Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3131362e302f32342d3234203d3e20323134343833.roa
File: 3136302e32312e3131362e302f32342d3234203d3e20323134343833.roa (raw, json)
Hash identifier: 6oj5IthLNUdEFuzIjSg8+OICou+aaktJei31IEyfmQk=
Subject key identifier: F1:3A:A7:B4:31:2E:73:C8:18:60:E2:AE:79:F6:CF:82:FA:33:BD:90
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 5C85119179A3C85152076AF4965AF2443D3EEF08
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3131362e302f32342d3234203d3e20323134343833.roa
Signing time: Wed 16 Sep 2026 01:32:59 +0000
ROA not before: Wed 16 Sep 2026 01:27:59 +0000
ROA not after: Wed 15 Sep 2027 01:32:59 +0000
asID: 214483
IP address blocks: 160.21.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:41:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:85:11:91:79:a3:c8:51:52:07:6a:f4:96:5a:f2:44:3d:3e:ef:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Sep 16 01:27:59 2026 GMT
Not After : Sep 15 01:32:59 2027 GMT
Subject: CN=F13AA7B4312E73C81860E2AE79F6CF82FA33BD90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:43:ec:c9:ff:f0:93:b4:d9:c0:66:df:2a:41:
f9:df:d0:92:89:89:32:cc:57:c5:6f:af:3b:c6:8d:
e0:25:ba:b9:19:7b:6c:12:d9:c0:3e:f7:57:33:34:
b0:b5:ad:58:77:43:85:7d:f0:ba:be:f3:61:ed:74:
b2:69:ee:23:43:13:31:56:72:42:2d:a9:01:41:6b:
38:84:ce:b1:ab:ca:c7:31:b9:e3:8c:f0:c1:4b:96:
a0:e2:a4:97:97:06:02:3a:bc:6e:58:ac:48:d5:1e:
71:12:01:79:9a:96:e1:0c:21:df:bd:ee:24:e6:17:
bb:2e:ac:d7:60:bf:a6:32:f6:9f:8d:b4:46:4d:e3:
12:0f:15:a3:79:18:0e:b3:52:68:db:9f:e1:a4:a2:
87:20:43:69:b9:1d:1d:61:2e:13:a4:80:e5:ad:b6:
df:7f:df:a7:1a:63:3c:73:6c:36:48:2e:af:a5:2c:
df:df:91:5f:a0:99:62:e8:62:d0:16:c7:32:66:0e:
4f:68:0e:53:07:77:88:17:37:10:4b:83:f5:8d:4c:
10:e0:68:03:22:ae:13:7b:64:64:52:37:c4:b5:8c:
67:ae:60:75:0f:20:22:15:99:52:9f:f8:ea:19:2d:
1c:d7:11:f8:a6:1e:bc:f3:24:cc:22:32:92:33:ad:
8c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:3A:A7:B4:31:2E:73:C8:18:60:E2:AE:79:F6:CF:82:FA:33:BD:90
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3131362e302f32342d3234203d3e20323134343833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.116.0/24
Signature Algorithm: sha256WithRSAEncryption
90:3b:0d:c2:fa:e0:d7:99:8a:b5:ec:92:17:23:72:0d:f1:4c:
b8:d9:bb:fa:57:5d:54:0f:42:b3:ee:91:0a:75:27:ff:e6:5e:
d3:e7:be:c8:84:65:91:a9:f4:3c:78:ef:55:4f:23:22:b8:18:
68:d9:51:33:57:08:ec:02:a7:63:50:d1:75:1d:0b:c2:97:46:
