Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e36342e302f31382d3234203d3e20323135393335.roa
File: 35312e3134362e36342e302f31382d3234203d3e20323135393335.roa (raw, json)
Hash identifier: B7EwR7GIEg4Sqvhr+7ez1PNatWtvwrkk0y4j5GjDIRw=
Subject key identifier: DF:AF:BA:24:2B:E8:78:ED:6A:76:B7:B7:56:57:D3:44:5F:CC:3C:C2
Certificate issuer: /CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Certificate serial: 5502C5D8457E12329431FD637D81B4AE0C950304
Authority key identifier: 0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e36342e302f31382d3234203d3e20323135393335.roa
Signing time: Thu 26 Feb 2026 10:55:28 +0000
ROA not before: Thu 26 Feb 2026 10:50:28 +0000
ROA not after: Thu 25 Feb 2027 10:55:28 +0000
asID: 215935
IP address blocks: 51.146.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.mft
rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:02:c5:d8:45:7e:12:32:94:31:fd:63:7d:81:b4:ae:0c:95:03:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e20ccf5083a63b9f5887e3ea39d04e2d62b3da5
Validity
Not Before: Feb 26 10:50:28 2026 GMT
Not After : Feb 25 10:55:28 2027 GMT
Subject: CN=DFAFBA242BE878ED6A76B7B75657D3445FCC3CC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7b:33:48:d4:b9:60:85:0a:7c:c3:1a:f7:2b:
57:3a:fb:6b:aa:43:e6:3c:6b:74:bf:0a:21:8f:58:
ef:b5:4b:02:bf:0c:50:c1:3f:91:30:9b:d5:d6:f7:
05:d1:d7:c1:33:b5:50:07:03:5b:75:c5:6e:13:b9:
21:1f:ab:cd:ab:03:ce:40:8b:a7:d8:58:7d:ba:75:
54:a0:8e:c1:5a:4d:61:92:f2:f6:ab:5a:85:3d:16:
92:87:f9:b5:b1:e8:ec:e2:71:4a:48:a6:4c:88:36:
51:04:0b:32:26:92:eb:6f:51:f2:f9:bf:82:48:c3:
0c:2a:5f:69:5c:f1:73:fd:7a:ca:0a:c4:b0:d8:06:
0f:46:ac:28:3d:ce:50:f8:e4:2d:69:11:5f:20:62:
db:6e:b9:73:cd:65:6c:a4:f6:b2:99:e0:e9:3b:e5:
3b:1d:05:08:23:d3:b6:a3:ef:e9:a5:5a:8a:60:09:
79:ae:c5:27:03:7c:90:fe:55:8d:a0:cd:92:8c:f4:
e6:b9:f3:06:31:a4:59:11:43:1b:2d:c1:84:16:90:
8a:57:7e:e9:90:d4:1a:fc:22:02:50:ba:46:5b:e9:
93:11:2e:40:d2:18:69:3c:de:e7:10:a3:ad:e2:33:
11:d5:47:0c:b7:20:bf:23:3e:f0:9e:18:af:cb:5e:
95:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:AF:BA:24:2B:E8:78:ED:6A:76:B7:B7:56:57:D3:44:5F:CC:3C:C2
X509v3 Authority Key Identifier:
keyid:0E:20:CC:F5:08:3A:63:B9:F5:88:7E:3E:A3:9D:04:E2:D6:2B:3D:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/0E20CCF5083A63B9F5887E3EA39D04E2D62B3DA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiDM9Qg6Y7n1iH4-o50E4tYrPaU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/96e4ac86-1803-494d-8a7b-c051a6310752/0/35312e3134362e36342e302f31382d3234203d3e20323135393335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.146.64.0/18
Signature Algorithm: sha256WithRSAEncryption
9b:95:05:18:c1:4a:9f:6a:2a:70:65:17:96:ed:e1:1c:c9:e9:
8c:35:41:eb:36:de:e3:07:07:d1:08:f1:d7:f1:d3:8f:82:47:
90:9a:81:58:5d:da:08:53:04:88:0b:7e:76:41:6c:0c:63:32:
90:9b:56:68:62:81:5c:c4:2c:1c:69:03:ac:8a:43:13:75:47:
5f:41:64:f1:3e:c6:fa:fd:26:eb:43:22:dc:94:09:69:d7:1c:
b5:05:ed:54:bb:59:16:2c:de:d7:e1:db:4b:24:cb:8e:35:07:
8b:c5:64:ca:f6:4b:e1:bd:34:3e:ac:f1:e3:f3:e0:03:f7:49:
03:d1:a6:cd:08:cb:a1:2b:c8:6d:c7:ea:f2:85:0d:21:e5:1c:
27:5c:0c:5e:bc:05:e8:44:14:df:9e:18:e4:b8:05:69:83:29:
62:8d:ff:46:db:ab:73:92:96:f3:97:90:e8:a7:0c:f5:4d:6d:
4d:e4:59:2f:d3:51:fa:31:96:a5:fc:fe:7f:f7:cd:33:e4:25:
c0:23:0d:90:df:9d:d8:66:3e:18:a9:66:51:24:b0:3b:8a:08:
a6:18:b7:75:72:2e:d1:a6:b4:eb:5a:3a:d4:98:8e:dd:6e:4e:
6b:6f:c4:8f:a1:17:77:50:60:23:f5:e6:fb:2a:f2:6a:c4:9f:
ca:84:a2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:20:11 2026 by rpki-client