Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3130392e302f32342d3234203d3e2032393134.roa
File: 3136302e32312e3130392e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: XrsFrxeeV3Tz3ZcEoksbIf0bRFeZEX79fyrmKYVX55o=
Subject key identifier: 7A:13:AC:5E:B8:D8:EA:12:4A:3C:F4:D7:BC:2F:22:41:89:5B:0C:F3
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 1F87B1EF6102465882CF8DECE554F3762ED41F96
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3130392e302f32342d3234203d3e2032393134.roa
Signing time: Thu 17 Sep 2026 07:34:31 +0000
ROA not before: Thu 17 Sep 2026 07:29:31 +0000
ROA not after: Thu 16 Sep 2027 07:34:31 +0000
asID: 2914
IP address blocks: 160.21.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:05:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:87:b1:ef:61:02:46:58:82:cf:8d:ec:e5:54:f3:76:2e:d4:1f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Sep 17 07:29:31 2026 GMT
Not After : Sep 16 07:34:31 2027 GMT
Subject: CN=7A13AC5EB8D8EA124A3CF4D7BC2F2241895B0CF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fc:b1:c9:b0:02:c0:a7:3e:1f:8b:15:50:be:
9b:78:29:41:ed:50:f6:00:e6:8e:40:af:b0:26:52:
63:54:60:4a:da:9f:aa:25:74:81:3c:e2:e9:f9:32:
73:45:87:a5:2c:46:e9:27:a0:21:cf:ee:33:27:aa:
f3:ad:0d:fa:62:5b:e1:16:18:68:0d:99:91:46:dd:
7a:7d:36:13:c9:37:6d:81:7c:fe:5e:79:c1:e8:b2:
ee:92:47:04:27:29:3a:79:28:13:ed:d9:67:31:e1:
1a:0d:47:4f:4e:c6:7e:df:7c:13:14:80:0e:96:b7:
4c:1e:82:98:54:dc:82:30:12:13:07:21:5b:05:9a:
0a:69:a8:6d:d0:d2:35:28:10:b0:53:66:06:a3:80:
00:7e:15:2f:fa:f8:64:6f:61:07:34:0a:11:4c:a4:
aa:86:eb:6e:72:31:f1:3a:cb:72:fd:0d:d1:da:91:
5e:38:7e:0d:b2:b4:2f:98:91:5d:91:1e:ba:39:d0:
90:66:69:e4:68:ac:0b:b0:db:43:7e:1b:09:57:e5:
3d:99:ee:4b:ba:af:09:43:a1:9a:aa:46:f2:c9:83:
db:ee:a2:7f:57:89:9f:eb:21:57:a5:a3:16:bb:dc:
dd:18:15:89:b3:1c:5f:33:ac:aa:7a:f3:17:ef:2c:
b9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:13:AC:5E:B8:D8:EA:12:4A:3C:F4:D7:BC:2F:22:41:89:5B:0C:F3
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3130392e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.109.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:1b:1b:b2:6e:37:c2:3c:34:0d:e5:a1:6c:10:be:73:4f:7f:
93:47:67:ba:45:eb:2b:22:c4:28:3e:94:de:51:9d:9e:e7:b5:
9d:a3:2e:1c:76:0f:a9:78:74:11:64:20:3d:b8:42:be:43:61:
92:09:8b:8e:77:13:48:bc:c7:54:69:78:3d:54:d4:84:ad:e0:
6d:ea:7d:99:cb:9e:81:98:63:9c:1c:0a:db:86:b5:e4:27:da:
ae:37:7d:88:5a:1f:69:b7:45:3c:03:11:d1:a8:27:9f:be:b7:
0b:55:b6:a2:79:92:c6:7f:04:7c:f5:1a:55:1a:39:3d:58:74:
d7:b2:4a:83:b1:bc:72:be:02:6e:fc:4b:85:bc:7c:96:7b:ca:
11:c2:8f:ed:77:78:77:92:e3:b5:82:e7:43:cc:f0:19:18:14:
c1:7f:58:d2:7a:5e:59:70:17:2d:31:74:49:53:cb:4d:ee:5a:
73:c0:da:d9:03:09:d4:a7:d6:d6:cd:70:b3:3c:d7:8e:4c:e3:
e7:a4:a6:d1:4e:fe:e7:f2:b9:99:34:5d:06:db:da:83:7e:d9:
14:c5:f6:39:a8:33:68:86:d6:45:ea:18:1c:13:03:55:26:39:
b3:2e:db:63:dd:8c:78:e4:50:af:fd:47:d1:06:b6:8d:a8:e1:
4e:cb:be:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:28:56 2026 by rpki-client