Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3132302e302f32342d3234203d3e2032393134.roa
File: 3136302e32312e3132302e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: jaCkqjmWp5VM26Ugpbl4/8nKDnhp9cSiFORH79kcVlo=
Subject key identifier: 25:7C:65:A1:1A:A6:3D:F5:C3:B0:5F:53:42:C1:37:F4:D2:E5:2E:69
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 7DD0334AC9BAFB8001BD9DA5D9FE98D09A506F04
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3132302e302f32342d3234203d3e2032393134.roa
Signing time: Thu 17 Sep 2026 07:34:32 +0000
ROA not before: Thu 17 Sep 2026 07:29:32 +0000
ROA not after: Thu 16 Sep 2027 07:34:32 +0000
asID: 2914
IP address blocks: 160.21.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:d0:33:4a:c9:ba:fb:80:01:bd:9d:a5:d9:fe:98:d0:9a:50:6f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Sep 17 07:29:32 2026 GMT
Not After : Sep 16 07:34:32 2027 GMT
Subject: CN=257C65A11AA63DF5C3B05F5342C137F4D2E52E69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1a:1d:0d:8a:97:14:fa:f5:ae:c0:9d:f9:4f:
3d:3f:da:6e:82:77:f9:94:ca:7d:9d:e1:e9:86:f0:
53:47:e2:c3:47:4a:5c:ca:f7:25:1f:79:8a:0d:57:
72:c6:18:28:e9:dc:c8:5f:d4:1d:cc:ef:a7:2a:79:
aa:56:50:71:bc:7e:b1:5f:1c:b0:0b:a0:7c:84:bd:
cf:f0:6c:3a:3c:8c:1d:ac:9b:cf:55:6d:b7:c7:67:
1d:81:64:96:b0:95:39:bb:54:02:60:c1:71:ed:d0:
df:ce:7a:32:84:9a:90:a5:f5:16:29:6b:fa:9c:7d:
31:7d:e5:87:a8:26:7e:c6:56:27:c9:c0:8d:b3:53:
01:89:bf:f7:e0:58:33:65:32:47:ce:2b:b9:93:fc:
54:44:a3:b3:ec:c7:7b:00:43:6f:09:c7:76:73:6d:
41:05:ee:f5:fa:27:ec:11:13:a9:a3:58:78:9c:b6:
76:44:7c:b6:21:6f:52:fc:c3:1a:56:f9:b4:3d:e1:
c7:9d:96:07:de:61:06:05:52:6d:2c:98:67:55:23:
d7:2b:db:a4:86:bf:6c:a4:83:5e:1f:a4:e3:6a:e1:
97:4a:b2:bc:66:1d:62:4e:cb:b8:8c:fd:a6:bf:2f:
1e:6a:cb:84:97:a4:62:d0:ff:64:f4:b5:4e:c0:55:
b3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:7C:65:A1:1A:A6:3D:F5:C3:B0:5F:53:42:C1:37:F4:D2:E5:2E:69
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3132302e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:ce:85:a5:ba:fe:fe:35:ed:ee:fe:80:0b:5a:cd:af:db:61:
0d:20:6f:c4:4c:6c:65:d0:ce:5d:dc:8a:9f:51:2d:55:96:a2:
2d:0f:86:71:46:57:2e:4c:87:27:14:d9:71:78:48:33:ba:53:
df:20:0e:9a:8c:1b:9a:85:67:9a:27:6e:fb:39:29:33:26:aa:
52:b4:ce:3f:a3:18:66:c8:a6:75:88:20:97:19:4b:1b:37:3a:
bd:3c:63:ba:5d:43:3e:8b:e5:ab:f7:1a:36:3a:c1:d0:f5:50:
31:7e:9f:50:3b:c9:99:26:b7:ca:df:f8:3e:38:0d:78:71:2d:
f7:85:d9:1b:fc:8a:f8:7d:17:93:9d:a5:15:53:16:6c:f1:5c:
db:de:46:21:f4:a5:26:1e:9c:6d:3d:51:7f:06:72:8c:b7:c7:
4f:08:74:3c:e7:28:5e:1a:e0:1e:14:04:d7:7a:6b:15:a8:11:
7f:b6:c5:a6:0c:da:62:8c:c0:c6:f0:bf:48:69:96:9b:e8:a8:
21:41:12:35:7b:e8:f1:2c:62:fc:fe:cd:81:02:95:53:13:50:
e6:b6:58:90:05:5f:f3:64:0b:a8:b7:17:48:d5:bc:03:36:38:
e0:0d:3d:fd:48:5c:ee:14:3e:ed:db:51:b9:09:2e:c7:6c:10:
59:cb:6e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:57:33 2026 by rpki-client