Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3132342e302f32342d3234203d3e2032393134.roa
File: 3136302e32312e3132342e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: iqMNjroZLkNV7Ixg/2V29RqR1F7/RU4ro6o4nlnxEsE=
Subject key identifier: 42:0B:C0:73:F8:0D:DE:E3:91:41:3C:0E:FF:68:9E:F4:E5:B4:B5:09
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 58E17FD932838ADAA266A384E952302844618BA6
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3132342e302f32342d3234203d3e2032393134.roa
Signing time: Thu 17 Sep 2026 07:34:31 +0000
ROA not before: Thu 17 Sep 2026 07:29:31 +0000
ROA not after: Thu 16 Sep 2027 07:34:31 +0000
asID: 2914
IP address blocks: 160.21.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:59:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:e1:7f:d9:32:83:8a:da:a2:66:a3:84:e9:52:30:28:44:61:8b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Sep 17 07:29:31 2026 GMT
Not After : Sep 16 07:34:31 2027 GMT
Subject: CN=420BC073F80DDEE391413C0EFF689EF4E5B4B509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:95:7f:34:52:cc:d0:ab:ea:e4:34:61:e3:2e:
bd:c6:11:2f:62:a1:27:4a:99:6f:71:fe:0c:ba:e8:
d9:94:52:b4:1e:cb:7a:c7:ff:76:9b:93:6c:9c:75:
d2:c2:e6:5d:42:d4:8c:cc:10:92:01:c9:6d:cc:2a:
72:d6:fe:57:db:86:98:7d:fd:87:86:5d:61:47:ef:
1c:a6:bd:fc:e1:d1:53:f2:d8:23:09:e0:b1:ac:8e:
51:53:d8:c1:c0:25:c7:2f:be:a6:a4:78:a4:bb:43:
90:84:42:70:7d:68:8e:4a:a5:36:af:f8:7f:a1:7e:
4a:98:49:59:bd:26:59:3f:6a:d4:e4:9b:29:64:be:
6c:35:59:ff:6b:a1:54:ac:c6:b8:ce:89:d5:a6:2d:
d6:9b:e2:fa:53:1c:45:02:dd:c0:06:67:43:67:aa:
de:28:1c:b8:9e:13:ff:d0:42:a5:37:59:4b:10:37:
bd:b9:65:39:61:08:56:7e:8d:91:4a:ae:b7:c4:25:
9d:4a:1a:a1:27:df:01:7d:dc:c7:69:99:8d:4b:96:
6f:13:6d:6c:a5:24:88:60:e0:db:6a:67:c0:11:a3:
a6:d4:3a:b2:e0:d2:00:3e:37:5c:d9:69:d7:90:0a:
35:05:8f:9a:15:14:67:8e:1d:a3:6c:a5:49:c0:85:
e1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:0B:C0:73:F8:0D:DE:E3:91:41:3C:0E:FF:68:9E:F4:E5:B4:B5:09
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3132342e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.124.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:a5:8d:4d:f7:6f:e5:2f:38:df:d1:ed:b3:f6:16:fa:85:18:
d9:19:f2:2e:09:79:ba:73:00:35:e5:57:2c:bc:13:a6:c3:0c:
7b:73:ef:4c:62:2d:61:37:63:38:3a:6b:4b:7b:e5:01:69:b5:
76:d3:46:d6:43:f9:02:75:63:74:e6:a8:56:d8:36:be:14:53:
0d:be:78:1e:8d:7c:c5:69:71:5e:a3:69:73:22:2b:26:0e:89:
5d:6e:7b:36:5c:d0:23:02:aa:0b:25:d0:7f:fa:86:5f:5e:8a:
c0:44:ae:4b:42:7b:86:03:45:8d:61:24:ba:ae:3c:17:cf:d9:
8f:62:57:8d:d2:e3:c7:49:0c:ac:4a:63:5b:de:3f:7f:19:c3:
af:cd:32:4e:3d:36:f4:c0:5b:39:53:66:f9:c3:10:12:8a:5c:
21:49:ae:2d:51:90:0a:85:be:56:9e:95:ae:ff:31:b9:0f:5c:
f2:4e:48:ce:e7:b2:f1:c8:40:6f:49:64:66:37:e5:c7:08:f6:
28:ca:c4:d8:ee:f8:f8:f5:61:28:2e:c3:ab:df:94:f7:77:91:
0a:7e:a8:01:64:91:0c:39:58:22:86:61:ef:61:02:dc:50:7d:
34:bb:9c:37:31:f4:8c:c5:7f:45:f7:eb:f7:a3:fb:6b:4d:23:
20:e8:e4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:57:07 2026 by rpki-client