Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3132352e302f32342d3234203d3e2032393134.roa
File: 3136302e32312e3132352e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: Ki3Df9ku8d72ay7bMQ2GyHfBVTjUBFtnO+dkQYp9AA4=
Subject key identifier: DC:E1:ED:EA:CB:92:F6:B7:C7:AB:6B:17:A0:75:FF:D0:0B:96:5A:41
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 062A9FB1DB1907C6BF2A5E9A20B85360E323968B
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3132352e302f32342d3234203d3e2032393134.roa
Signing time: Thu 17 Sep 2026 07:34:33 +0000
ROA not before: Thu 17 Sep 2026 07:29:33 +0000
ROA not after: Thu 16 Sep 2027 07:34:33 +0000
asID: 2914
IP address blocks: 160.21.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:59:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:2a:9f:b1:db:19:07:c6:bf:2a:5e:9a:20:b8:53:60:e3:23:96:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Sep 17 07:29:33 2026 GMT
Not After : Sep 16 07:34:33 2027 GMT
Subject: CN=DCE1EDEACB92F6B7C7AB6B17A075FFD00B965A41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:df:d7:87:e7:97:79:63:5d:16:0c:34:47:e3:
a8:db:32:8e:23:78:fb:87:52:7b:9a:eb:e2:2d:24:
dd:93:68:57:aa:1f:ad:cf:92:1b:20:78:f3:81:c6:
62:83:4f:bf:2a:d9:b1:46:dd:a3:c4:f3:04:e4:8b:
31:24:8b:12:27:aa:b9:ff:98:c7:34:61:94:27:31:
62:f6:75:d9:12:e0:40:a8:54:08:9b:f7:da:69:6f:
6d:58:12:ae:50:3e:21:8a:74:e1:ce:e5:ef:3d:9b:
14:3c:99:6e:6c:f1:04:ad:23:b0:eb:13:4d:59:5d:
2f:b6:43:72:f8:3f:37:db:7b:93:4b:e5:36:ce:80:
05:ce:27:89:2a:d4:47:1b:e4:97:86:19:fd:9a:ee:
bc:a9:5b:b7:67:d4:b1:5c:c2:70:cb:d4:40:71:52:
be:2d:8c:05:bf:b5:70:70:03:6b:af:6a:0e:67:36:
3a:c3:1d:87:56:c7:41:41:d1:ff:a1:dc:b6:05:60:
f1:4e:36:1a:d6:bd:98:cb:a7:0a:c0:89:07:ea:07:
39:f1:02:49:e2:c2:a5:b2:a2:ed:4a:4e:55:fe:32:
d0:d1:a0:70:3f:bd:ce:dd:54:aa:05:85:b0:4a:76:
9f:08:6c:6c:c9:de:c7:1f:a5:32:80:8d:f3:24:4e:
f3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:E1:ED:EA:CB:92:F6:B7:C7:AB:6B:17:A0:75:FF:D0:0B:96:5A:41
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3132352e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.125.0/24
Signature Algorithm: sha256WithRSAEncryption
04:42:9c:d2:de:f6:c5:2f:33:3e:0f:10:67:2c:c6:fb:88:1e:
da:2a:fa:f6:6e:9a:02:a8:d4:f6:c8:e1:3d:58:00:0b:3d:aa:
93:3a:06:5b:42:45:45:b5:01:59:aa:62:f9:4f:a4:06:dc:6e:
46:f4:fd:ad:bb:ce:29:90:c3:aa:df:9b:fd:91:42:82:04:36:
4e:bb:4f:ee:fc:e7:f9:9a:24:74:06:14:eb:d6:fd:e2:70:2c:
9b:cc:cf:10:37:56:d4:e4:42:a5:d1:c3:03:a6:43:2a:3b:97:
e4:0f:df:25:98:49:6c:eb:59:2d:6d:47:25:ca:e7:45:7a:4e:
9f:48:0f:6a:df:c2:83:c7:e9:1e:17:1d:9d:15:3a:d3:08:11:
04:b2:71:24:55:9e:1e:d1:80:f8:04:d4:84:7c:1b:59:71:82:
1c:38:38:ce:ed:f1:71:54:b7:70:c7:ae:3b:a3:df:90:45:b4:
46:79:88:a6:cf:dd:1c:89:3f:ac:33:33:e1:70:a5:bc:51:9a:
8b:9f:94:72:c7:c9:d0:12:fd:f3:21:18:1d:ca:f1:3d:6b:fd:
04:bd:60:10:a0:e9:57:fa:8a:cb:a8:d4:44:a1:63:3a:bc:09:
14:f1:71:c6:9a:87:a3:50:15:ff:c0:b5:d2:3b:75:9e:e2:5b:
d7:1f:22:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:37:36 2026 by rpki-client