Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e3133322e302f32322d3234203d3e2032383536.roa
File: 35312e3134362e3133322e302f32322d3234203d3e2032383536.roa (raw, json)
Hash identifier: PeO/7jWJzGhKZA9LIOwjF66yoGOoK88f3o8IqYDpg08=
Subject key identifier: 56:DF:0F:CF:D8:F5:CF:03:DD:06:79:B4:CC:87:ED:92:DC:A0:2F:83
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 2346BD8ED57570EFBC310D1A37F9E9271101239A
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e3133322e302f32322d3234203d3e2032383536.roa
Signing time: Fri 27 Feb 2026 13:11:50 +0000
ROA not before: Fri 27 Feb 2026 13:06:50 +0000
ROA not after: Fri 26 Feb 2027 13:11:50 +0000
asID: 2856
IP address blocks: 51.146.132.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:46:bd:8e:d5:75:70:ef:bc:31:0d:1a:37:f9:e9:27:11:01:23:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Feb 27 13:06:50 2026 GMT
Not After : Feb 26 13:11:50 2027 GMT
Subject: CN=56DF0FCFD8F5CF03DD0679B4CC87ED92DCA02F83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:15:cb:2b:3d:2a:81:9d:2d:e0:f8:d6:e0:85:
27:0e:ef:2b:57:b3:4e:1a:28:a5:6f:8a:11:f4:6a:
8b:94:33:e7:89:b6:72:a7:41:51:79:44:9a:20:6a:
6f:f5:25:cc:d8:05:12:05:ef:33:0c:b7:c8:72:31:
88:ce:77:9f:49:18:df:79:bc:43:41:23:af:c4:b6:
01:ff:07:e3:af:52:24:67:95:40:7b:e4:98:60:c7:
d6:54:84:af:57:78:5a:ad:f6:e9:2e:b5:f4:da:74:
4f:90:01:ca:a2:a0:4b:37:e1:aa:b2:17:75:e7:4b:
0d:09:63:46:95:74:65:5c:c6:40:a4:7c:1f:35:b0:
30:33:42:d2:3e:71:20:22:ea:e7:39:80:8c:ab:88:
7e:06:0a:8d:b1:25:c3:91:6c:42:07:88:2a:a7:a7:
41:6d:2d:cc:24:71:c6:05:9f:06:8e:a4:e2:ae:cd:
ae:4b:bb:14:26:f5:0e:4b:9f:e8:85:53:fd:0a:4c:
4c:ac:7a:ca:e3:9c:31:17:98:f6:a8:db:06:2a:85:
0f:56:6f:a7:56:fb:52:62:58:0c:1b:cc:21:d7:23:
25:e5:21:a4:c5:58:c3:80:d1:61:19:e8:9b:96:ed:
9e:dd:f6:d8:13:6c:ee:46:02:6b:6e:0b:1b:6b:17:
fb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:DF:0F:CF:D8:F5:CF:03:DD:06:79:B4:CC:87:ED:92:DC:A0:2F:83
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e3133322e302f32322d3234203d3e2032383536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.132.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:97:c1:6f:51:7a:76:32:88:49:36:db:41:bd:9a:e4:66:96:
2a:47:a8:30:ad:46:bb:0a:3a:25:0e:41:ee:4e:11:64:53:c9:
b8:f8:61:38:52:bb:90:ea:fc:44:a4:19:55:bf:56:a9:43:97:
51:92:1c:6c:7f:a6:61:47:3c:62:32:1a:98:4d:ce:82:4a:38:
ba:e0:30:a1:ba:22:49:23:c4:3a:eb:13:82:96:89:a8:fb:f8:
b2:a1:d2:73:ee:cf:ac:a3:92:e0:c5:b5:56:6f:58:7c:0a:18:
b7:b7:6b:07:82:96:5f:52:ab:b5:f5:6c:b8:4c:b1:f3:9e:67:
2e:61:d6:56:e5:45:a2:60:ab:f7:db:e4:d4:90:d5:2f:22:8b:
2c:8d:4d:a8:a8:1f:f2:de:7e:40:54:46:a2:3f:70:2a:c5:b3:
5c:29:6f:fa:37:bb:48:50:dc:b4:6c:aa:8f:08:b6:7c:97:d7:
51:00:c5:95:7d:ba:00:34:36:d0:86:7c:2f:2c:05:7f:d2:22:
4d:8d:15:22:61:38:0a:a0:75:26:43:b5:32:38:39:40:58:89:
8a:7b:57:2a:e8:25:f3:d4:cb:3f:8d:34:f6:c6:3d:a2:19:cf:
8c:0d:ce:76:49:ed:31:4e:dc:e3:7a:49:b1:8d:96:1c:23:61:
68:10:6a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:26:30 2026 by rpki-client