Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3134382e302f32342d3234203d3e20343032383939.roa
File: 3136302e32312e3134382e302f32342d3234203d3e20343032383939.roa (raw, json)
Hash identifier: 5jsM+J0RLK+QQbrBOVIuPcZBJjK1N+BTImM81qdv9dQ=
Subject key identifier: 0C:66:76:1D:4D:A6:08:A2:17:29:89:33:BB:57:52:2A:B9:97:4B:91
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 38379BC43EC88FE28631463BD74359F5C5EE2697
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3134382e302f32342d3234203d3e20343032383939.roa
Signing time: Wed 16 Sep 2026 10:03:10 +0000
ROA not before: Wed 16 Sep 2026 09:58:10 +0000
ROA not after: Wed 15 Sep 2027 10:03:10 +0000
asID: 402899
IP address blocks: 160.21.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:59:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:37:9b:c4:3e:c8:8f:e2:86:31:46:3b:d7:43:59:f5:c5:ee:26:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Sep 16 09:58:10 2026 GMT
Not After : Sep 15 10:03:10 2027 GMT
Subject: CN=0C66761D4DA608A217298933BB57522AB9974B91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:94:c7:ef:b2:80:8a:16:38:bd:97:b6:6c:5f:
a9:2e:ac:06:d2:b2:88:57:db:7f:1f:6d:66:ef:8d:
b4:b8:ba:a8:44:bd:6d:17:37:a5:36:6b:ba:88:79:
67:d9:3f:4c:f0:92:5f:e2:2b:8f:f0:27:41:5c:b6:
38:62:d3:01:47:a4:9c:59:54:92:3a:ce:77:51:90:
51:9b:31:17:4d:f7:d8:fd:8d:de:b2:e2:b8:f2:3d:
af:44:e4:b8:49:48:e6:e0:df:79:c4:52:c6:85:06:
83:9c:89:9d:8e:86:e6:d9:a3:31:bb:fa:02:db:47:
b9:91:27:9b:d6:b8:09:90:00:83:b1:88:d5:4c:b2:
25:79:34:0d:09:8e:32:9e:c9:8b:7a:4a:07:f8:b6:
04:7d:79:e9:ba:0b:00:61:b7:6c:8a:7d:3f:9d:bd:
0c:3f:b4:d5:fa:41:9d:7b:87:db:6c:4c:62:a4:3c:
de:97:28:2f:48:ef:58:7d:fb:15:d5:46:7b:8f:3c:
d0:d3:d3:16:56:6e:26:5b:b7:2b:a8:2f:72:88:b3:
ca:e9:96:3f:02:0c:f2:3a:ac:96:70:10:50:f8:36:
8a:54:d7:21:95:88:60:98:e5:0e:04:1c:9f:db:a5:
3c:e3:2d:e7:2d:2d:c4:aa:3f:24:60:45:b5:bf:32:
8e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:66:76:1D:4D:A6:08:A2:17:29:89:33:BB:57:52:2A:B9:97:4B:91
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3134382e302f32342d3234203d3e20343032383939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.148.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:80:d2:dd:41:3a:94:52:8f:5c:68:80:2b:71:7e:46:05:a1:
8e:af:41:5f:0e:e2:e8:e9:9c:1d:61:2a:0e:7a:34:4f:27:37:
81:e0:24:3b:d8:f4:41:50:24:f2:55:c4:8e:66:88:21:6b:f2:
57:f9:38:c9:b3:b6:d7:e9:38:5d:cc:04:53:6a:ec:22:46:e7:
5a:0e:20:9e:04:02:3b:3d:90:08:11:93:bb:02:4f:1b:87:54:
bc:93:5e:21:4b:03:48:73:59:ed:d8:3a:3c:d0:8a:69:b8:de:
fd:e4:f9:28:3c:a5:03:58:b5:5f:2a:65:38:3c:74:80:71:f6:
49:f7:aa:53:9e:dd:3b:2e:a0:3d:ed:b9:f2:e3:26:2a:e9:8b:
2d:24:d2:7a:89:81:a9:03:17:c3:d2:bd:cc:4c:9f:69:e9:2a:
2e:3f:db:07:5c:1e:66:6e:03:43:cf:fa:a8:1b:fe:df:c5:25:
d6:c5:93:54:bb:13:91:55:8e:e6:2b:dd:d2:b2:40:be:30:c5:
2b:02:c0:f0:d0:74:a3:e0:0c:ab:71:05:fa:bc:53:ac:8e:e8:
3b:62:de:ea:20:64:9c:2e:d7:65:75:df:42:6d:eb:0c:14:a7:
db:c2:c2:17:38:75:11:1b:45:1f:af:a2:0e:08:f2:e0:c4:63:
f4:a8:eb:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:10:18 2026 by rpki-client