Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3134382e302f32342d3234203d3e20343032363731.roa
File: 3136302e32312e3134382e302f32342d3234203d3e20343032363731.roa (raw, json)
Hash identifier: m/sva6P6lN6vGUnjgcy6ZKfllog8niKqOuF+V9Ut9x0=
Subject key identifier: E6:72:F9:08:EF:1F:45:51:8E:0C:97:86:17:05:AF:D9:F0:B2:8E:44
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 25702B3F442275276570B86BEDDD40059D986AA6
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3134382e302f32342d3234203d3e20343032363731.roa
Signing time: Wed 16 Sep 2026 10:03:10 +0000
ROA not before: Wed 16 Sep 2026 09:58:10 +0000
ROA not after: Wed 15 Sep 2027 10:03:10 +0000
asID: 402671
IP address blocks: 160.21.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:05:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:70:2b:3f:44:22:75:27:65:70:b8:6b:ed:dd:40:05:9d:98:6a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Sep 16 09:58:10 2026 GMT
Not After : Sep 15 10:03:10 2027 GMT
Subject: CN=E672F908EF1F45518E0C97861705AFD9F0B28E44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:06:06:bc:b1:58:69:e4:d6:8c:95:69:9c:1c:
38:34:39:d1:8f:e3:90:49:39:0f:ea:bf:03:4f:77:
c8:f0:07:31:b0:a3:8a:dd:7f:de:36:61:de:45:b3:
b1:12:2b:bf:46:19:6a:e3:f6:7c:33:77:f5:63:ce:
df:29:74:25:60:a8:e0:2e:71:6e:80:c5:54:56:e6:
df:43:70:10:b2:de:8f:0b:3b:7a:4a:2f:33:ce:44:
b1:5c:4c:0e:43:ef:66:ab:a3:a6:bb:d1:c7:40:ea:
39:4f:ef:c7:01:8b:62:55:20:dd:f1:b6:69:de:64:
0a:3b:4c:59:97:dd:9d:8b:20:8e:58:d0:36:15:aa:
36:f9:e9:ef:63:6c:d8:12:9b:3b:7f:6c:07:4c:92:
72:85:67:e7:09:b5:cd:96:1c:5a:0b:a1:0b:d3:11:
7b:5b:16:75:10:ed:91:c0:a6:ea:91:72:f3:76:f0:
2e:3c:92:03:8f:e1:e5:db:85:24:32:05:d3:7c:98:
04:fd:b3:56:31:17:9b:7f:53:90:ae:c7:12:89:e3:
7f:89:f5:c8:f9:93:19:ec:7b:d6:33:6e:86:ba:6a:
19:98:56:ec:76:39:46:7d:2d:04:cf:38:f7:96:3e:
78:ab:b1:12:7e:63:8c:a6:55:c6:ca:0e:71:ae:e8:
d2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:72:F9:08:EF:1F:45:51:8E:0C:97:86:17:05:AF:D9:F0:B2:8E:44
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3134382e302f32342d3234203d3e20343032363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.148.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:79:c9:2e:ad:d3:4e:b8:78:55:69:89:bd:09:ef:2a:22:e3:
8b:0d:b8:ed:b7:30:2e:47:3e:48:93:d0:64:02:77:90:11:be:
9b:54:2b:88:41:d0:1e:e3:17:55:40:4c:ec:31:dc:a5:ba:5b:
c0:61:94:ba:f2:43:9e:7a:13:c1:a1:ab:15:db:fa:c2:53:6d:
49:62:f5:60:69:98:b1:8d:ab:2a:e7:0b:ff:05:63:99:47:60:
5c:96:8c:fe:b1:07:e5:c5:ba:0b:55:dd:e7:00:ea:7e:ff:e2:
f0:94:75:90:cd:1e:65:74:59:74:f5:37:ec:6a:3c:6f:11:d8:
70:2b:2f:95:eb:fa:cd:f1:78:b0:04:dd:c2:e9:3c:21:62:fa:
32:75:5e:6b:6f:23:df:8a:49:f1:73:1f:4f:65:bc:31:09:d0:
b8:7d:95:7a:5c:b7:52:97:b4:96:4c:22:1f:d1:05:8a:38:32:
38:64:12:95:70:07:b5:6e:15:83:c7:7c:ef:f2:63:07:41:52:
a8:c1:5a:4a:e6:ec:18:4e:58:bb:9a:60:3e:5f:07:db:1b:a6:
16:2f:eb:1f:60:68:b7:31:fd:e1:8c:d4:31:ec:d5:1d:6e:c1:
4d:50:7b:6e:26:77:64:2d:d6:ba:8b:b8:6e:ba:ae:66:4c:db:
f2:13:02:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:36:15 2026 by rpki-client