Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3132322e302f32342d3234203d3e2032393134.roa
File: 3136302e32312e3132322e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: K5zHo9SI4ThRkQptP1h7FqaWfZjqG8W9BGP0NalQif0=
Subject key identifier: A4:3B:06:7E:83:21:FF:E8:64:51:31:8B:6D:32:BC:1A:96:30:F2:3F
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 4730CB7BA1252A59FBBAA835881D661EF44B74C9
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3132322e302f32342d3234203d3e2032393134.roa
Signing time: Thu 17 Sep 2026 07:34:30 +0000
ROA not before: Thu 17 Sep 2026 07:29:30 +0000
ROA not after: Thu 16 Sep 2027 07:34:30 +0000
asID: 2914
IP address blocks: 160.21.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:05:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:30:cb:7b:a1:25:2a:59:fb:ba:a8:35:88:1d:66:1e:f4:4b:74:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Sep 17 07:29:30 2026 GMT
Not After : Sep 16 07:34:30 2027 GMT
Subject: CN=A43B067E8321FFE86451318B6D32BC1A9630F23F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2d:3b:9f:ed:9f:e5:31:38:d5:79:92:51:21:
08:ec:4c:a4:47:6b:e3:5b:d7:14:13:df:9d:69:9f:
74:c1:77:c4:c3:03:dc:e7:20:40:42:3e:d9:c6:db:
33:e7:bd:76:ea:6e:17:33:fe:fd:e0:93:f5:a8:f6:
41:9d:58:8f:c9:cd:e7:66:76:ae:ae:b8:6f:70:f8:
80:b2:46:f2:9d:21:33:6b:8e:c3:bc:af:58:ea:da:
f5:6d:b9:07:d4:e7:61:df:80:d2:34:d4:86:eb:42:
c2:01:fc:cc:5f:5f:98:09:2d:f6:3c:4e:85:ec:59:
e5:4e:53:4d:39:0e:fe:6a:93:91:b0:45:b6:4f:40:
85:07:c9:bf:d6:5d:29:aa:1e:ee:b0:0b:56:eb:34:
c6:3a:34:b3:52:61:d3:49:8d:a5:bb:e4:9f:34:55:
24:a7:63:bb:a5:aa:c1:cf:fa:7e:82:c1:ea:97:0d:
27:bf:5a:d6:c9:4c:02:7c:52:7b:af:d5:8d:76:97:
9c:01:62:df:3d:3f:1f:19:1a:a3:59:53:6a:46:34:
4f:91:b0:b5:5b:6c:e9:2d:6b:94:0f:d2:ce:37:1b:
e9:25:bd:19:19:6b:d2:67:c8:5f:58:cb:2f:5c:3f:
07:c3:d9:14:b3:18:e8:58:64:0d:c6:1a:e6:67:f7:
79:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:3B:06:7E:83:21:FF:E8:64:51:31:8B:6D:32:BC:1A:96:30:F2:3F
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3132322e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.122.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:f2:5c:8f:ec:5a:80:c7:03:82:93:6b:9d:98:5a:5d:b5:bb:
bb:11:7b:03:70:e2:77:6c:9a:4e:0f:58:83:c9:f4:e7:e7:c6:
6e:47:cc:7d:79:08:08:a8:52:54:dd:b3:90:c7:ff:d9:0a:d0:
ad:f3:c0:f4:d5:ca:5b:50:55:00:cb:46:0e:18:8b:3b:96:15:
7b:6b:54:3b:2b:63:62:67:1d:93:7b:4b:4f:d1:8e:5b:12:53:
dc:93:04:3b:a5:eb:4a:7a:9e:23:b7:cf:a9:be:69:66:3e:be:
1e:e8:9a:aa:b7:81:4d:d3:da:56:76:69:f3:ef:b0:a4:8c:c9:
e3:c8:5f:47:25:00:df:33:88:08:b7:b3:f0:62:33:ec:d5:e9:
2c:48:38:3d:b6:b6:fb:ef:9f:63:4e:d3:0b:d1:89:13:ac:81:
73:f8:ba:e5:ff:60:d5:b9:63:fd:02:0e:a6:0a:4c:11:80:42:
69:de:a4:ad:17:c7:77:d0:e7:36:0c:43:ae:ff:13:23:b8:ef:
62:51:02:99:1c:c8:19:1b:5a:8b:f9:66:f0:1f:ee:27:21:f3:
82:95:f1:5a:6b:ce:bf:9e:16:b7:b5:e9:c1:af:50:fb:ec:23:
ec:79:4d:c8:14:f6:6b:78:e8:9a:21:5b:93:46:39:8f:1a:86:
06:3c:2c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:28:39 2026 by rpki-client