Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e3133362e302f32322d3234203d3e2032383536.roa
File: 35312e3134362e3133362e302f32322d3234203d3e2032383536.roa (raw, json)
Hash identifier: w7Qumk13OqTGSz/JOE1TFdrIJ1FhztxHUwBZLt5Mkaw=
Subject key identifier: 1E:F6:41:33:DA:3A:2E:63:B9:2A:F7:1C:2A:AA:7C:A8:AB:2C:61:BA
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 7FA5101E2C69A30FCC46AFEC484CCCAC8348DF91
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e3133362e302f32322d3234203d3e2032383536.roa
Signing time: Fri 27 Feb 2026 13:11:51 +0000
ROA not before: Fri 27 Feb 2026 13:06:51 +0000
ROA not after: Fri 26 Feb 2027 13:11:51 +0000
asID: 2856
IP address blocks: 51.146.136.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:a5:10:1e:2c:69:a3:0f:cc:46:af:ec:48:4c:cc:ac:83:48:df:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Feb 27 13:06:51 2026 GMT
Not After : Feb 26 13:11:51 2027 GMT
Subject: CN=1EF64133DA3A2E63B92AF71C2AAA7CA8AB2C61BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bd:ca:22:e2:c1:76:61:ca:23:3f:50:7b:fc:
0e:fc:e0:9f:a1:a2:d8:91:9f:2f:f8:28:38:c4:d8:
b9:55:f2:8a:fb:9c:b4:ca:2b:27:e0:68:64:d9:21:
d3:d1:02:1c:d2:94:0f:20:4d:b9:0f:d0:98:fe:64:
9d:48:51:21:0e:3d:c5:23:e1:c8:8b:3d:66:19:4b:
1c:5c:27:88:99:63:76:3c:88:81:55:15:3b:1c:75:
6a:5c:25:40:f0:1d:34:6d:21:f0:f2:18:1b:48:ba:
19:e7:a6:c2:01:e9:8b:c7:f2:3d:3f:c3:a2:64:64:
f4:01:ff:d1:78:d6:c4:83:f6:12:10:18:58:0a:3e:
a9:8f:1b:f0:80:e9:07:d7:ba:8f:25:72:5b:4c:0b:
bc:3f:0c:41:d9:64:79:22:77:5f:fd:62:e6:a7:22:
67:43:ba:f3:78:aa:4e:4e:b3:0f:52:ae:14:24:d9:
6b:76:36:9d:92:46:c7:1a:6d:a3:13:f8:b7:9f:f9:
18:2b:40:ca:d2:16:c0:55:66:aa:0a:ce:f5:3f:22:
80:3f:3b:17:a6:e2:36:3c:d2:5c:13:7d:51:10:7a:
99:0c:dc:77:20:93:56:ca:b7:c5:fd:03:b3:83:4d:
31:9e:dd:f6:ee:64:05:8b:78:86:91:3f:38:15:e0:
1f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F6:41:33:DA:3A:2E:63:B9:2A:F7:1C:2A:AA:7C:A8:AB:2C:61:BA
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e3133362e302f32322d3234203d3e2032383536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.136.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:7d:86:ad:21:d1:cd:a9:66:91:c1:ef:6c:06:6a:7c:80:4a:
2d:27:d5:27:3e:ac:a1:50:09:f6:a8:6c:e6:0c:ce:6c:68:fa:
6a:f5:9d:34:a6:c3:29:d3:27:09:66:58:ef:44:2b:e9:4c:a2:
12:ef:fb:f5:d8:bc:39:c9:af:f5:05:90:18:3b:c9:86:96:b8:
ad:69:18:05:96:2e:6a:0f:6a:82:db:ce:f5:3e:3c:b8:b4:26:
60:ff:af:dc:3f:21:dc:85:4f:3e:54:42:69:b4:39:a5:e0:2a:
68:cc:79:9a:a4:01:ad:33:91:7d:9b:2d:66:fb:f8:4c:a2:1b:
e8:fc:d0:64:fa:24:41:60:61:91:6f:d5:28:9c:92:56:1f:d0:
f6:5a:0b:db:01:6e:27:4a:28:1a:89:4e:01:50:7b:53:97:9c:
6b:ff:dd:9a:ef:8b:a8:92:8e:8a:6e:95:9d:20:d3:d5:90:d8:
4c:7a:23:1f:78:65:65:9d:f3:fc:c6:da:2f:60:79:02:e7:25:
4e:5a:ed:3e:b8:d1:26:f1:04:fe:1d:0e:f6:61:f2:36:5f:e6:
1c:cc:c6:8c:06:58:b8:60:5b:5d:d3:72:80:27:2d:77:5d:c1:
04:2d:76:16:27:b5:a8:aa:5b:e2:4e:bb:cb:53:de:e8:d1:af:
31:4f:b3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:26:30 2026 by rpki-client