Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e36302e302f32322d3234203d3e2032383536.roa
File: 35312e3134362e36302e302f32322d3234203d3e2032383536.roa (raw, json)
Hash identifier: 8lv6Et0/N5O+2O7BYdJ/au9Py+C/PlV93AMgHlxH6o8=
Subject key identifier: 9D:EA:D5:23:7E:4D:D3:F3:EA:70:99:73:C7:24:85:41:93:56:62:44
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 0E72C28028EBBAB3A472942300762CD97F4DEAC3
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e36302e302f32322d3234203d3e2032383536.roa
Signing time: Fri 27 Feb 2026 13:11:48 +0000
ROA not before: Fri 27 Feb 2026 13:06:48 +0000
ROA not after: Fri 26 Feb 2027 13:11:48 +0000
asID: 2856
IP address blocks: 51.146.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:72:c2:80:28:eb:ba:b3:a4:72:94:23:00:76:2c:d9:7f:4d:ea:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Feb 27 13:06:48 2026 GMT
Not After : Feb 26 13:11:48 2027 GMT
Subject: CN=9DEAD5237E4DD3F3EA709973C724854193566244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:11:f3:cb:2c:0b:24:14:83:92:ab:ca:f4:94:
f1:ba:ae:df:e6:54:ba:96:89:63:1e:a5:ae:df:1a:
b6:a0:49:d8:2f:87:43:da:59:69:0e:53:b0:c0:9c:
67:ff:f0:71:6b:cd:b4:3d:71:0a:ac:97:88:33:f5:
0a:10:0c:2f:92:7c:a9:00:49:ae:a9:68:e3:e2:40:
72:4f:7f:f9:09:c7:37:8c:85:91:42:b8:b6:05:be:
d2:fc:c4:11:bb:15:1c:fa:bc:9c:5c:0e:38:8e:6f:
18:79:d3:b3:e8:23:1d:7f:2c:a0:c3:76:d7:c3:8a:
ba:c9:c9:57:27:44:d7:c0:9b:87:28:76:5f:21:83:
dd:34:55:74:22:15:d1:09:68:dc:d7:25:08:3d:1a:
a9:36:59:be:c1:e4:29:6c:2f:72:a1:51:07:9a:c1:
91:17:5a:d8:b1:b2:58:af:55:09:45:97:d0:56:39:
d9:9c:89:a0:13:2a:2a:62:74:49:d7:58:b3:20:7d:
b3:b0:57:c0:b7:6c:df:f4:78:b7:e0:52:8c:77:37:
1b:c6:e7:8f:7d:65:fe:9f:6c:8c:e1:84:ee:8a:fc:
93:79:39:e0:81:d7:3e:b2:ce:8b:bc:1a:b9:1b:9f:
30:ef:33:f1:ff:6a:e9:79:c5:3e:16:05:97:09:b3:
29:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:EA:D5:23:7E:4D:D3:F3:EA:70:99:73:C7:24:85:41:93:56:62:44
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e36302e302f32322d3234203d3e2032383536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.60.0/22
Signature Algorithm: sha256WithRSAEncryption
97:f7:8a:3e:ad:61:c4:5d:cd:0c:ed:b0:da:c2:1f:2b:41:1b:
d9:80:ed:a9:7f:d3:8d:98:5f:1d:81:9a:4f:5d:21:65:fc:e6:
16:b9:9f:b7:6f:a9:8e:fb:6a:2f:6d:55:9f:59:f1:91:f9:c3:
6a:69:79:6c:36:89:13:a2:16:f0:c6:ef:49:6f:6a:3e:31:2f:
94:bd:1c:1c:49:9d:b9:e7:2c:ba:bb:a7:f3:ed:d8:c1:94:23:
14:62:59:33:4d:42:05:1a:86:52:08:75:7d:6c:b1:4e:71:23:
c7:98:1c:f0:ea:7b:b2:84:e8:7e:5f:4b:59:6f:9f:07:c9:69:
09:4d:f4:0e:53:14:67:81:ba:52:62:43:53:7c:4d:e7:03:71:
26:a7:11:da:91:06:c7:6f:97:4d:19:db:a7:ec:c6:ec:ee:fa:
f1:c2:1d:65:e3:b6:b5:33:4e:60:96:08:b0:50:b5:d4:58:e2:
51:b0:9f:8e:c3:88:44:ab:70:fe:86:c3:67:db:db:7a:66:11:
5b:db:eb:2f:6f:10:8e:d2:97:f2:9b:89:a6:0e:74:06:11:5b:
3e:9f:37:30:0f:c5:2e:9e:a7:03:0d:90:9b:16:73:a0:b6:6a:
67:46:5a:1b:db:c4:d2:f5:08:80:64:f8:70:17:22:cf:f3:d4:
72:41:df:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:26:52 2026 by rpki-client