Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3132332e302f32342d3234203d3e2032393134.roa
File: 3136302e32312e3132332e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: lFcSBbxRUO1Lko+fcf02duAtCVJpppx+QZ5a2ZlaDJI=
Subject key identifier: 4E:9A:B0:37:59:53:35:18:1B:6C:ED:FF:E7:6A:41:12:21:10:CE:7D
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 19CD6BF1ADF660D63225992D0D88AD7A0ABFFE66
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3132332e302f32342d3234203d3e2032393134.roa
Signing time: Thu 17 Sep 2026 07:34:29 +0000
ROA not before: Thu 17 Sep 2026 07:29:29 +0000
ROA not after: Thu 16 Sep 2027 07:34:29 +0000
asID: 2914
IP address blocks: 160.21.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:59:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:cd:6b:f1:ad:f6:60:d6:32:25:99:2d:0d:88:ad:7a:0a:bf:fe:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Sep 17 07:29:29 2026 GMT
Not After : Sep 16 07:34:29 2027 GMT
Subject: CN=4E9AB037595335181B6CEDFFE76A41122110CE7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a5:d3:c9:42:5a:c2:cb:64:b8:b4:5f:d7:6d:
d6:7f:5d:7d:d5:50:7a:0b:9f:dc:ca:27:f2:96:00:
d1:3b:ea:9b:be:e6:11:3f:d4:77:a2:c7:83:38:5e:
9c:4b:72:09:6f:c7:58:43:ec:3d:f4:ae:9b:47:b3:
6b:ae:a3:35:90:14:75:b2:f2:e1:1b:d2:b5:3c:e4:
04:2f:b3:59:4c:91:f5:6d:84:db:ac:36:3b:5b:ea:
99:64:ab:11:98:6b:36:09:3b:01:6d:54:95:80:61:
8d:35:99:ab:ff:ac:7d:12:95:0d:6f:a7:d0:bc:21:
70:0b:f4:5c:69:fe:96:98:86:98:89:cb:01:c7:25:
14:b7:00:77:40:a0:db:40:13:4e:12:d5:42:2b:c3:
5f:33:9a:3e:c6:a7:cb:e4:f4:6a:7f:8c:5c:9c:00:
09:86:e3:71:96:78:44:d2:9d:37:34:1a:b1:69:1d:
93:c7:b4:d1:76:5d:74:cc:c1:08:c4:b9:7e:c2:3e:
d4:af:48:d4:b3:e5:70:18:22:6f:9e:35:77:f0:55:
d4:ae:69:01:87:11:ab:de:00:2c:91:c1:af:8f:df:
29:be:14:0a:9e:71:33:77:9a:55:7d:0b:19:ad:c8:
3d:c8:47:25:27:7e:ae:4c:ad:c9:83:37:d9:d0:68:
f5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9A:B0:37:59:53:35:18:1B:6C:ED:FF:E7:6A:41:12:21:10:CE:7D
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3132332e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.123.0/24
Signature Algorithm: sha256WithRSAEncryption
31:c7:40:76:7f:67:42:0c:5c:95:46:ad:b5:8b:6e:76:4f:a0:
b3:bb:9c:0c:8b:2c:f1:4f:f3:70:54:06:46:00:b6:23:db:bb:
43:c2:66:72:b5:bd:8b:9d:12:b0:6a:3f:08:60:1f:bf:49:a8:
77:41:0b:12:fb:03:b6:50:f3:9b:e6:4a:dd:ba:8b:1f:56:69:
