Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e302e302f32302d3234203d3e203439393135.roa
File: 35312e3134362e302e302f32302d3234203d3e203439393135.roa (raw, json)
Hash identifier: OjEGFZQmbBAN3cHHsCsOKc8nmkG0JW4/vQpwz8dCtk8=
Subject key identifier: FB:39:13:E4:F1:D7:7C:9A:C6:09:7A:53:35:3E:95:C3:3D:4A:9A:81
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 699D855FFD37B1590339EE0B4BF017C04E601241
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e302e302f32302d3234203d3e203439393135.roa
Signing time: Wed 25 Feb 2026 15:14:15 +0000
ROA not before: Wed 25 Feb 2026 15:09:15 +0000
ROA not after: Wed 24 Feb 2027 15:14:15 +0000
asID: 49915
IP address blocks: 51.146.0.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:23:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:9d:85:5f:fd:37:b1:59:03:39:ee:0b:4b:f0:17:c0:4e:60:12:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Feb 25 15:09:15 2026 GMT
Not After : Feb 24 15:14:15 2027 GMT
Subject: CN=FB3913E4F1D77C9AC6097A53353E95C33D4A9A81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a5:98:7e:fd:c5:6c:1d:96:47:45:54:19:69:
13:4e:e7:b1:2a:28:a6:07:e4:28:64:f7:f6:d4:e4:
f4:5b:36:3e:9d:b5:fd:e1:15:65:c7:4c:b9:a8:f3:
fd:59:2e:a0:84:54:f7:63:c8:e0:76:11:0e:8f:c7:
1a:cd:49:60:68:9f:05:3f:a6:96:65:ac:cd:b0:d5:
6a:16:47:e7:84:6e:a9:f5:71:1a:e3:d7:69:1e:b9:
67:d2:c1:20:8f:ed:33:5d:31:c0:ec:19:8c:d9:fa:
65:e6:f8:d6:be:5d:81:f9:98:3d:7a:9e:ed:28:49:
23:41:70:1c:37:3b:98:6c:b9:e8:1c:10:9f:ad:51:
4f:d9:c5:69:76:55:40:eb:0c:69:f1:38:a6:08:17:
82:9b:f6:18:85:fe:10:cd:bb:8c:9e:91:e9:05:a5:
92:c5:4b:02:ad:46:0e:7c:a7:ec:f7:67:2f:b5:80:
d4:0a:27:f9:85:89:93:a8:a5:e7:97:02:0f:29:d5:
55:cd:78:c5:83:31:31:54:35:f1:55:f3:f3:f7:07:
ca:9d:4d:b5:6f:0d:80:73:ac:96:d7:18:6b:8c:11:
57:b0:0a:b6:96:e2:71:54:e9:93:ca:2d:7c:d9:43:
1b:51:b9:40:65:05:6c:12:7e:fe:2d:81:2f:cb:59:
1b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:39:13:E4:F1:D7:7C:9A:C6:09:7A:53:35:3E:95:C3:3D:4A:9A:81
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e302e302f32302d3234203d3e203439393135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.0.0/20
Signature Algorithm: sha256WithRSAEncryption
7f:47:a1:9a:04:25:5a:6b:5c:85:dd:86:1e:4b:2c:e7:22:0d:
d0:08:c1:fc:94:16:63:c8:8d:e9:e2:45:d2:c7:5e:ee:5f:e9:
16:69:98:3a:59:e7:fd:04:62:3b:b8:75:a7:92:1b:3f:14:d1:
9d:f9:7d:2f:bd:49:3e:9d:fd:90:7d:b4:89:05:b3:05:2c:30:
