Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3130362e302f32342d3234203d3e2032393134.roa
File: 3136302e32312e3130362e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: qiM/3DbMr1r+301r31/Mh7yuRRCmoJPGrkQ36ZHoP5g=
Subject key identifier: 2C:0B:14:C4:E8:87:59:2D:3E:B9:BB:8C:2E:15:81:85:07:E0:F4:1F
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 0B677DAC728B20AFC4D0D9C17A4BDA88EA64204A
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3130362e302f32342d3234203d3e2032393134.roa
Signing time: Thu 17 Sep 2026 07:34:33 +0000
ROA not before: Thu 17 Sep 2026 07:29:33 +0000
ROA not after: Thu 16 Sep 2027 07:34:33 +0000
asID: 2914
IP address blocks: 160.21.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:59:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:67:7d:ac:72:8b:20:af:c4:d0:d9:c1:7a:4b:da:88:ea:64:20:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Sep 17 07:29:33 2026 GMT
Not After : Sep 16 07:34:33 2027 GMT
Subject: CN=2C0B14C4E887592D3EB9BB8C2E15818507E0F41F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2b:2b:d5:c5:13:1b:c9:48:d2:31:db:99:36:
b4:02:ae:9e:4c:95:48:d8:6a:a3:a5:9c:0c:22:02:
d3:9c:b9:c3:18:12:b0:30:a6:9a:e4:63:50:ba:b7:
7e:79:20:dd:ea:dc:50:fe:f1:44:8a:b5:b4:df:e6:
31:12:31:0a:fb:8c:b8:e2:59:e7:40:f3:53:cc:d8:
c6:7d:a5:e0:32:2f:62:07:d9:45:e5:5a:2b:d2:1e:
93:89:5a:56:8e:dd:82:d7:32:ce:49:d4:dd:9b:e7:
6e:89:78:63:63:96:70:97:e7:c2:80:25:65:43:6c:
5d:39:f9:1a:66:c1:e3:09:43:08:36:79:ee:a8:a6:
ce:3f:cb:95:33:0f:cd:f8:35:64:20:49:8b:e4:6d:
30:cd:a1:02:18:6d:18:66:0f:fa:65:1e:91:b8:24:
aa:5f:f7:9c:42:64:3c:ce:fb:a2:54:93:35:6f:fc:
02:fc:88:f5:b7:06:8e:b9:a6:e2:b8:de:d9:fd:28:
95:e9:b2:0e:47:31:43:ba:91:ee:e8:9f:2b:bd:28:
c3:ab:48:92:e4:a8:b4:81:e6:86:9b:34:63:4d:5a:
72:af:6f:3e:8f:c9:d2:8f:cf:b7:e8:c0:8f:c6:b7:
2d:f8:c0:02:a9:2e:3c:df:05:79:70:5a:41:12:40:
09:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:0B:14:C4:E8:87:59:2D:3E:B9:BB:8C:2E:15:81:85:07:E0:F4:1F
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3130362e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.106.0/24
Signature Algorithm: sha256WithRSAEncryption
66:6f:53:99:80:50:69:0a:57:74:74:ae:f4:1a:26:b7:1c:0c:
c1:12:5b:53:3b:61:c2:2c:ea:da:2a:50:b3:e0:c4:88:27:13:
2e:bc:a7:0a:f9:48:f9:b9:fe:5e:e9:cc:17:d6:66:ef:c6:92:
d0:b3:2a:9e:fb:ad:78:9b:b9:cf:84:5e:4d:09:fd:aa:e2:36:
46:00:2a:93:e4:55:08:8b:3f:89:b7:bb:2e:01:36:80:1d:2a:
22:67:ff:58:97:98:92:79:40:79:22:4c:c2:30:e4:e6:92:ef:
df:de:53:4e:cb:fd:17:43:35:ec:76:67:cf:39:83:71:d0:6a:
3c:f1:48:8f:f5:f6:cd:72:39:5d:58:da:ba:90:e5:f8:41:6f:
c2:9a:22:84:6b:36:40:ff:19:cc:e1:e2:b6:64:2b:8d:4d:d7:
ce:f2:e7:c8:2d:69:26:69:55:94:49:22:5d:08:02:4e:81:58:
ee:ab:81:99:45:05:4f:9a:46:7c:0b:86:48:29:b2:93:ff:8f:
f9:97:f8:cc:db:3e:12:52:d1:26:45:b1:86:4a:89:11:95:09:
b0:fe:0c:19:0e:a7:5f:c2:e3:bf:39:96:5f:d8:a1:97:7a:ae:
bd:d9:5c:75:69:e3:a5:64:f7:49:9c:21:d6:a1:2c:dc:d5:86:
40:46:f8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:47:40 2026 by rpki-client