Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3131352e302f32342d3234203d3e2032393134.roa
File: 3136302e32312e3131352e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: zZvExAu5MWisoyemsgCWpQy6+oX6wAMYzxGCB33QrdQ=
Subject key identifier: 96:67:F0:02:3C:37:81:F3:47:3E:DF:57:2F:BF:F1:5E:F9:55:B0:53
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 035829BEDB07EC2626C2E2B8F6C24345EE5A20DB
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3131352e302f32342d3234203d3e2032393134.roa
Signing time: Thu 17 Sep 2026 07:34:33 +0000
ROA not before: Thu 17 Sep 2026 07:29:33 +0000
ROA not after: Thu 16 Sep 2027 07:34:33 +0000
asID: 2914
IP address blocks: 160.21.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:05:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:58:29:be:db:07:ec:26:26:c2:e2:b8:f6:c2:43:45:ee:5a:20:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Sep 17 07:29:33 2026 GMT
Not After : Sep 16 07:34:33 2027 GMT
Subject: CN=9667F0023C3781F3473EDF572FBFF15EF955B053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d9:f9:80:4f:df:3d:d9:d5:91:7e:72:3a:3f:
12:b1:12:e6:6d:af:ab:92:ff:c2:4d:d2:b4:7d:43:
7e:5b:3f:aa:74:35:15:4d:63:a5:b6:39:24:5e:bc:
ca:c7:5e:9f:dc:63:d0:cb:be:2a:38:f7:7d:8f:7b:
b5:da:07:5c:d5:2f:e3:be:e7:9e:33:70:06:ca:7f:
19:96:c3:ec:7a:f8:0d:75:b9:35:32:cc:c2:25:e7:
11:f1:47:89:6c:de:d8:1b:72:63:60:0e:1d:8d:ad:
2d:45:cd:00:c0:00:66:36:c7:5a:a1:b5:be:5b:f2:
57:18:6f:75:80:cd:85:14:89:f8:4f:79:19:e9:93:
2a:f7:3a:86:d8:8d:e8:94:07:ea:5f:0b:87:a7:c5:
6c:8b:71:7c:80:69:46:ac:f2:1b:c2:9e:93:63:0d:
53:83:59:ba:64:52:47:bd:01:7e:6a:3d:ad:49:6d:
9f:82:4d:75:17:2a:35:d8:03:b5:3f:30:d8:ba:44:
aa:f5:cc:69:06:40:a5:8b:00:46:14:c1:b3:20:21:
50:b2:4c:51:50:d2:96:14:f5:6a:c1:a2:1d:30:12:
5c:31:83:c7:2f:57:0f:8e:c1:c5:e4:36:9a:0f:90:
c3:65:b4:57:e0:e9:9a:cd:51:f9:22:c7:8f:eb:1b:
84:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:67:F0:02:3C:37:81:F3:47:3E:DF:57:2F:BF:F1:5E:F9:55:B0:53
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3131352e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.115.0/24
Signature Algorithm: sha256WithRSAEncryption
72:94:41:d8:23:7c:f7:47:e7:fc:93:b0:0d:a0:34:de:ba:c7:
2d:01:f3:de:0b:f2:52:5c:a4:a7:6d:03:d9:dd:da:22:29:a3:
31:d9:50:09:c0:58:6e:a5:e4:e3:c6:d4:ef:f6:06:59:07:09:
a8:2e:22:25:de:5b:17:4b:a9:f3:ad:bc:d7:40:fc:bb:62:2c:
d8:ad:fa:e2:c9:18:25:eb:6f:b0:5d:b7:cf:a8:97:1e:8d:48:
30:09:31:cd:24:75:29:35:35:50:f9:7a:c6:38:cb:8f:83:74:
dc:c8:de:66:af:00:5f:8e:3d:55:f6:1b:06:07:64:c6:f6:18:
8d:7c:70:bb:91:fc:cb:ce:07:34:7b:a8:a4:86:a5:fc:d6:66:
f9:3f:6b:da:f7:7e:07:d7:fb:8b:8e:b0:91:ef:cf:be:cd:aa:
e7:d2:a3:2b:c8:02:3d:b4:6d:46:df:61:19:a7:09:d9:48:c7:
a6:e5:41:88:05:7d:bc:ea:82:9e:d8:24:4b:d6:64:b1:8f:aa:
25:e0:58:b7:cc:e1:de:1c:bd:21:1c:3f:4c:a5:4b:08:c9:08:
b8:eb:59:c4:18:79:76:ac:89:87:80:67:91:bb:c2:5f:1c:c4:
44:99:5d:88:99:26:3f:1b:ee:e2:63:51:13:ab:87:36:e9:86:
af:fe:6b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:28:30 2026 by rpki-client