bb:9a:73:ae:52:fe:fb:a7:35:30:17:0b:fb:9c:68:cc:bd:b2:
ee:87:08:89:b7:54:e2:56:0f:9c:56:6a:3b:01:e5:e8:e5:06:
4b:17:01:6f:c7:89:92:bf:dd:fd:86:8c:f4:41:fd:26:ec:96:
a7:17:b5:f0:a8:1c:44:dc:65:f7:3e:96:ad:7c:f7:dc:d1:54:
a1:58:d4:21:62:37:4c:41:d6:2d:b7:b5:e4:a8:d0:b1:17:90:
2b:d1:3b:84:63:d4:cf:77:1b:3e:b1:c5:2a:f3:f4:34:a4:98:
2a:8e:98:e7:2d:09:5c:dc:20:a0:a3:86:33:e6:2c:a8:68:66:
c3:42:3e:ad:2f:0d:90:6c:0a:f1:19:8e:b0:9d:b1:f4:84:83:
16:75:c3:4b:a2:43:20:37:9d:a2:5c:c9:78:d6:cf:3c:2a:b8:
d1:8b:d5:2b:3b:a0:ab:7b:62:e7:29:b0:b0:96:ac:01:a5:d2:
59:f1:70:89
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUaZ2FX/03sVkDOe4LS/AXwE5gEkEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMGUyMGNjZjUwODNhNjNiOWY1ODg3ZTNlYTM5ZDA0ZTJk
NjJiM2RhNTAeFw0yNjAyMjUxNTA5MTVaFw0yNzAyMjQxNTE0MTVaMDMxMTAvBgNV
BAMTKEZCMzkxM0U0RjFENzdDOUFDNjA5N0E1MzM1M0U5NUMzM0Q0QTlBODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHpZh+/cVsHZZHRVQZaRNO57Eq
KKYH5Chk9/bU5PRbNj6dtf3hFWXHTLmo8/1ZLqCEVPdjyOB2EQ6PxxrNSWBonwU/
ppZlrM2w1WoWR+eEbqn1cRrj12keuWfSwSCP7TNdMcDsGYzZ+mXm+Na+XYH5mD16
nu0oSSNBcBw3O5hsuegcEJ+tUU/ZxWl2VUDrDGnxOKYIF4Kb9hiF/hDNu4yekekF
pZLFSwKtRg58p+z3Zy+1gNQKJ/mFiZOopeeXAg8p1VXNeMWDMTFUNfFV8/P3B8qd
TbVvDYBzrJbXGGuMEVewCraW4nFU6ZPKLXzZQxtRuUBlBWwSfv4tgS/LWRvVAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQU+zkT5PHXfJrGCXpTNT6Vwz1KmoEwHwYDVR0j
BBgwFoAUDiDM9Qg6Y7n1iH4+o50E4tYrPaUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvOTZlNGFjODYtMTgwMy00OTRkLThhN2ItYzA1MWE2MzEw
NzUyLzAvMEUyMENDRjUwODNBNjNCOUY1ODg3RTNFQTM5RDA0RTJENjJCM0RBNS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0RpRE05UWc2WTduMWlINC1vNTBFNHRZ
clBhVS5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvOTZlNGFjODYt
MTgwMy00OTRkLThhN2ItYzA1MWE2MzEwNzUyLzAvMzUzMTJlMzEzNDM2MmUzMDJl
MzAyZjMyMzAyZDMyMzQyMDNkM2UyMDM0MzkzOTMxMzUucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQzkgAw
DQYJKoZIhvcNAQELBQADggEBAH9HoZoEJVprXIXdhh5LLOciDdAIwfyUFmPIjeni
RdLHXu5f6RZpmDpZ5/0EYju4daeSGz8U0Z35fS+9ST6d/ZB9tIkFswUsMLuac65S
/vunNTAXC/ucaMy9su6HCIm3VOJWD5xWajsB5ejlBksXAW/HiZK/3f2GjPRB/Sbs
lqcXtfCoHETcZfc+lq1899zRVKFY1CFiN0xB1i23teSo0LEXkCvRO4Rj1M93Gz6x
xSrz9DSkmCqOmOctCVzcIKCjhjPmLKhoZsNCPq0vDZBsCvEZjrCdsfSEgxZ1w0ui
QyA3naJcyXjWzzwquNGL1Ss7oKt7YucpsLCWrAGl0lnxcIk=
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:42:27 2026 by rpki-client