Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3131302e302f32342d3234203d3e20343032323838.roa
File: 3136302e32312e3131302e302f32342d3234203d3e20343032323838.roa (raw, json)
Hash identifier: 0hiO4GcfCADy7a7v8S8zIRcslaLitkyScnjm5X6LpTY=
Subject key identifier: 86:08:EB:18:1B:43:38:D6:CE:40:15:23:4B:C6:12:D3:5B:4E:4D:2F
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 1D4763A075C9B94839D9760F73A462D1CB0A1555
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3131302e302f32342d3234203d3e20343032323838.roa
Signing time: Mon 14 Sep 2026 16:25:28 +0000
ROA not before: Mon 14 Sep 2026 16:20:28 +0000
ROA not after: Mon 13 Sep 2027 16:25:28 +0000
asID: 402288
IP address blocks: 160.21.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:59:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:47:63:a0:75:c9:b9:48:39:d9:76:0f:73:a4:62:d1:cb:0a:15:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Sep 14 16:20:28 2026 GMT
Not After : Sep 13 16:25:28 2027 GMT
Subject: CN=8608EB181B4338D6CE4015234BC612D35B4E4D2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:94:49:db:f6:6d:11:00:4d:3b:32:1b:f0:b5:
d5:0e:41:6d:0c:68:de:16:9c:71:f4:99:e3:b8:d0:
ce:7a:e2:94:af:a0:22:4f:ab:40:f0:bb:6f:51:bb:
cf:93:d5:7b:72:8e:39:bb:5e:1b:19:1e:e3:75:83:
6b:4b:9f:f6:9f:06:be:e7:46:c7:f2:17:67:8b:70:
b4:62:cb:36:c9:b0:e5:65:5e:fc:23:a6:06:f1:52:
42:ad:e3:d8:dd:94:8e:47:d5:64:de:b5:a6:74:b1:
79:c9:ad:da:70:85:01:42:8c:c1:bd:20:da:08:3d:
58:a4:aa:cf:da:b2:ca:05:f3:ad:99:46:c8:22:2e:
fd:92:48:69:50:61:c6:45:32:ce:6a:04:29:07:f9:
a4:bc:af:f8:5e:a2:a3:4e:cd:b2:81:a5:fc:21:84:
01:06:9a:65:0f:7d:9c:5e:ce:c4:1a:59:33:c0:67:
6a:bd:89:80:17:76:bc:aa:e5:fb:f4:ee:aa:c5:3b:
9b:9e:dd:c9:ac:31:5c:01:21:df:de:e0:b0:ff:f5:
e8:e1:c3:1c:0e:b4:81:1b:81:73:ae:fd:61:fe:c6:
29:da:3e:52:54:54:a7:88:a5:f7:f8:57:c4:02:88:
47:45:6b:53:4a:31:8d:75:73:9a:64:94:ba:1b:b2:
0c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:08:EB:18:1B:43:38:D6:CE:40:15:23:4B:C6:12:D3:5B:4E:4D:2F
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3131302e302f32342d3234203d3e20343032323838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.110.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:7a:7c:3c:2a:af:dc:50:c1:a4:58:5a:0d:1d:28:1e:76:3d:
af:09:8d:c6:8d:df:4c:07:96:5b:62:03:ea:f9:73:1d:4b:b1:
f1:d0:5a:5c:90:27:18:9d:c0:a0:ad:4d:bb:26:4c:92:6e:8c:
8f:79:db:12:20:01:d0:e0:44:27:8e:75:60:81:c3:61:80:9b:
bd:34:03:3a:ce:a2:47:76:f1:9c:df:2f:2d:53:7d:a1:47:11:
f5:1b:95:07:17:4e:d4:5c:15:45:b8:26:a6:8b:7c:3a:55:47:
4a:f0:d9:a4:fc:d8:7d:73:84:8f:2c:79:90:47:20:ce:38:bd:
d3:0b:58:74:fe:f5:4b:f5:35:28:93:17:df:98:ec:73:52:e0:
2a:2f:e6:94:41:45:93:eb:8c:97:8b:74:84:c8:80:6b:69:1a:
2d:3b:46:d9:84:06:4f:cb:f1:54:82:06:36:ed:cf:14:0e:a2:
e2:2a:78:5b:02:94:c3:eb:c4:74:99:5b:5d:b9:2e:bf:c2:2a:
fe:d4:32:49:f0:ef:be:be:bf:4b:a3:9f:3a:ba:3b:e2:b9:0d:
a4:35:5c:a7:a1:74:db:4a:c8:29:d5:d9:f1:36:ea:0e:62:1f:
da:5c:79:94:e0:64:65:1d:f6:69:81:af:78:36:5f:6f:89:57:
2a:96:e6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:47:56 2026 by rpki-client