Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3132312e302f32342d3234203d3e2032393134.roa
File: 3136302e32312e3132312e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: p49gUoWt0KnR53yN59gexP35fCNkgJTcT4vDpiO7zWQ=
Subject key identifier: 5C:8A:13:63:1D:EF:99:75:7C:D0:22:31:BC:D4:0D:82:6B:FF:BE:E3
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 0A219BEC248B366F51E8D2DE5EAE85FBAA4714CB
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3132312e302f32342d3234203d3e2032393134.roa
Signing time: Thu 17 Sep 2026 07:34:34 +0000
ROA not before: Thu 17 Sep 2026 07:29:34 +0000
ROA not after: Thu 16 Sep 2027 07:34:34 +0000
asID: 2914
IP address blocks: 160.21.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:21:9b:ec:24:8b:36:6f:51:e8:d2:de:5e:ae:85:fb:aa:47:14:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Sep 17 07:29:34 2026 GMT
Not After : Sep 16 07:34:34 2027 GMT
Subject: CN=5C8A13631DEF99757CD02231BCD40D826BFFBEE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4d:33:e3:12:e0:04:f6:12:be:2a:32:e0:bc:
74:dd:a3:78:1a:d7:02:a5:9b:86:34:fb:ed:03:71:
4f:da:c9:45:13:83:d5:45:d6:27:d1:4d:48:bc:58:
8c:d5:e9:5b:89:9c:a8:32:61:26:bc:73:04:e9:11:
84:00:74:ee:46:bc:66:b1:71:35:d9:02:d6:d1:24:
58:93:27:7c:7b:b6:e4:8c:74:c8:e4:43:d7:95:96:
1f:e1:a5:5b:e8:48:e7:2a:a8:89:ee:e0:92:30:9f:
f3:34:b7:04:ee:06:1e:03:be:41:08:9a:2a:e6:89:
bb:fa:e5:b3:8c:68:f7:86:54:b1:41:37:51:98:14:
cb:2c:ce:bc:d9:0d:11:da:9f:71:4f:56:7a:c5:1d:
1d:1b:08:1b:34:0c:cd:52:a7:9e:1e:ec:ef:86:67:
e0:1d:84:a1:c6:6c:20:e4:c8:a7:e1:36:7a:1d:ba:
a6:18:a0:eb:bd:dc:f1:cc:11:62:07:8e:25:ce:98:
52:a7:be:94:17:96:c3:9d:32:95:46:a3:8b:72:3f:
be:ff:18:b2:55:36:4f:b6:1b:65:c8:d9:e7:81:eb:
5f:a7:a6:f8:fa:62:f6:64:83:56:5c:47:db:09:05:
43:05:63:8d:49:b1:33:b0:0f:1e:39:68:09:09:d0:
3b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:8A:13:63:1D:EF:99:75:7C:D0:22:31:BC:D4:0D:82:6B:FF:BE:E3
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3132312e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.121.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:5a:92:3d:15:f5:d7:b2:2a:4c:ab:2e:a5:12:c5:2f:22:c3:
ce:cb:a2:08:0c:2c:88:6f:3a:86:d0:0b:21:d5:9d:15:03:68:
71:16:1f:bf:88:61:69:ea:42:67:22:d0:ca:ee:0c:2c:1c:53:
39:8a:3b:df:53:11:22:3e:5d:ac:82:46:8e:7a:80:9f:50:c6:
6a:ea:7c:16:0b:96:b8:b6:50:9f:22:f7:47:aa:f3:a1:5e:b3:
19:21:eb:84:b0:d5:6b:d0:86:38:29:c9:dc:bb:28:1b:82:c4:
64:7b:5a:23:06:24:cb:0e:12:0b:68:82:b6:2d:a0:65:f1:cb:
91:33:ff:8b:cb:68:6b:a9:9c:e1:aa:1c:56:93:51:a0:46:b3:
0f:a7:2a:0c:13:ee:51:92:0f:98:3a:18:1f:ea:f5:32:ee:29:
8e:e5:8b:4b:61:18:60:10:b3:5c:29:42:7c:4e:c9:04:c9:c1:
33:2c:35:e7:98:2b:4e:b5:ea:02:6a:23:12:bb:aa:0e:6c:32:
a8:81:34:4a:50:4f:51:2a:4e:aa:d8:48:f4:7c:7d:3a:ad:a8:
0e:3c:50:ad:93:5f:b3:7c:22:70:5f:01:96:c9:6f:8c:51:1a:
9b:3c:17:ac:ac:2d:a0:09:00:ba:02:bb:f3:f2:be:3c:3c:ab:
c9:6f:ff:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:02:09 2026 by rpki-client