Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3131372e302f32342d3234203d3e2032393134.roa
File: 3136302e32312e3131372e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: Bl1TEDiypTZVtlkqwiXBHfDTvQrKmfy5xeqjfEzSZcg=
Subject key identifier: 3B:6A:B3:5F:EB:91:D8:81:D0:77:2F:5D:C0:F6:86:43:6D:0E:75:DB
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 24826116F72EEE5930DF09D9054511FEAA705BB1
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3131372e302f32342d3234203d3e2032393134.roa
Signing time: Thu 17 Sep 2026 07:34:31 +0000
ROA not before: Thu 17 Sep 2026 07:29:31 +0000
ROA not after: Thu 16 Sep 2027 07:34:31 +0000
asID: 2914
IP address blocks: 160.21.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:59:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:82:61:16:f7:2e:ee:59:30:df:09:d9:05:45:11:fe:aa:70:5b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Sep 17 07:29:31 2026 GMT
Not After : Sep 16 07:34:31 2027 GMT
Subject: CN=3B6AB35FEB91D881D0772F5DC0F686436D0E75DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4e:55:38:01:f3:ce:f7:4e:dd:6e:19:a1:0f:
4d:30:68:af:88:17:11:04:8a:01:0a:d8:d9:d9:d2:
57:94:a5:d1:16:cf:ae:8b:11:08:cd:c0:f1:ef:78:
32:26:39:97:88:a8:b8:1b:bd:66:02:66:cb:8c:16:
7a:03:0e:cb:a8:f0:d2:fe:5d:a0:49:da:b1:e5:33:
44:5a:63:e5:15:1d:ac:53:77:94:0c:34:40:e0:b8:
e1:08:ab:61:48:14:de:2e:4a:3b:47:fc:4b:1d:0e:
96:76:bc:fe:f4:e7:4b:53:11:3b:c3:78:87:d8:99:
26:11:cc:96:1f:98:5f:4a:a4:9e:3e:51:f7:1a:e1:
47:29:28:d7:53:49:b8:d6:89:3a:67:7c:ce:29:76:
dc:1e:76:86:77:45:92:64:36:26:f7:ee:ee:86:ea:
e7:9e:d5:aa:33:a5:af:89:19:0e:77:b0:0c:2c:fc:
94:13:db:d3:d7:5d:ac:63:14:bb:7e:10:ac:5f:d9:
c4:93:28:46:44:04:34:70:b8:f4:80:2b:f7:bd:2f:
34:97:0c:6c:f4:f4:c0:29:a3:ca:1b:5a:73:ea:ba:
41:03:08:e3:0d:eb:c2:f6:c6:51:a0:54:61:44:8a:
aa:15:e6:d6:b8:df:4b:09:13:d6:d3:fb:a8:7d:3e:
ea:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:6A:B3:5F:EB:91:D8:81:D0:77:2F:5D:C0:F6:86:43:6D:0E:75:DB
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3131372e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.117.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:96:de:64:97:45:55:a9:08:9e:c5:cf:0e:70:85:31:85:42:
ae:10:ed:90:ad:ff:db:74:fd:4a:cb:b4:e5:e3:81:02:d8:b0:
14:24:84:02:33:59:e0:24:e2:22:4a:e3:5d:c2:cc:f9:b2:35:
86:65:a5:ae:51:b3:46:0a:5b:c6:8e:43:21:c6:e5:2f:e8:c9:
18:f5:a7:cf:4b:e7:1a:a4:7f:c9:f3:4d:a7:6d:7a:53:e8:a7:
8f:22:8b:05:37:98:21:3d:e2:9f:23:c5:cd:87:dd:ca:da:95:
21:45:82:e2:15:45:0f:8a:50:77:e3:57:17:83:1f:13:ea:ec:
55:3a:81:65:76:ec:b8:c6:2b:31:9b:82:1c:15:51:ea:b5:a6:
4e:c1:b7:f5:f0:d5:83:49:77:52:11:59:de:e8:03:05:c1:0b:
9a:c4:e2:d3:89:19:ba:55:9e:ba:18:99:4a:8b:91:5b:52:d5:
b4:0e:ce:de:ee:38:ec:28:b1:e6:78:ff:1e:b4:ea:bc:d4:32:
aa:a6:df:41:99:77:56:5b:5e:5c:c0:f9:fc:30:99:62:bf:76:
f8:de:a4:5d:9d:60:13:a6:53:6c:95:60:ae:0c:db:f6:84:e1:
de:b9:d7:c0:cf:3e:56:36:29:0b:b0:b4:80:19:6b:fe:e2:56:
50:8d:25:d3
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUJIJhFvcu7lkw3wnZBUUR/qpwW7EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRiZTRkODdmY2JlNmNjYTdjY2U1YjMyNTRmNjk2ZGJi
ZmNmMGU1ZDAeFw0yNjA5MTcwNzI5MzFaFw0yNzA5MTYwNzM0MzFaMDMxMTAvBgNV
BAMTKDNCNkFCMzVGRUI5MUQ4ODFEMDc3MkY1REMwRjY4NjQzNkQwRTc1REIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8TlU4AfPO907dbhmhD00waK+I
FxEEigEK2NnZ0leUpdEWz66LEQjNwPHveDImOZeIqLgbvWYCZsuMFnoDDsuo8NL+
XaBJ2rHlM0RaY+UVHaxTd5QMNEDguOEIq2FIFN4uSjtH/EsdDpZ2vP7050tTETvD
eIfYmSYRzJYfmF9KpJ4+Ufca4UcpKNdTSbjWiTpnfM4pdtwedoZ3RZJkNib37u6G
6uee1aozpa+JGQ53sAws/JQT29PXXaxjFLt+EKxf2cSTKEZEBDRwuPSAK/e9LzSX
DGz09MApo8obWnPqukEDCOMN68L2xlGgVGFEiqoV5ta430sJE9bT+6h9PupfAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUO2qzX+uR2IHQdy9dwPaGQ20OddswHwYDVR0j
BBgwFoAUVL5Nh/y+bMp8zlsyVPaW27/PDl0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTc3NTU2NjctYjg0Yi00NTdhLWE1OGMtYjVlZGMxZjVl
OGUwLzAvNTRCRTREODdGQ0JFNkNDQTdDQ0U1QjMyNTRGNjk2REJCRkNGMEU1RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1ZMNU5oX3ktYk1wOHpsc3lWUGFXMjdf
UERsMC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNTc3NTU2Njct
Yjg0Yi00NTdhLWE1OGMtYjVlZGMxZjVlOGUwLzAvMzEzNjMwMmUzMjMxMmUzMTMx
MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM5MzEzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKAV
dTANBgkqhkiG9w0BAQsFAAOCAQEAHpbeZJdFVakInsXPDnCFMYVCrhDtkK3/23T9
Ssu05eOBAtiwFCSEAjNZ4CTiIkrjXcLM+bI1hmWlrlGzRgpbxo5DIcblL+jJGPWn
z0vnGqR/yfNNp216U+injyKLBTeYIT3inyPFzYfdytqVIUWC4hVFD4pQd+NXF4Mf
E+rsVTqBZXbsuMYrMZuCHBVR6rWmTsG39fDVg0l3UhFZ3ugDBcELmsTi04kZulWe
uhiZSouRW1LVtA7O3u447Cix5nj/HrTqvNQyqqbfQZl3VlteXMD5/DCZYr92+N6k
XZ1gE6ZTbJVgrgzb9oTh3rnXwM8+VjYpC7C0gBlr/uJWUI0l0w==
-----END CERTIFICATE-----
Generated at Mon Sep 21 12:37:15 2026 by rpki-client