Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3130352e302f32342d3234203d3e20323134343833.roa
File: 3136302e32312e3130352e302f32342d3234203d3e20323134343833.roa (raw, json)
Hash identifier: CdjHwOr3p2K1qTljfayrIgkA4rb35AIgA1L/esmDeJg=
Subject key identifier: D6:A0:74:CA:72:16:AA:92:C5:5D:D3:DC:52:DB:AE:6E:96:1F:20:18
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 59F2E27DF0F3B6E1E5555B62AF77A726ABEC70C9
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3130352e302f32342d3234203d3e20323134343833.roa
Signing time: Tue 15 Sep 2026 23:05:14 +0000
ROA not before: Tue 15 Sep 2026 23:00:14 +0000
ROA not after: Tue 14 Sep 2027 23:05:14 +0000
asID: 214483
IP address blocks: 160.21.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:05:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:f2:e2:7d:f0:f3:b6:e1:e5:55:5b:62:af:77:a7:26:ab:ec:70:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Sep 15 23:00:14 2026 GMT
Not After : Sep 14 23:05:14 2027 GMT
Subject: CN=D6A074CA7216AA92C55DD3DC52DBAE6E961F2018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d8:6f:44:0d:4e:b3:d9:9d:5c:6b:1e:e1:7a:
ad:d7:0d:8c:99:d6:fa:f8:88:9a:24:9d:89:db:4e:
f4:2e:45:e6:00:af:e5:01:4d:c2:65:3d:e0:02:d6:
b9:31:ff:a6:77:c0:ec:1a:bf:c7:cd:54:96:8a:43:
0c:d8:1b:f6:86:a5:52:6b:4b:6e:55:a8:f2:d3:24:
23:21:04:a2:af:44:bf:c4:81:57:29:c4:c6:f2:cd:
e5:80:48:1f:12:30:c9:1d:88:e1:60:0f:65:85:e4:
8d:7c:7e:15:c3:94:5e:c7:15:e5:fb:ed:a3:45:b8:
a0:ff:af:e4:a6:5c:42:0f:56:91:54:9b:d2:b3:aa:
19:12:8c:5a:a7:d0:69:53:e0:d5:d1:2c:00:a1:5f:
51:40:3d:45:e6:96:c8:b8:f0:40:a2:0c:2a:f5:0b:
72:97:e4:6c:f3:5a:32:43:92:5d:d5:9f:68:00:cb:
4f:f1:f5:d9:e4:e0:40:db:5e:f5:82:d3:be:17:4c:
56:61:aa:ab:2f:1b:e0:f1:ed:48:3a:e7:2b:39:b2:
75:75:f3:3a:aa:24:8a:e2:51:79:b4:6a:fe:c3:fd:
af:ea:17:83:b0:ea:02:3c:e2:f5:d1:85:95:c6:c7:
35:80:2e:ac:cb:b1:38:12:8f:11:10:98:d4:8c:c6:
58:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A0:74:CA:72:16:AA:92:C5:5D:D3:DC:52:DB:AE:6E:96:1F:20:18
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3130352e302f32342d3234203d3e20323134343833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.105.0/24
Signature Algorithm: sha256WithRSAEncryption
93:1e:bf:18:e9:6a:1e:d3:ed:fb:f1:55:02:f5:8e:51:dd:81:
2c:b1:91:f4:fe:8b:ed:8e:97:98:6c:9e:f5:0f:a0:a8:5c:8b:
69:e0:c3:17:0a:24:c3:e8:c7:1c:36:a8:c8:be:38:75:5c:be:
09:fe:34:f3:95:d3:1c:c6:9f:8e:18:52:43:07:29:6b:56:17:
3d:be:08:07:87:a8:89:ea:4d:70:b7:2c:85:e9:b6:e2:07:c8:
ec:cf:f7:b6:f1:49:87:19:16:2a:c9:f5:6a:14:f7:2b:fb:0a:
e0:ad:b2:a2:c6:b6:a0:25:46:16:17:bd:4e:6b:df:b7:60:40:
84:75:aa:4d:db:62:7e:60:08:9c:53:de:16:66:75:e6:8d:4d:
d5:c8:05:f4:70:01:64:30:95:a1:c9:22:d4:b4:70:2c:53:c4:
ba:b4:74:26:19:f8:ac:29:d4:30:af:37:3a:ff:d7:a5:e2:ee:
ca:8f:d9:a3:a8:95:6c:b3:3a:53:1b:75:ba:d8:52:92:9b:8d:
5d:89:f4:db:8a:de:1c:23:b6:a0:a3:67:e0:fd:11:bf:39:89:
2a:8c:a8:a2:5f:f5:3d:6b:da:c5:2d:25:55:f4:b8:6d:15:42:
de:f9:8d:eb:22:a4:44:d4:2f:94:13:91:0c:92:77:d4:d4:71:
aa:aa:03:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:06:11 2026 by rpki-client