9a:9d:dd:41:67:32:2e:68:f0:31:35:3f:bf:de:86:31:6f:69:
dc:71:35:df:61:20:5f:13:dc:bc:23:7e:2a:70:61:b4:ac:dd:
5c:fd:10:7e:3e:d3:8c:a7:7a:27:2b:0e:fa:dd:4d:a1:d1:7c:
c9:7a:aa:97:55:8c:3f:19:4b:59:d2:4b:21:60:8b:07:27:2c:
7c:0e:9f:97:94:3c:b5:50:1f:e4:03:9c:25:1b:fe:67:5e:81:
95:51:d5:5b:67:fa:88:e9:9a:c1:97:5a:c6:89:57:d1:d7:79:
74:f0:c9:40:68:7a:91:c5:e4:ec:7a:b9:1e:dd:f7:c9:ea:c3:
62:aa:f2:c7:ee:58:db:5a:12:74:14:49:bd:20:20:fd:27:fd:
ee:e9:0f:5f:4b:e2:80:27:a7:5b:ec:7a:bc:6f:5d:ee:51:41:
7b:d9:de:aa:e0:2a:e6:4b:ea:59:2c:65:83:2d:d5:d0:48:c1:
f8:58:07:55
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUXIURkXmjyFFSB2r0llryRD0+7wgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRiZTRkODdmY2JlNmNjYTdjY2U1YjMyNTRmNjk2ZGJi
ZmNmMGU1ZDAeFw0yNjA5MTYwMTI3NTlaFw0yNzA5MTUwMTMyNTlaMDMxMTAvBgNV
BAMTKEYxM0FBN0I0MzEyRTczQzgxODYwRTJBRTc5RjZDRjgyRkEzM0JEOTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXQ+zJ//CTtNnAZt8qQfnf0JKJ
iTLMV8VvrzvGjeAlurkZe2wS2cA+91czNLC1rVh3Q4V98Lq+82HtdLJp7iNDEzFW
ckItqQFBaziEzrGryscxueOM8MFLlqDipJeXBgI6vG5YrEjVHnESAXmaluEMId+9
7iTmF7surNdgv6Yy9p+NtEZN4xIPFaN5GA6zUmjbn+GkoocgQ2m5HR1hLhOkgOWt
tt9/36caYzxzbDZILq+lLN/fkV+gmWLoYtAWxzJmDk9oDlMHd4gXNxBLg/WNTBDg
aAMirhN7ZGRSN8S1jGeuYHUPICIVmVKf+OoZLRzXEfimHrzzJMwiMpIzrYyHAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQU8TqntDEuc8gYYOKuefbPgvozvZAwHwYDVR0j
BBgwFoAUVL5Nh/y+bMp8zlsyVPaW27/PDl0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTc3NTU2NjctYjg0Yi00NTdhLWE1OGMtYjVlZGMxZjVl
OGUwLzAvNTRCRTREODdGQ0JFNkNDQTdDQ0U1QjMyNTRGNjk2REJCRkNGMEU1RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1ZMNU5oX3ktYk1wOHpsc3lWUGFXMjdf
UERsMC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNTc3NTU2Njct
Yjg0Yi00NTdhLWE1OGMtYjVlZGMxZjVlOGUwLzAvMzEzNjMwMmUzMjMxMmUzMTMx
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMxMzQzNDM4MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACgFXQwDQYJKoZIhvcNAQELBQADggEBAJA7DcL64NeZirXskhcjcg3xTLjZu/pX
XVQPQrPukQp1J//mXtPnvsiEZZGp9Dx471VPIyK4GGjZUTNXCOwCp2NQ0XUdC8KX
Rpqd3UFnMi5o8DE1P7/ehjFvadxxNd9hIF8T3LwjfipwYbSs3Vz9EH4+04yneicr
DvrdTaHRfMl6qpdVjD8ZS1nSSyFgiwcnLHwOn5eUPLVQH+QDnCUb/mdegZVR1Vtn
+ojpmsGXWsaJV9HXeXTwyUBoepHF5Ox6uR7d98nqw2Kq8sfuWNtaEnQUSb0gIP0n
/e7pD19L4oAnp1vserxvXe5RQXvZ3qrgKuZL6lksZYMt1dBIwfhYB1U=
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:11:49 2026 by rpki-client