Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3132372e302f32342d3234203d3e2032393134.roa
File: 3136302e32312e3132372e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: LDTlM4dv5MpaaFYdCi3SJf7ro3jmP9WyJ0QSYo+jdGI=
Subject key identifier: 93:01:6C:C8:54:8F:A6:1B:C5:4B:A3:5B:A0:69:AB:B8:A9:8A:4C:CB
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 4E7C622017B36B85215AA9B2943880419AE6C91D
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3132372e302f32342d3234203d3e2032393134.roa
Signing time: Thu 17 Sep 2026 07:34:32 +0000
ROA not before: Thu 17 Sep 2026 07:29:32 +0000
ROA not after: Thu 16 Sep 2027 07:34:32 +0000
asID: 2914
IP address blocks: 160.21.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:41:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:7c:62:20:17:b3:6b:85:21:5a:a9:b2:94:38:80:41:9a:e6:c9:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Sep 17 07:29:32 2026 GMT
Not After : Sep 16 07:34:32 2027 GMT
Subject: CN=93016CC8548FA61BC54BA35BA069ABB8A98A4CCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f3:0b:08:5a:34:d7:4f:27:a5:8a:40:9b:2d:
1d:3f:86:25:ed:f0:92:20:f6:88:af:9e:1e:26:78:
e1:72:28:b4:c9:f4:f3:25:06:c4:82:4c:b7:1c:3d:
40:3e:18:c7:f0:dd:8e:ed:2c:d7:93:92:2c:da:42:
5f:37:b6:9c:99:b3:b4:e0:12:ed:66:60:0a:f5:fc:
69:c3:0a:68:f9:bc:77:70:11:94:55:94:a3:ec:b8:
f1:15:93:67:cc:f9:a6:f8:aa:fb:31:f7:bd:d4:89:
51:08:37:ba:ff:12:65:09:d9:ac:11:4a:90:b4:41:
fa:6c:34:2b:20:4e:f7:ee:26:24:fe:b8:78:9a:d1:
4f:ec:53:c1:cf:17:fa:c9:07:cf:43:2e:05:40:66:
2c:e8:7a:66:64:fc:29:2e:2b:03:16:09:0e:75:7e:
31:9a:b8:1c:53:a8:15:c9:9c:b5:20:9c:ed:7b:89:
a2:70:ff:60:6b:e3:c8:3a:f6:6a:a3:97:f8:2a:2a:
89:47:0b:d6:d1:15:cc:8c:5a:fa:88:41:3e:a3:4c:
6c:97:e1:67:4e:7e:e2:20:00:0b:0c:93:d2:2e:7f:
58:32:35:59:3e:bf:12:fe:c8:df:d2:20:85:67:7d:
b5:37:86:43:1b:65:2e:b7:f2:27:ba:d1:a8:fc:76:
6e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:01:6C:C8:54:8F:A6:1B:C5:4B:A3:5B:A0:69:AB:B8:A9:8A:4C:CB
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3132372e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.127.0/24
Signature Algorithm: sha256WithRSAEncryption
50:c4:ce:fd:fc:e2:2a:ef:c1:ef:d1:47:70:d1:34:6d:9e:a2:
9c:94:52:a7:c6:f9:2f:5d:41:3a:7b:01:f0:89:03:19:62:ad:
a6:0e:79:63:aa:66:48:94:42:68:48:5c:bf:c4:ee:35:a7:b7:
ef:16:d4:00:91:00:a0:7a:49:ab:0c:82:e0:af:05:a3:c1:b1:
2a:2c:2e:51:a8:7d:22:90:f6:e1:27:25:f4:35:0a:02:9a:ec:
65:09:6a:37:9a:05:aa:ab:cc:8b:f1:1e:3f:b5:c5:d5:04:54:
90:1a:da:cc:2d:f1:ab:6c:ba:a1:25:eb:cc:87:a8:8d:dd:4c:
93:26:3e:f1:b0:4d:65:c8:2e:b7:a7:1e:dd:85:fa:6d:22:0e:
54:ce:7d:03:3a:98:9c:f7:22:0c:da:cb:15:e9:31:d7:3a:4d:
49:21:34:80:eb:87:dc:42:c2:85:57:c5:ad:83:0c:8f:e5:28:
ed:e6:d7:0f:0f:2b:4b:c9:02:2e:29:45:1d:7b:17:47:50:84:
78:d6:7c:e6:dd:ee:d6:d0:c8:5b:c1:28:ff:eb:23:90:49:5a:
97:19:4e:1d:8f:92:a8:c0:b8:20:8e:a9:7f:db:bc:13:c1:23:
c9:b1:64:d9:c5:ba:da:d2:57:57:0e:8d:5a:18:ca:bb:3e:05:
b2:f4:49:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:33:38 2026 by rpki-client