63:c2:e6:ff:1b:eb:e8:77:d9:04:86:38:ec:6f:3a:4a:1e:38:
b7:1e:fc:e8:b5:79:be:8f:e9:bc:a4:f7:cc:65:40:0b:3a:8c:
27:f8:63:94:bd:f2:0b:7a:b4:b1:39:a2:3f:b7:94:bd:62:65:
79:9a:06:6f:a3:9b:55:00:28:f6:59:3a:ba:6b:c3:d4:8c:06:
2a:4c:59:3d:98:15:c4:c1:50:fe:a2:70:6a:9f:b4:73:1b:67:
3f:66:d8:06:d1:c4:8d:41:af:68:ce:3a:e6:38:99:13:bf:20:
0e:26:f2:2b:4f:d3:9b:17:4b:48:87:f5:cc:82:27:4d:84:b5:
dc:8b:60:de:06:39:16:0a:43:cf:8c:29:07:99:ca:b4:3a:d8:
18:d8:9d:ff:ff:40:f0:32:ee:6e:b5:85:b6:0e:c0:90:d9:3e:
9e:04:8a:5b:7a:d2:48:b0:3d:1e:a0:02:68:da:92:50:59:29:
84:ae:1b:c2
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUGc1r8a32YNYyJZktDYitegq//mYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRiZTRkODdmY2JlNmNjYTdjY2U1YjMyNTRmNjk2ZGJi
ZmNmMGU1ZDAeFw0yNjA5MTcwNzI5MjlaFw0yNzA5MTYwNzM0MjlaMDMxMTAvBgNV
BAMTKDRFOUFCMDM3NTk1MzM1MTgxQjZDRURGRkU3NkE0MTEyMjExMENFN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDepdPJQlrCy2S4tF/XbdZ/XX3V
UHoLn9zKJ/KWANE76pu+5hE/1Heix4M4XpxLcglvx1hD7D30rptHs2uuozWQFHWy
8uEb0rU85AQvs1lMkfVthNusNjtb6plkqxGYazYJOwFtVJWAYY01mav/rH0SlQ1v
p9C8IXAL9Fxp/paYhpiJywHHJRS3AHdAoNtAE04S1UIrw18zmj7Gp8vk9Gp/jFyc
AAmG43GWeETSnTc0GrFpHZPHtNF2XXTMwQjEuX7CPtSvSNSz5XAYIm+eNXfwVdSu
aQGHEaveACyRwa+P3ym+FAqecTN3mlV9CxmtyD3IRyUnfq5MrcmDN9nQaPWtAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUTpqwN1lTNRgbbO3/52pBEiEQzn0wHwYDVR0j
BBgwFoAUVL5Nh/y+bMp8zlsyVPaW27/PDl0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTc3NTU2NjctYjg0Yi00NTdhLWE1OGMtYjVlZGMxZjVl
OGUwLzAvNTRCRTREODdGQ0JFNkNDQTdDQ0U1QjMyNTRGNjk2REJCRkNGMEU1RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1ZMNU5oX3ktYk1wOHpsc3lWUGFXMjdf
UERsMC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNTc3NTU2Njct
Yjg0Yi00NTdhLWE1OGMtYjVlZGMxZjVlOGUwLzAvMzEzNjMwMmUzMjMxMmUzMTMy
MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM5MzEzNC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKAV
ezANBgkqhkiG9w0BAQsFAAOCAQEAMcdAdn9nQgxclUattYtudk+gs7ucDIss8U/z
cFQGRgC2I9u7Q8JmcrW9i50SsGo/CGAfv0mod0ELEvsDtlDzm+ZK3bqLH1ZpY8Lm
/xvr6HfZBIY47G86Sh44tx786LV5vo/pvKT3zGVACzqMJ/hjlL3yC3q0sTmiP7eU
vWJleZoGb6ObVQAo9lk6umvD1IwGKkxZPZgVxMFQ/qJwap+0cxtnP2bYBtHEjUGv
aM465jiZE78gDibyK0/TmxdLSIf1zIInTYS13Itg3gY5FgpDz4wpB5nKtDrYGNid
//9A8DLubrWFtg7AkNk+ngSKW3rSSLA9HqACaNqSUFkphK4bwg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 18:57:03 2026 by rpki-client