Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e34302e302f32322d3234203d3e2032383536.roa
File: 35312e3134362e34302e302f32322d3234203d3e2032383536.roa (raw, json)
Hash identifier: Jppmg/bdiN25OvyihMbxBslMNG6unEkym9fKbL37gCU=
Subject key identifier: CF:C2:EE:F3:BA:28:85:AC:D4:9B:3D:A3:04:01:04:16:B6:3F:68:61
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 74E9E6A967E37AF1052482C32211C1470AD05346
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e34302e302f32322d3234203d3e2032383536.roa
Signing time: Fri 27 Feb 2026 13:11:45 +0000
ROA not before: Fri 27 Feb 2026 13:06:45 +0000
ROA not after: Fri 26 Feb 2027 13:11:45 +0000
asID: 2856
IP address blocks: 51.146.40.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:e9:e6:a9:67:e3:7a:f1:05:24:82:c3:22:11:c1:47:0a:d0:53:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Feb 27 13:06:45 2026 GMT
Not After : Feb 26 13:11:45 2027 GMT
Subject: CN=CFC2EEF3BA2885ACD49B3DA304010416B63F6861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3c:df:50:bc:8b:18:fb:f4:7a:4d:79:a2:3d:
31:18:82:c2:c3:32:9a:c2:22:39:ff:c0:e3:5e:03:
97:5d:5a:71:69:ab:6d:69:a3:d2:45:79:e4:ee:61:
48:ce:30:e0:44:4a:94:1b:91:b2:f3:64:46:68:7d:
d3:7c:9d:00:c1:ea:62:d6:7e:43:dc:79:d5:63:90:
dc:28:b9:1e:f1:b8:90:8f:e7:19:24:0b:7a:d4:8e:
d0:12:ec:6f:5d:40:b5:05:1c:49:20:7e:4d:5e:df:
2c:33:14:b5:1c:79:28:d0:3a:5b:d5:85:8b:45:da:
5e:4d:86:78:6f:28:b5:b8:a0:34:57:36:f7:df:98:
e8:62:3c:c6:13:e4:0b:70:00:ad:19:6f:47:bf:ad:
fb:0a:69:e8:71:ad:f3:9c:08:4b:9d:15:01:df:15:
da:0c:f0:01:ae:93:17:6c:a6:9e:c2:a4:f8:7b:4e:
67:99:0a:c5:7c:d6:ec:64:85:14:c4:d5:0c:41:d6:
e7:f0:35:04:c5:bf:5e:50:82:4a:79:ee:72:9d:6a:
3b:27:f5:5b:df:15:36:46:4e:9a:ac:79:32:2a:42:
d4:ef:1c:a3:84:99:e1:39:61:77:82:4a:5f:e4:ba:
4f:64:73:70:7b:c3:00:45:da:4f:9d:b2:50:27:fd:
b4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C2:EE:F3:BA:28:85:AC:D4:9B:3D:A3:04:01:04:16:B6:3F:68:61
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e34302e302f32322d3234203d3e2032383536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.40.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:b8:1e:69:ad:5b:c0:05:b4:88:28:b7:87:25:51:19:81:eb:
cc:ec:6b:7b:a2:9a:db:ae:be:73:48:fc:a6:2f:50:42:af:2b:
f8:56:e5:3e:3c:53:63:43:87:3c:1d:86:31:59:37:56:a3:98:
c4:59:50:e4:8c:9d:ef:44:6d:9e:b3:14:ee:79:a6:06:6d:bd:
3a:20:66:0d:2d:50:12:73:5d:2a:f1:59:e5:9e:41:cc:ac:e0:
68:37:69:0a:1f:21:97:35:1e:06:f7:04:c9:c5:ef:38:1f:ea:
dd:bc:69:a0:06:80:90:e6:aa:4a:ac:be:73:a3:76:d2:00:04:
63:91:2a:de:f1:cd:7c:99:9d:0b:19:91:26:aa:93:d7:50:6d:
4c:86:7a:e4:f6:36:c6:9c:70:d2:c0:13:82:39:8c:71:7f:7f:
5f:69:04:81:73:b7:35:ae:3f:fd:ee:3e:90:81:52:c2:9f:fe:
7f:5f:ed:34:df:ef:d6:d6:32:25:7d:9b:8d:c5:c2:9a:4e:f5:
11:93:4f:d3:27:6e:06:1e:72:21:a4:3f:ff:af:ef:4e:dd:0e:
e5:2d:dc:72:dd:7c:de:f7:ca:89:41:97:0b:90:3d:77:2b:03:
2f:cc:ae:00:ef:95:e3:11:ad:4f:01:40:9e:b9:8d:b2:bd:21:
b2:3f:e7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:26:50 2026 by rpki-client