Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3131312e302f32342d3234203d3e2032393134.roa
File: 3136302e32312e3131312e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: GyjPwSFrdoopJRvokRdx678TMATIrQhS7o01L88S6LM=
Subject key identifier: EA:A2:FF:96:EA:CA:F8:D6:8B:66:DD:B3:6C:4A:15:13:D5:26:4F:9F
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 064FD338997A8AFAB3986F300302A17FF8E6F476
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3131312e302f32342d3234203d3e2032393134.roa
Signing time: Thu 17 Sep 2026 07:34:34 +0000
ROA not before: Thu 17 Sep 2026 07:29:34 +0000
ROA not after: Thu 16 Sep 2027 07:34:34 +0000
asID: 2914
IP address blocks: 160.21.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:4f:d3:38:99:7a:8a:fa:b3:98:6f:30:03:02:a1:7f:f8:e6:f4:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Sep 17 07:29:34 2026 GMT
Not After : Sep 16 07:34:34 2027 GMT
Subject: CN=EAA2FF96EACAF8D68B66DDB36C4A1513D5264F9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5a:52:1c:ae:88:ef:fc:52:e8:48:68:9b:4f:
f1:51:62:10:06:68:0c:cb:44:53:17:8c:30:ce:97:
ae:dc:74:0a:3b:78:14:1d:f6:e0:37:b9:6f:f2:03:
50:d3:e8:6c:40:d0:f8:4d:bf:93:cc:8e:94:4e:1e:
52:70:34:16:8f:d0:c8:57:b6:1b:02:09:26:20:86:
6f:26:03:6d:48:fc:2e:59:be:fb:3c:a9:b0:06:31:
51:6d:28:a0:ee:9a:25:03:25:ff:1d:7a:80:7d:ac:
11:c9:e5:1b:e5:11:3f:73:be:52:fa:a2:94:d2:a4:
fc:e3:53:44:81:58:4e:90:4a:b5:33:e9:d0:58:d6:
3e:8c:e2:ae:7f:85:71:cf:72:5a:2e:77:9c:ef:c1:
3c:84:9d:ab:94:6e:83:09:d0:99:a1:f5:9d:e0:b2:
29:d3:ed:75:15:02:84:9a:11:ed:a3:65:6a:e9:20:
70:98:8b:8f:20:6f:07:13:08:80:a5:45:cf:94:e2:
1b:d6:bf:c9:88:14:70:41:a3:45:11:97:29:f0:5f:
c1:37:64:ea:a4:ae:be:5b:74:21:b2:bd:91:77:62:
a5:e8:e4:0e:63:8e:a0:2f:5a:67:bd:08:2e:2a:9f:
45:34:e5:60:6b:8b:be:f6:c1:ad:c5:20:e1:c3:07:
4c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A2:FF:96:EA:CA:F8:D6:8B:66:DD:B3:6C:4A:15:13:D5:26:4F:9F
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3131312e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.111.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:e6:95:a2:a6:1b:83:ae:54:6d:98:c1:ba:7f:38:f8:0a:c4:
07:0d:13:9e:9a:77:cb:cc:8f:4a:3b:09:1c:2c:e3:e2:2a:c1:
e4:4c:4d:84:c8:bf:bb:2f:a4:35:23:7e:2c:be:a5:2f:05:d8:
aa:a8:2b:3d:53:07:96:37:b5:56:4e:a9:73:90:71:ca:ba:b8:
cb:9f:a4:48:27:e2:76:53:cf:98:b5:34:ef:e3:31:d4:4d:24:
49:35:5e:43:1d:76:f0:bf:0f:4d:e9:92:6e:9c:0f:5c:e8:7f:
99:85:b8:d1:f7:39:47:03:99:c5:c3:94:65:e9:6f:96:3b:43:
e1:46:a7:88:e5:1b:0d:52:92:fd:27:00:9b:c9:34:13:95:60:
48:34:cd:3e:c1:15:54:b7:d4:41:e0:a8:5d:77:ab:d1:83:3b:
4c:8a:aa:11:dc:9c:0b:c3:b6:cf:df:d6:d8:30:5d:e0:fa:a1:
b9:68:78:3d:3b:ad:80:ad:8d:8f:46:d6:64:17:dd:15:51:f8:
44:dd:bd:12:f1:48:6b:b8:ab:17:da:81:84:dc:cf:38:06:f2:
6f:61:50:d5:a7:67:07:26:a2:43:9e:cd:eb:b4:cb:15:01:02:
ce:fb:32:5d:cf:aa:39:19:30:24:ab:cb:1a:b0:87:78:96:99:
d3:9b:09:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:18:26 2026 by rpki-client