Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3135302e302f32342d3234203d3e20343032363731.roa
File: 3136302e32312e3135302e302f32342d3234203d3e20343032363731.roa (raw, json)
Hash identifier: 5+lCSz0KWeyEEepvAPt9dHGZgng3hfdlT5MWTDruDEQ=
Subject key identifier: 4F:0A:F6:DB:05:53:9A:CD:AB:93:9F:0A:1B:6D:E7:34:A3:8D:5D:BF
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 0D1F622A0B7783F4C57DA5E45D776F6F9E3E6219
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3135302e302f32342d3234203d3e20343032363731.roa
Signing time: Wed 16 Sep 2026 10:03:10 +0000
ROA not before: Wed 16 Sep 2026 09:58:10 +0000
ROA not after: Wed 15 Sep 2027 10:03:10 +0000
asID: 402671
IP address blocks: 160.21.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:05:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:1f:62:2a:0b:77:83:f4:c5:7d:a5:e4:5d:77:6f:6f:9e:3e:62:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Sep 16 09:58:10 2026 GMT
Not After : Sep 15 10:03:10 2027 GMT
Subject: CN=4F0AF6DB05539ACDAB939F0A1B6DE734A38D5DBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9f:bf:5d:d2:14:96:94:e6:29:e3:59:b9:05:
e0:6f:95:e0:da:94:42:cd:0f:46:dc:8b:66:a3:30:
ea:09:a4:6f:56:19:ce:18:59:34:6e:5d:93:d2:28:
2d:b4:86:e1:e0:d7:47:52:7f:07:f4:78:1a:02:7a:
34:39:c4:ff:5d:b1:1e:13:13:61:13:4f:d9:47:33:
29:55:af:9e:d6:a8:4d:cf:65:bb:86:0b:3b:33:75:
fe:09:63:64:47:3e:66:69:00:fc:fc:c1:5c:33:f0:
2b:ef:7c:64:b1:72:8c:cf:8a:a2:5e:5a:61:44:ac:
3d:0f:bd:ba:76:41:0b:4f:61:d9:56:52:61:cf:88:
f7:2d:c8:13:03:2e:b5:82:4e:33:46:99:5b:86:aa:
d8:91:56:29:e5:7f:37:4d:4a:b9:74:bb:68:d4:37:
ab:05:e9:18:3e:4f:1d:f6:ce:f5:16:ef:e2:90:af:
fe:68:06:43:35:74:f2:9f:70:18:61:3a:21:9c:f2:
c2:a9:0a:4d:32:32:f2:b3:fe:8b:b1:95:1a:66:d1:
62:c0:eb:9e:17:3b:6d:f7:92:a0:0b:cd:3e:8d:04:
d2:f7:5f:00:fa:a2:34:7e:c8:65:a9:ab:b7:bd:d8:
0f:fa:c4:09:6f:8e:25:67:ae:22:3a:c1:81:59:f0:
ea:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:0A:F6:DB:05:53:9A:CD:AB:93:9F:0A:1B:6D:E7:34:A3:8D:5D:BF
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3135302e302f32342d3234203d3e20343032363731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.150.0/24
Signature Algorithm: sha256WithRSAEncryption
07:c4:d5:58:ce:d5:07:23:f7:7e:b4:96:53:39:a0:4b:4f:3c:
d0:60:88:25:35:cb:1f:9b:cd:12:10:95:b0:7a:ab:8e:89:19:
b2:ef:c9:1a:87:ff:7f:fb:c7:7c:02:f3:28:65:45:1c:b8:f9:
5e:55:e6:4c:6d:46:57:00:6b:18:12:54:50:a6:65:05:e7:ff:
4c:29:69:6b:11:17:4c:d1:0d:58:ef:f8:24:2e:1b:69:2c:f4:
df:36:af:75:85:40:c7:6f:13:76:b9:23:3e:21:65:99:0c:dd:
31:4e:c7:59:5d:f0:96:be:52:04:c1:1c:74:70:42:16:27:6e:
70:c6:32:29:91:0c:96:05:1d:03:0b:e4:17:d8:84:33:97:15:
0a:07:ab:83:a9:50:99:87:b7:e4:c4:58:ef:27:a3:c7:c7:59:
94:fb:87:db:d7:04:87:a4:85:0c:ae:49:8a:b5:06:a8:1d:4a:
d0:fd:cd:b6:b1:79:b4:2f:d0:d1:a3:cc:b7:ba:02:df:7a:62:
94:b5:f7:3e:0e:81:f6:50:96:c2:21:76:90:e2:12:2c:61:bf:
d3:32:56:6c:bc:55:61:65:55:84:2a:ca:9f:f7:54:ef:0f:6c:
38:24:e0:ad:fc:ce:0c:cf:c6:dd:43:35:68:e7:85:1a:59:8b:
0e:19:6a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:36:23 2026 by rpki-client