:7e:
c3:40:64:66:8e:3b:4e:ea:b0:1c:a8:19:7e:90:f7:
b2:ca:27:49:78:d2:40:3b:b9:ac:c3:82:4b:a8:b3:
36:fb:de:8d:0e:61:d3:6e:7d:98:58:cd:df:27:b7:
db:88:f4:50:45:f0:5b:b3:3a:10:1b:77:5a:b0:46:
41:33:02:89:fe:84:42:fc:1e:f2:0f:f8:6b:d8:d8:
55:db:ba:c9:45:33:96:f5:cf:45:a3:79:fb:74:4a:
7f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:02:38:4A:7C:75:F3:0B:70:03:2F:EA:44:60:8A:94:E6:4C:FC:FD
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e33362e302f32322d3234203d3e2038383831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.36.0/22
Signature Algorithm: sha256WithRSAEncryption
13:c4:36:8d:2b:07:34:e4:ee:52:de:02:21:ff:b5:89:76:3f:
50:d7:5e:dc:f5:4c:7e:01:a2:ce:6a:52:6e:43:3a:e0:eb:52:
44:b9:e4:f7:b4:42:2c:f2:b4:e0:ef:07:7e:7f:98:59:ae:b5:
cf:bc:78:b3:8f:5f:5d:e9:d3:a6:d6:85:be:71:83:04:4a:a2:
3c:29:06:74:5d:59:55:dd:e8:1a:de:d3:82:c0:42:6e:03:c3:
05:5f:de:0b:62:6f:fe:11:8d:64:ce:6d:6b:22:f8:b3:0e:d5:
56:97:1f:dc:41:a6:8b:b8:a3:4a:ca:8d:a1:2e:02:73:7d:22:
f2:47:d9:8d:26:4b:ba:82:ce:03:05:2e:55:9b:f7:c5:4a:0f:
c3:8f:00:91:96:08:35:36:1e:15:84:ff:aa:77:88:d8:ff:18:
25:4a:f3:d3:de:92:b2:ae:73:e2:7a:9f:67:ce:59:7c:75:59:
cc:18:93:59:c6:f3:37:d1:24:c7:d7:d6:51:a2:60:d1:17:7a:
f0:94:b4:e1:f3:ea:83:52:e0:ea:25:f1:71:6e:a8:e3:3d:e8:
ea:5d:8a:9f:77:5d:0b:ca:a3:56:47:f9:3a:ad:71:20:ff:e8:
f9:ad:32:b9:0c:b0:4c:15:01:f3:6c:c5:91:86:39:90:08:53:
57:b6:c7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 22:16:35 2026 by rpki-client