Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3134392e302f32342d3234203d3e20343032363731.roa
File: 3136302e32312e3134392e302f32342d3234203d3e20343032363731.roa (raw, json)
Hash identifier: ietLrqNoeZMcGYaIs9dInESnNDIrD0LKUGfoBrJVNQM=
Subject key identifier: 77:98:FA:D9:C2:33:01:38:6B:71:94:B8:02:CC:0D:E7:A2:E6:EF:0D
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 78867F122EF6E71CCF1C1B366DEBB6BCBA59E507
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3134392e302f32342d3234203d3e20343032363731.roa
Signing time: Wed 16 Sep 2026 10:03:11 +0000
ROA not before: Wed 16 Sep 2026 09:58:11 +0000
ROA not after: Wed 15 Sep 2027 10:03:11 +0000
asID: 402671
IP address blocks: 160.21.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:86:7f:12:2e:f6:e7:1c:cf:1c:1b:36:6d:eb:b6:bc:ba:59:e5:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Sep 16 09:58:11 2026 GMT
Not After : Sep 15 10:03:11 2027 GMT
Subject: CN=7798FAD9C23301386B7194B802CC0DE7A2E6EF0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:30:0a:8e:8e:e2:2d:9a:10:c7:9b:c0:70:86:
ae:59:c7:7b:6d:a2:5c:2d:0a:be:3f:ab:ee:09:52:
11:08:12:c6:de:56:d4:6d:d6:d2:46:19:79:a8:4b:
9b:e0:73:c8:4b:90:07:a6:af:23:d7:28:f9:9c:e3:
1b:0e:eb:01:2a:0c:99:a2:36:5a:5d:46:85:8d:8e:
a6:00:a9:c0:9a:cd:1a:87:44:a3:81:13:90:d4:bf:
ae:95:6a:51:71:2e:92:8a:0c:9b:a5:67:a3:a3:da:
99:f1:dd:35:bc:e7:ae:23:4c:d6:eb:ed:74:a3:eb:
88:4f:ba:d9:1d:1a:86:97:86:4e:d2:47:9b:a8:d2:
9a:de:b1:7a:63:3d:61:1d:95:e3:a6:11:24:eb:a8:
1d:4a:b4:2f:a7:0b:98:90:d0:71:87:f7:05:18:0d:
1b:f5:e4:24:b4:2f:75:52:e0:58:8c:22:bb:41:dd:
b5:4a:36:16:4d:5d:fe:66:1d:ce:6c:0e:db:c9:08:
32:20:98:2d:74:62:f7:8c:36:69:90:7c:de:0a:d8:
12:11:11:8a:4a:65:ef:20:88:e0:61:e7:56:7a:fd:
10:70:b1:5d:5f:80:2a:1d:80:ef:df:23:66:ac:b6:
91:bc:e4:53:86:c4:a3:fd:3d:38:b8:80:fc:01:db:
41:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:98:FA:D9:C2:33:01:38:6B:71:94:B8:02:CC:0D:E7:A2:E6:EF:0D
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3134392e302f32342d3234203d3e20343032363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.149.0/24
Signature Algorithm: sha256WithRSAEncryption
45:ac:3a:a4:6e:33:4f:57:f4:19:8d:21:c3:9f:aa:1b:b7:4a:
86:e1:21:03:23:0f:f4:5d:d3:68:b8:b5:0a:88:7b:93:4e:35:
75:3d:be:9b:3c:38:67:ef:1a:ee:30:21:40:aa:c4:c7:a2:1a:
38:ce:ec:b8:76:ea:48:da:b1:7b:ed:26:94:3b:b3:d8:b7:a3:
64:a8:a8:ca:82:b7:32:ad:5f:52:e2:c2:ef:8f:0f:75:9d:f5:
ef:bf:13:be:70:6a:66:94:28:69:ed:88:26:95:1f:1b:77:02:
6c:c6:eb:63:95:c7:38:a0:c4:f4:92:a5:55:69:31:19:a0:98:
1d:33:75:cd:c9:1e:38:ac:bf:69:f2:3d:47:76:95:c4:75:bb:
1c:e1:f1:c2:1b:1b:ae:32:c3:23:a9:d8:06:f5:f7:c9:c2:0e:
c6:51:59:aa:91:a9:ed:e9:eb:05:a0:d2:f4:7f:99:79:62:e2:
b0:ab:9f:80:24:fd:55:09:fc:5c:c3:19:0e:b7:6d:00:57:be:
82:fe:38:ef:ae:e0:4f:58:92:cd:0b:8d:66:2a:32:bd:29:fc:
4f:ca:98:25:be:81:4a:96:e5:bd:7a:15:c7:06:49:e9:f9:39:
32:d4:7c:87:0e:c0:8d:dd:03:23:df:0f:56:62:2e:94:21:04:
35:9c:69:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:47:39 2026 by rpki-client