Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3131332e302f32342d3234203d3e2032393134.roa
File: 3136302e32312e3131332e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: wFCZOZDM7LUoME747p51CL2wcl35TPAOPIAR9e9Az3Q=
Subject key identifier: BC:FA:C1:B9:F6:D0:79:77:5D:E5:9F:D3:8A:03:56:9A:6B:BE:5B:C6
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 75A1456F83C9E13224F78F83C893FF5925F8E532
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3131332e302f32342d3234203d3e2032393134.roa
Signing time: Thu 17 Sep 2026 07:34:30 +0000
ROA not before: Thu 17 Sep 2026 07:29:30 +0000
ROA not after: Thu 16 Sep 2027 07:34:30 +0000
asID: 2914
IP address blocks: 160.21.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:59:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:a1:45:6f:83:c9:e1:32:24:f7:8f:83:c8:93:ff:59:25:f8:e5:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Sep 17 07:29:30 2026 GMT
Not After : Sep 16 07:34:30 2027 GMT
Subject: CN=BCFAC1B9F6D079775DE59FD38A03569A6BBE5BC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b6:35:0d:3c:e4:e2:d2:ae:3c:6c:70:11:7f:
30:fc:fe:6e:15:63:b1:b5:d2:be:89:c8:89:7c:ea:
d6:14:40:18:9d:4c:0a:60:71:5c:e7:12:2b:43:ca:
92:5d:08:76:4d:f8:87:99:f3:cf:11:e5:ac:ee:12:
e3:13:0a:3d:4b:85:18:46:c1:c7:7e:4d:56:7c:97:
b0:c6:37:ef:1c:8a:a1:1a:5a:2f:84:21:89:70:a7:
fd:da:51:f2:7e:4f:6d:f7:41:7e:ad:7b:7d:13:23:
52:6f:11:75:c7:11:61:d1:11:60:7e:52:52:83:3a:
69:07:4c:04:9e:8d:94:11:e3:96:65:9c:0f:17:92:
5a:19:51:df:db:e1:6e:6d:71:a5:f5:c7:e2:b2:52:
f6:c9:9f:08:b3:7d:97:4c:03:4a:ce:35:47:68:6b:
a5:b3:f3:c1:a0:7d:7b:9b:f6:4a:10:12:d8:fc:90:
40:6b:3b:cc:3d:fa:2c:c8:27:e9:e3:26:b8:ac:be:
70:a5:f2:02:21:23:25:22:b0:6d:1d:56:7d:e1:53:
34:e4:dd:97:ff:70:a8:db:7a:66:ec:37:27:52:3b:
50:a7:60:6e:89:11:cc:e2:2a:fc:38:6b:1a:c7:a6:
b6:d0:23:b2:a7:80:7e:40:d3:fd:17:b1:3e:6d:0f:
80:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:FA:C1:B9:F6:D0:79:77:5D:E5:9F:D3:8A:03:56:9A:6B:BE:5B:C6
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3131332e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.113.0/24
Signature Algorithm: sha256WithRSAEncryption
01:6a:e0:04:2e:b6:f9:a9:40:64:e2:93:9e:b1:e5:10:d6:d3:
10:03:f0:93:d3:ab:72:13:cc:44:28:da:64:26:07:11:da:7d:
d9:58:99:50:12:4a:8f:3d:54:cf:2b:dd:9f:c2:eb:84:c7:c6:
7a:c2:f8:0b:33:14:95:80:b8:d9:0c:f5:25:b9:d9:2d:b7:0a:
79:01:06:63:f2:26:de:f2:15:68:b2:f7:15:ec:bb:56:d7:89:
14:50:c7:14:b4:eb:4b:c5:5c:72:23:45:8e:88:cb:31:25:3d:
ac:f7:6e:23:48:5e:24:d4:e1:7e:dc:4c:01:81:5c:3c:89:d2:
d0:ec:ed:59:50:9b:6e:ea:88:f5:c5:24:a6:5c:03:bc:89:9a:
f1:0b:b2:88:b8:68:ef:13:d4:c8:bd:9f:38:dd:ac:f1:34:24:
0c:81:a3:a0:57:ea:5a:01:e6:01:2f:ef:42:6d:b7:fd:01:92:
c6:d0:7f:68:0e:02:5b:94:0f:f7:5c:71:79:13:68:cb:6f:98:
9f:93:49:e8:ec:98:8b:9d:2d:97:fc:59:83:f4:d2:3c:48:e3:
a6:9b:f2:93:36:61:f1:97:53:31:16:cc:b5:ec:30:c4:4a:da:
e0:a2:5f:d3:94:94:0e:fb:42:ef:5b:9b:ad:c5:e3:c3:19:58:
65:36:a8:26
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUdaFFb4PJ4TIk94+DyJP/WSX45TIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRiZTRkODdmY2JlNmNjYTdjY2U1YjMyNTRmNjk2ZGJi
ZmNmMGU1ZDAeFw0yNjA5MTcwNzI5MzBaFw0yNzA5MTYwNzM0MzBaMDMxMTAvBgNV
BAMTKEJDRkFDMUI5RjZEMDc5Nzc1REU1OUZEMzhBMDM1NjlBNkJCRTVCQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdtjUNPOTi0q48bHARfzD8/m4V
Y7G10r6JyIl86tYUQBidTApgcVznEitDypJdCHZN+IeZ888R5azuEuMTCj1LhRhG
wcd+TVZ8l7DGN+8ciqEaWi+EIYlwp/3aUfJ+T233QX6te30TI1JvEXXHEWHREWB+
UlKDOmkHTASejZQR45ZlnA8XkloZUd/b4W5tcaX1x+KyUvbJnwizfZdMA0rONUdo
a6Wz88GgfXub9koQEtj8kEBrO8w9+izIJ+njJrisvnCl8gIhIyUisG0dVn3hUzTk
3Zf/cKjbembsNydSO1CnYG6JEcziKvw4axrHprbQI7KngH5A0/0XsT5tD4AFAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUvPrBufbQeXdd5Z/TigNWmmu+W8YwHwYDVR0j
BBgwFoAUVL5Nh/y+bMp8zlsyVPaW27/PDl0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTc3NTU2NjctYjg0Yi00NTdhLWE1OGMtYjVlZGMxZjVl
OGUwLzAvNTRCRTREODdGQ0JFNkNDQTdDQ0U1QjMyNTRGNjk2REJCRkNGMEU1RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1ZMNU5oX3ktYk1wOHpsc3lWUGFXMjdf
UERsMC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNTc3NTU2Njct
Yjg0Yi00NTdhLWE1OGMtYjVlZGMxZjVlOGUwLzAvMzEzNjMwMmUzMjMxMmUzMTMx
MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM5MzEzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKAV
cTANBgkqhkiG9w0BAQsFAAOCAQEAAWrgBC62+alAZOKTnrHlENbTEAPwk9OrchPM
RCjaZCYHEdp92ViZUBJKjz1Uzyvdn8LrhMfGesL4CzMUlYC42Qz1JbnZLbcKeQEG
Y/Im3vIVaLL3Fey7VteJFFDHFLTrS8VcciNFjojLMSU9rPduI0heJNThftxMAYFc
PInS0OztWVCbbuqI9cUkplwDvIma8QuyiLho7xPUyL2fON2s8TQkDIGjoFfqWgHm
AS/vQm23/QGSxtB/aA4CW5QP91xxeRNoy2+Yn5NJ6OyYi50tl/xZg/TSPEjjppvy
kzZh8ZdTMRbMtewwxEra4KJf05SUDvtC71ubrcXjwxlYZTaoJg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 14:59:29 2026 by rpki-client