Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3132362e302f32342d3234203d3e2032393134.roa
File: 3136302e32312e3132362e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: v9AzOY0KByXOX4HuLCa5IGXBZYVDzT2A732R7wYTUxU=
Subject key identifier: D4:F7:B0:C9:97:6F:F8:D0:EC:24:26:28:74:73:48:26:F8:A5:B2:18
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 45BF68532994CB2C58B88780FAE08CEA810DBE78
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3132362e302f32342d3234203d3e2032393134.roa
Signing time: Thu 17 Sep 2026 07:34:31 +0000
ROA not before: Thu 17 Sep 2026 07:29:31 +0000
ROA not after: Thu 16 Sep 2027 07:34:31 +0000
asID: 2914
IP address blocks: 160.21.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:05:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:bf:68:53:29:94:cb:2c:58:b8:87:80:fa:e0:8c:ea:81:0d:be:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Sep 17 07:29:31 2026 GMT
Not After : Sep 16 07:34:31 2027 GMT
Subject: CN=D4F7B0C9976FF8D0EC24262874734826F8A5B218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:33:94:26:9d:d1:cb:94:11:86:b7:70:66:30:
f5:25:db:b7:bb:83:44:a4:ec:01:a3:01:d8:57:a2:
cc:8f:ec:b2:a8:60:1d:d2:98:0a:a1:06:08:c8:4f:
66:4f:7d:2e:ca:59:c3:46:48:98:35:7b:84:eb:15:
b6:53:89:16:7c:56:b6:04:17:68:82:f8:7c:66:bd:
d0:53:f4:92:c5:86:d9:9f:23:ec:12:22:bc:a7:71:
93:16:37:67:79:12:97:36:2d:d1:30:ad:50:2e:16:
d3:a7:a4:be:a6:91:db:de:15:2e:b7:c1:3f:13:38:
0e:4f:b9:90:91:ca:ff:e2:e0:d3:a0:fb:2f:a6:d8:
4b:e0:8e:d3:b4:ca:54:8d:cd:24:bd:0a:6e:b3:cd:
f0:a1:24:a4:ef:2f:51:b7:97:68:d4:ab:46:8a:f0:
7a:22:70:9c:7b:85:df:1d:14:15:6f:06:a0:76:a6:
c7:d7:4a:ec:10:a0:e0:9c:7f:a3:31:bb:ba:00:38:
c7:29:64:b9:a4:af:45:7b:3d:5a:2d:c6:d4:2b:8b:
1c:35:58:77:8a:08:a8:86:8a:3f:7b:34:c1:db:64:
d0:8a:e1:39:87:c4:50:81:2b:73:96:75:ec:cc:fb:
99:7c:92:96:ee:a2:87:eb:0d:fa:c8:5b:8c:a9:82:
e0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F7:B0:C9:97:6F:F8:D0:EC:24:26:28:74:73:48:26:F8:A5:B2:18
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3132362e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.126.0/24
Signature Algorithm: sha256WithRSAEncryption
85:21:e2:5b:a9:aa:0a:5b:d9:0c:ea:6d:b7:c3:0c:6f:df:44:
00:e3:31:12:9a:1e:c3:a5:2b:aa:21:da:a8:ec:54:42:d1:22:
a7:11:8d:a2:c5:7d:89:20:47:a1:20:10:04:06:27:2f:9c:37:
79:b2:a2:ff:61:cf:6e:54:c8:5f:92:80:29:18:79:47:31:14:
83:4b:8f:65:49:1d:cb:4f:e3:75:a6:d1:a0:e2:10:fa:77:30:
43:7f:55:ae:75:b8:14:e2:29:1b:43:ad:cc:11:aa:f6:d9:27:
4e:43:30:60:ce:b5:b4:49:84:58:bf:79:06:aa:ba:7d:05:67:
d2:1f:d8:9d:7a:48:4d:60:6e:b1:50:8d:28:ac:d6:b2:d2:20:
be:cb:67:5c:0b:37:45:d7:8b:46:3a:c2:94:37:a3:d3:26:0a:
21:06:fe:7a:da:3e:2e:26:b2:45:62:6b:65:58:75:5c:c9:27:
f7:a0:cd:91:df:4e:dc:94:3e:70:56:5b:11:ae:05:17:4f:89:
18:56:db:7d:0b:df:01:aa:35:10:f7:6f:52:f7:b8:42:03:22:
3b:1d:9c:2e:ee:2f:3f:bd:4a:9b:e6:41:fb:8e:b1:e2:b9:ca:
bd:11:8a:3f:21:81:fc:e2:38:92:00:76:35:87:d1:a7:bb:4d:
60:a9:90:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:28:38 2026 by rpki-client