Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3131342e302f32342d3234203d3e20323134343833.roa
File: 3136302e32312e3131342e302f32342d3234203d3e20323134343833.roa (raw, json)
Hash identifier: 9RRHhHNf9hjZhY9QS2pVnGiznrhoA4DRymQGCZdWqO4=
Subject key identifier: 3A:02:91:C9:1C:2D:42:9A:36:93:A6:26:00:48:12:4B:22:CF:FA:53
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 7849AFB1AE1D5C12A72A5199EA9861EEFA89C60A
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3131342e302f32342d3234203d3e20323134343833.roa
Signing time: Wed 16 Sep 2026 00:45:18 +0000
ROA not before: Wed 16 Sep 2026 00:40:18 +0000
ROA not after: Wed 15 Sep 2027 00:45:18 +0000
asID: 214483
IP address blocks: 160.21.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:49:af:b1:ae:1d:5c:12:a7:2a:51:99:ea:98:61:ee:fa:89:c6:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Sep 16 00:40:18 2026 GMT
Not After : Sep 15 00:45:18 2027 GMT
Subject: CN=3A0291C91C2D429A3693A6260048124B22CFFA53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d9:e1:3e:d7:50:8f:33:85:da:88:03:c2:9d:
86:d2:c6:c9:31:ef:6e:70:80:1e:95:72:a8:08:ef:
d6:77:20:f0:45:03:e4:8d:30:c6:f3:15:73:ad:ea:
5c:43:b0:51:2b:e8:10:06:b2:6b:8b:9c:e2:93:d7:
16:38:ba:f9:72:f3:c0:c5:b6:f5:70:27:86:09:fc:
87:53:5e:f9:8e:b0:c7:b4:1e:1a:9e:64:ac:5f:76:
f2:b8:58:06:e1:a2:22:7a:1b:47:51:12:2d:6a:69:
70:b2:3e:a7:d1:a2:fb:5f:2b:b2:c7:65:75:86:c9:
cd:36:c4:2b:70:ad:9a:6b:35:26:a8:8f:71:41:9d:
a3:fe:0d:da:3c:9a:b6:90:95:eb:03:0d:99:35:38:
7d:f6:0d:22:f4:73:a6:e6:7d:cc:4b:9a:ef:38:35:
a5:e0:dd:df:82:b0:4f:27:6c:aa:00:15:29:1e:21:
a9:c2:ac:6a:40:44:a6:b8:a8:97:ce:01:39:55:cd:
78:c5:d2:c4:bc:0a:3a:30:31:a5:11:59:b6:57:6d:
fc:a7:c4:0e:df:c0:94:e4:29:93:c6:87:88:78:70:
fc:fd:31:fa:0a:c8:f8:fd:c7:15:ae:7c:36:87:9f:
28:6f:c3:ec:c5:8a:33:7a:9f:f1:48:ad:9c:3b:59:
33:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:02:91:C9:1C:2D:42:9A:36:93:A6:26:00:48:12:4B:22:CF:FA:53
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3131342e302f32342d3234203d3e20323134343833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.114.0/24
Signature Algorithm: sha256WithRSAEncryption
95:51:24:0d:4d:58:79:2f:0d:37:bb:a9:d1:0a:d6:24:c6:1d:
fc:dc:44:7f:34:50:69:28:b7:05:32:07:a2:2c:a0:a8:48:ca:
ad:46:df:45:52:21:02:f7:4e:13:17:fc:d0:cc:5c:62:c6:06:
a2:70:0e:5a:49:3a:e6:23:48:7a:64:ee:b9:b9:e1:7f:ed:03:
b1:75:2e:fa:e1:2c:01:ad:56:a6:83:14:f1:f4:8f:8c:09:28:
1b:02:d9:98:d1:ce:98:4b:28:4b:ab:28:cb:1c:8b:de:d6:ae:
23:77:e7:67:b6:45:bd:b7:30:e9:af:bd:42:a6:0a:7a:b6:3b:
4a:83:cf:07:ef:04:2f:4d:e5:f4:d9:ac:86:ac:39:ba:e0:3b:
c0:df:a5:34:22:2b:d1:7b:87:c0:10:f6:a3:b7:2a:29:be:57:
c4:68:fa:9f:60:39:94:3a:e1:de:62:70:04:14:52:9e:c6:68:
c6:d1:db:50:6b:e4:20:4a:bb:d4:25:46:bb:0b:66:6b:31:e0:
70:2a:6c:13:80:31:cf:34:57:33:9a:8b:3f:b1:d0:dc:e6:2c:
ef:34:31:8d:fa:d7:2b:9b:33:12:25:57:8d:67:c2:c5:c2:3d:
58:b6:84:0a:a8:fe:56:40:ad:88:b4:26:88:d8:66:8b:9d:6f:
de:b1:1f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:59:19 2026 by rpki-client