Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3130342e302f32342d3234203d3e203235313938.roa
File: 3136302e32312e3130342e302f32342d3234203d3e203235313938.roa (raw, json)
Hash identifier: S6xGMwCsjyeeqaP0dy9z4ToeziBVr+xp/d4W12Cdf3s=
Subject key identifier: F6:FD:03:EF:6C:FA:5C:60:8E:95:32:E6:85:5A:6F:B0:B2:A6:DF:27
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 208634622765DECC0D2458528C359FBBF9FC1085
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3130342e302f32342d3234203d3e203235313938.roa
Signing time: Mon 14 Sep 2026 12:05:43 +0000
ROA not before: Mon 14 Sep 2026 12:00:43 +0000
ROA not after: Mon 13 Sep 2027 12:05:43 +0000
asID: 25198
IP address blocks: 160.21.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:59:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:86:34:62:27:65:de:cc:0d:24:58:52:8c:35:9f:bb:f9:fc:10:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Sep 14 12:00:43 2026 GMT
Not After : Sep 13 12:05:43 2027 GMT
Subject: CN=F6FD03EF6CFA5C608E9532E6855A6FB0B2A6DF27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:77:8c:ab:c7:70:65:7f:55:b6:d6:8c:3d:7b:
b0:f4:43:c9:c6:81:6f:74:79:72:ce:31:ec:c5:7f:
27:70:ba:ec:fb:8c:71:35:1b:1b:d5:f7:a2:96:1b:
0c:35:9b:8d:69:23:b1:ff:4d:aa:33:cb:e3:f7:1a:
8a:e1:0b:cd:a5:90:f4:69:0d:5a:0b:54:ed:21:af:
2d:ee:ee:7e:e1:20:40:d0:8d:8e:40:e0:5c:e3:18:
35:28:b3:85:ab:9e:98:7b:e1:e8:43:49:66:38:ec:
04:c6:e5:c9:0f:92:4c:98:42:9d:73:9a:1a:df:fe:
f6:56:ab:5a:eb:41:d4:62:96:ff:c6:7f:98:36:46:
38:26:84:3b:96:71:10:d5:53:82:8e:18:6c:40:26:
8b:a0:0e:c8:05:23:18:0b:ed:81:72:26:dc:2d:e1:
e8:ee:46:b3:d2:2a:f8:11:96:b8:31:9e:17:07:88:
df:0a:71:47:ff:41:51:e9:44:1a:b4:a1:cf:82:b3:
78:37:f4:e0:14:d3:d4:3b:ce:dd:8d:78:70:c1:69:
36:1f:8d:6d:59:90:da:c2:0e:1c:5c:c1:7f:6e:8a:
42:45:5b:c2:86:0a:68:0b:3b:b7:a3:ad:fd:6c:34:
0c:10:52:7f:ed:ad:3a:00:7f:3f:1b:bf:c0:62:1e:
66:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:FD:03:EF:6C:FA:5C:60:8E:95:32:E6:85:5A:6F:B0:B2:A6:DF:27
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3130342e302f32342d3234203d3e203235313938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.104.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:7c:be:de:a6:14:b9:a7:41:e3:9d:78:aa:8f:b0:34:66:74:
e7:60:66:aa:5d:7f:ff:fb:3c:e3:92:0d:49:09:09:1f:8c:b4:
15:e7:ba:ce:d4:2d:bf:00:b7:3a:c5:83:64:8e:49:ca:cc:b7:
f4:65:62:80:60:aa:3c:c7:2c:3b:9e:68:02:56:63:d9:a8:86:
38:8a:b3:67:07:45:f5:4d:5e:5f:b2:20:23:ee:1d:c1:e1:b1:
8c:ab:de:f5:75:d1:8c:ee:79:f4:01:9a:b1:c2:bd:09:98:b7:
72:1a:b6:42:e7:81:a8:f0:0b:e9:c5:85:2c:25:c0:e4:54:24:
40:f7:7f:19:33:29:4c:b7:4b:bb:7a:c1:60:70:8d:6b:d4:b1:
6a:f9:ec:25:a2:dd:2f:b9:67:90:d2:09:d3:0a:d2:94:e6:aa:
58:cf:eb:a9:d2:0f:5d:0b:cc:55:b3:2d:b0:c8:04:d9:c7:14:
ae:cb:5c:d0:e8:b2:50:d2:f1:48:1a:d8:34:38:ee:6d:ed:15:
c7:d5:33:59:da:54:8e:5b:99:ad:88:f8:59:5f:f4:b3:41:46:
5e:d8:d4:07:c8:33:c7:b6:53:05:c0:3d:0c:4e:e8:82:fe:e8:
b1:4d:e8:18:6c:89:5e:f4:ed:62:5c:d8:f6:02:0d:42:0c:4e:
94:41:9c:1c
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUIIY0Yidl3swNJFhSjDWfu/n8EIUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRiZTRkODdmY2JlNmNjYTdjY2U1YjMyNTRmNjk2ZGJi
ZmNmMGU1ZDAeFw0yNjA5MTQxMjAwNDNaFw0yNzA5MTMxMjA1NDNaMDMxMTAvBgNV
BAMTKEY2RkQwM0VGNkNGQTVDNjA4RTk1MzJFNjg1NUE2RkIwQjJBNkRGMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5d4yrx3Blf1W21ow9e7D0Q8nG
gW90eXLOMezFfydwuuz7jHE1GxvV96KWGww1m41pI7H/Taozy+P3GorhC82lkPRp
DVoLVO0hry3u7n7hIEDQjY5A4FzjGDUos4Wrnph74ehDSWY47ATG5ckPkkyYQp1z
mhrf/vZWq1rrQdRilv/Gf5g2RjgmhDuWcRDVU4KOGGxAJougDsgFIxgL7YFyJtwt
4ejuRrPSKvgRlrgxnhcHiN8KcUf/QVHpRBq0oc+Cs3g39OAU09Q7zt2NeHDBaTYf
jW1ZkNrCDhxcwX9uikJFW8KGCmgLO7ejrf1sNAwQUn/trToAfz8bv8BiHmZxAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU9v0D72z6XGCOlTLmhVpvsLKm3ycwHwYDVR0j
BBgwFoAUVL5Nh/y+bMp8zlsyVPaW27/PDl0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTc3NTU2NjctYjg0Yi00NTdhLWE1OGMtYjVlZGMxZjVl
OGUwLzAvNTRCRTREODdGQ0JFNkNDQTdDQ0U1QjMyNTRGNjk2REJCRkNGMEU1RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1ZMNU5oX3ktYk1wOHpsc3lWUGFXMjdf
UERsMC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNTc3NTU2Njct
Yjg0Yi00NTdhLWE1OGMtYjVlZGMxZjVlOGUwLzAvMzEzNjMwMmUzMjMxMmUzMTMw
MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM1MzEzOTM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
oBVoMA0GCSqGSIb3DQEBCwUAA4IBAQCKfL7ephS5p0HjnXiqj7A0ZnTnYGaqXX//
+zzjkg1JCQkfjLQV57rO1C2/ALc6xYNkjknKzLf0ZWKAYKo8xyw7nmgCVmPZqIY4
irNnB0X1TV5fsiAj7h3B4bGMq971ddGM7nn0AZqxwr0JmLdyGrZC54Go8AvpxYUs
JcDkVCRA938ZMylMt0u7esFgcI1r1LFq+ewlot0vuWeQ0gnTCtKU5qpYz+up0g9d
C8xVsy2wyATZxxSuy1zQ6LJQ0vFIGtg0OO5t7RXH1TNZ2lSOW5mtiPhZX/SzQUZe
2NQHyDPHtlMFwD0MTuiC/uixTegYbIle9O1iXNj2Ag1CDE6UQZwc
-----END CERTIFICATE-----
Generated at Mon Sep 21 18:01:08 2026 by rpki-client