Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e31362e302f32302d3234203d3e203439393135.roa
File: 35312e3134362e31362e302f32302d3234203d3e203439393135.roa (raw, json)
Hash identifier: TS2xXKCJjTJMM7MbMW5PTMgFMJiW1lKpkaKNNwf0Wt4=
Subject key identifier: 04:20:3F:52:C5:EB:03:C3:AF:34:CA:6E:54:4C:05:1C:24:CB:69:2F
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 599AB18172ECECDDB41C56D816904941691051BD
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e31362e302f32302d3234203d3e203439393135.roa
Signing time: Wed 25 Feb 2026 15:14:17 +0000
ROA not before: Wed 25 Feb 2026 15:09:17 +0000
ROA not after: Wed 24 Feb 2027 15:14:17 +0000
asID: 49915
IP address blocks: 51.146.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:23:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:9a:b1:81:72:ec:ec:dd:b4:1c:56:d8:16:90:49:41:69:10:51:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Feb 25 15:09:17 2026 GMT
Not After : Feb 24 15:14:17 2027 GMT
Subject: CN=04203F52C5EB03C3AF34CA6E544C051C24CB692F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:51:56:51:95:4f:c8:01:02:01:0e:8b:f4:ce:
9f:52:c8:aa:bf:13:51:35:1d:bf:b7:c0:81:56:f8:
4a:d3:27:f2:eb:ef:bb:0e:a7:32:e6:63:4e:57:3f:
c1:5a:a3:93:c0:7d:b6:10:5e:9b:b2:70:43:01:85:
ae:94:93:fc:42:6e:4b:09:6e:b1:46:ec:53:18:75:
e9:b8:de:cc:e3:a1:6d:f4:4b:77:77:d8:d3:d0:a9:
a9:a8:db:4d:15:85:c9:fe:8d:e7:aa:b6:3a:71:cc:
68:c9:83:e8:27:1f:cf:11:4d:5c:00:c9:14:4e:ea:
24:9b:2f:1e:6e:18:b9:49:70:04:ad:b2:b2:c1:5f:
6c:32:89:f0:fb:85:a6:96:a7:35:2a:3e:2f:63:d4:
d0:9d:61:00:2b:ec:89:f6:40:6d:9d:a0:36:d4:0a:
22:1e:33:f0:e8:48:a7:42:ba:9a:9b:0d:a8:ac:96:
84:d3:e7:88:df:1f:3d:e6:20:3a:05:08:3c:d0:31:
31:86:29:b9:97:bb:bf:95:e2:8d:62:74:6f:e2:38:
25:32:3a:57:0e:95:14:21:3f:53:1a:bf:06:39:84:
40:1e:dd:b8:61:25:d6:5a:2c:5b:f0:3c:37:3e:8d:
a1:35:0b:13:25:77:a3:16:83:00:d2:8d:5a:cc:bd:
39:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:20:3F:52:C5:EB:03:C3:AF:34:CA:6E:54:4C:05:1C:24:CB:69:2F
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e31362e302f32302d3234203d3e203439393135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.16.0/20
Signature Algorithm: sha256WithRSAEncryption
5d:c5:9e:f8:ea:02:ea:1d:f2:1a:fe:8c:fa:84:d0:ac:85:9c:
d5:99:7e:c2:fa:3c:8d:15:81:19:4b:2d:4a:37:b5:34:77:a4:
9b:34:c6:51:63:dc:ca:8a:fc:e4:d9:9a:87:b9:b1:93:ed:30:
03:1d:ee:cb:68:e0:b3:af:fe:b8:a0:24:ca:aa:37:4c:44:17:
d3:3b:55:0f:01:36:c3:7b:47:b3:95:fe:bf:03:c1:29:35:7c:
b7:98:dd:1c:92:6d:ba:d7:c0:c0:19:1d:36:80:0a:ff:0f:01:
5a:b1:3a:30:28:77:c8:3f:0a:59:71:3a:f6:fc:17:a7:a1:9f:
f2:96:2c:9e:e0:ce:45:80:22:76:f7:76:cb:c2:19:fd:14:5c:
e3:46:16:72:b4:99:bc:13:c1:fc:a2:19:55:eb:94:39:19:f8:
ce:5a:ee:b4:7f:62:85:ab:7c:93:26:71:6e:f6:19:4b:e7:40:
5d:ac:2c:c5:3b:91:b7:31:cf:38:cb:f4:15:1b:3c:87:2f:17:
51:b7:ae:24:60:a0:6d:18:a9:85:d9:2c:67:0d:a9:f2:6f:93:
ba:50:d3:6c:8d:a2:a6:cf:44:8f:5f:e6:db:4c:ce:95:bb:25:
31:82:2e:cd:04:ba:58:2a:d3:f2:46:b0:75:c7:df:57:5a:18:
c7:c2:65:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:03:13 2026 by rpki-client