Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3130382e302f32342d3234203d3e20323138373939.roa
File: 3136302e32312e3130382e302f32342d3234203d3e20323138373939.roa (raw, json)
Hash identifier: J96Faos+pXRJw6z4z0LA1RJC+HDI8ETGZqrMP71Xcks=
Subject key identifier: 0F:A8:7C:20:07:16:95:55:48:C1:B1:8F:AB:26:FE:58:CB:C7:50:9E
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 124C3811281671FC83D5F7819A181EE05C42EE69
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3130382e302f32342d3234203d3e20323138373939.roa
Signing time: Sun 13 Sep 2026 21:42:17 +0000
ROA not before: Sun 13 Sep 2026 21:37:17 +0000
ROA not after: Sun 12 Sep 2027 21:42:17 +0000
asID: 218799
IP address blocks: 160.21.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:59:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:4c:38:11:28:16:71:fc:83:d5:f7:81:9a:18:1e:e0:5c:42:ee:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Sep 13 21:37:17 2026 GMT
Not After : Sep 12 21:42:17 2027 GMT
Subject: CN=0FA87C200716955548C1B18FAB26FE58CBC7509E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ad:5b:82:f2:5c:8a:88:ec:60:f3:ff:ce:60:
6f:94:4b:f5:23:2b:26:0c:e0:46:7d:2f:f2:76:3e:
3c:f4:b8:7c:f2:84:c9:bc:a8:16:19:5e:20:c5:b4:
84:3a:db:67:e3:b8:cf:c3:6a:fc:a4:e7:71:67:e5:
18:00:22:c3:a0:38:82:35:f3:cf:07:a4:e7:21:f4:
06:d9:09:87:3f:b4:3e:b7:5c:2d:6d:26:8f:bf:5b:
d9:b4:50:56:7a:7a:fb:af:c5:b6:bb:5e:2b:c4:c4:
e8:d9:af:a4:35:91:cf:13:f2:4c:02:b6:5a:9a:f3:
44:30:1a:a6:f3:fb:40:70:c8:fa:5e:e5:04:05:f1:
d0:df:ba:4d:af:b8:81:9f:64:22:b3:d0:81:23:96:
3f:a1:b7:32:a9:14:fd:c3:89:73:0c:e3:88:86:d7:
63:7b:f9:91:33:3c:b4:22:d6:db:a1:a6:e8:2d:7f:
fc:dc:7d:37:e3:b0:41:4e:13:36:c3:2b:f9:db:2e:
9c:cd:89:0e:e7:ec:4b:4f:79:3f:92:4e:0a:3e:7b:
d7:5a:c5:50:d5:9d:e3:0f:f2:0b:92:b6:cb:00:1b:
dd:d0:a7:7a:01:8c:dd:f0:d8:ec:98:d3:c8:61:6e:
cc:e5:0d:0e:d8:4a:97:3a:a7:ed:f2:5a:43:45:54:
a3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A8:7C:20:07:16:95:55:48:C1:B1:8F:AB:26:FE:58:CB:C7:50:9E
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3130382e302f32342d3234203d3e20323138373939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.108.0/24
Signature Algorithm: sha256WithRSAEncryption
61:d0:ce:3d:f1:4c:f5:bc:16:36:02:6f:e8:5d:97:78:fe:d4:
80:e6:85:e2:16:90:27:36:fa:a2:e3:ae:84:94:ac:b4:b2:38:
07:c9:61:78:f0:30:19:ea:2c:45:2f:e8:ba:7c:17:68:c7:d4:
b0:e6:d4:7f:0f:95:0f:35:9f:18:80:41:e7:fc:10:54:62:e0:
56:b0:57:85:10:7d:d3:a6:ad:16:f3:3a:21:31:16:13:d6:85:
67:49:cf:43:90:d3:2b:09:55:d3:a4:05:ec:5e:d8:bd:36:30:
34:e5:36:63:b7:f6:b9:e9:6d:81:76:18:83:42:00:6a:f4:84:
fb:fc:ee:e9:0c:31:d4:06:27:84:00:1f:b6:45:79:e0:1a:3e:
2b:bd:18:bf:10:af:50:b7:ff:04:d0:1e:ac:ce:0e:3c:0c:7e:
07:1f:a8:29:dd:bd:f6:c7:32:f4:9b:58:75:8d:03:d9:74:e5:
22:f9:94:1b:c3:97:00:e2:92:e2:4f:db:c9:e4:72:2c:94:a6:
f0:a4:2b:43:85:7a:ba:4c:30:bf:63:00:96:7a:0e:26:6c:57:
42:61:9c:9f:32:26:46:ea:b4:2c:71:f4:85:ac:c8:33:29:64:
42:4d:12:62:ba:e8:ff:a2:57:e9:ff:b8:fc:4a:50:b7:2a:45:
59:51:7d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:15:18 2026 by rpki-client