Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3134392e302f32342d3234203d3e20343032383939.roa
File: 3136302e32312e3134392e302f32342d3234203d3e20343032383939.roa (raw, json)
Hash identifier: ct7ObKavY2d3BV6xeOKnKbvrZVhtOig//PNUE2jN3NM=
Subject key identifier: F1:BD:05:67:87:B0:19:EC:2D:E4:4F:7E:5C:B2:97:92:39:AA:85:81
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 7F57A093F5265B736BAF96FA804CF36DD65AFD3E
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3134392e302f32342d3234203d3e20343032383939.roa
Signing time: Wed 16 Sep 2026 10:03:11 +0000
ROA not before: Wed 16 Sep 2026 09:58:11 +0000
ROA not after: Wed 15 Sep 2027 10:03:11 +0000
asID: 402899
IP address blocks: 160.21.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:57:a0:93:f5:26:5b:73:6b:af:96:fa:80:4c:f3:6d:d6:5a:fd:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Sep 16 09:58:11 2026 GMT
Not After : Sep 15 10:03:11 2027 GMT
Subject: CN=F1BD056787B019EC2DE44F7E5CB2979239AA8581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5b:26:42:2e:24:22:14:c0:40:85:c5:fb:09:
28:8a:b0:a3:e3:a1:86:6b:bb:08:62:f6:c8:a7:f4:
02:fa:22:b0:5f:cb:43:b4:d1:9b:91:8a:dc:db:8e:
95:cd:56:92:90:3e:0d:74:97:29:ef:66:31:58:41:
02:d9:32:95:a8:1d:cd:34:9d:76:21:29:12:16:e9:
f4:40:93:af:e8:8d:f5:d2:10:0d:fd:be:5c:a9:9c:
f2:51:ce:13:ed:e6:37:40:76:ff:a4:fa:33:71:0f:
c7:f0:b3:35:ae:17:df:6a:70:1b:e0:ff:68:77:c1:
0f:05:02:d1:37:ef:99:53:61:35:08:b5:d4:87:0e:
e2:6c:97:ef:e9:ac:fc:97:b7:91:3e:bd:62:a6:b1:
11:50:15:65:98:e8:a3:30:35:54:a9:56:d7:f6:e7:
8e:dc:9f:6d:1f:f2:78:b6:cd:ae:c9:24:2f:41:25:
4c:d1:fd:00:0a:9f:d2:32:a6:f1:a9:2e:e9:6c:fd:
5d:7f:e1:29:72:ec:22:12:c5:c4:ef:9d:e6:0a:4c:
75:4b:fb:e8:02:48:7b:93:a3:82:45:fa:07:3c:5b:
fd:95:1a:a9:e0:56:b6:ef:bf:06:05:5c:16:be:95:
73:4a:f1:30:7c:35:7c:99:ee:4c:6b:7c:27:82:ca:
3b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:BD:05:67:87:B0:19:EC:2D:E4:4F:7E:5C:B2:97:92:39:AA:85:81
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3134392e302f32342d3234203d3e20343032383939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.149.0/24
Signature Algorithm: sha256WithRSAEncryption
95:75:d4:5d:35:c6:ec:69:8b:6c:a1:05:d1:61:e9:11:90:63:
0f:a1:74:31:f5:48:ab:53:1a:5d:32:de:f8:0e:9b:2c:07:c7:
00:15:17:4d:11:19:8f:16:ec:71:f2:1c:47:52:3c:94:9c:70:
61:02:ac:f2:e8:d1:63:06:a8:eb:f3:a3:f9:34:e3:65:86:a2:
56:db:1f:5b:45:d9:85:1e:27:74:f1:f1:1b:20:77:fa:ea:17:
70:59:b0:12:73:89:27:29:93:3a:aa:3f:e4:a1:65:bf:70:65:
3a:c3:0b:8e:ae:7b:f7:dc:b5:fd:e7:49:e7:67:96:0e:8a:84:
74:93:a4:4a:41:49:e8:ce:f9:f4:df:c0:9b:8b:d3:1e:ab:97:
4d:23:ca:a2:b1:a2:32:9a:a7:fe:b2:22:ee:da:90:a5:eb:a3:
71:42:29:08:cc:05:83:a6:f6:4d:11:cb:94:97:41:2b:f8:63:
fc:df:77:26:41:0d:10:c5:45:bb:2d:42:19:e1:e3:c9:94:c2:
a7:dc:fa:64:78:5f:be:74:41:95:37:23:15:c9:35:e3:af:97:
2e:69:8b:f3:89:bd:7a:17:ef:63:92:3c:bb:20:43:f8:67:c6:
7f:c9:a9:e6:e2:a3:4c:c9:1a:44:0c:47:f6:ab:59:80:df:7d:
c8:2c:77:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:07:09 2026 by rpki-client