Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3135302e302f32342d3234203d3e20343032383939.roa
File: 3136302e32312e3135302e302f32342d3234203d3e20343032383939.roa (raw, json)
Hash identifier: 24m2WQkfkZ4iIvIuhditCJ3SC1HidPJbtbgPMR/GaOE=
Subject key identifier: 7B:4A:BA:09:3F:50:05:F1:D4:1C:48:08:F4:46:DA:15:7E:65:C2:95
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 0523D7D390BCC1B211397FFAC03A2C3F67F6D1D2
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3135302e302f32342d3234203d3e20343032383939.roa
Signing time: Wed 16 Sep 2026 10:03:10 +0000
ROA not before: Wed 16 Sep 2026 09:58:10 +0000
ROA not after: Wed 15 Sep 2027 10:03:10 +0000
asID: 402899
IP address blocks: 160.21.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:59:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:23:d7:d3:90:bc:c1:b2:11:39:7f:fa:c0:3a:2c:3f:67:f6:d1:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Sep 16 09:58:10 2026 GMT
Not After : Sep 15 10:03:10 2027 GMT
Subject: CN=7B4ABA093F5005F1D41C4808F446DA157E65C295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fa:f3:2b:d4:9e:29:30:5e:e5:d3:97:3f:61:
75:a4:b8:ad:56:a2:b4:3e:ff:0a:2d:01:14:fc:46:
8d:96:8b:f8:a7:6e:44:4c:c8:4e:96:c1:ca:c0:47:
b5:57:14:aa:ab:07:3a:a8:9e:94:4f:e9:e8:d8:ae:
d7:c0:62:19:7d:1e:09:31:3f:ef:2a:da:7b:bb:5e:
4d:b5:f0:1c:5b:cb:0d:75:17:83:dd:28:91:cb:fe:
32:26:ca:e2:77:8f:b6:86:74:99:60:77:83:7a:18:
eb:be:54:d2:c9:96:7a:05:d1:15:bb:c2:2a:49:e2:
e1:b5:b4:5f:73:80:a7:d1:bc:d5:c5:78:07:35:73:
e1:30:44:32:3d:3d:92:bb:0c:28:3f:07:68:86:7f:
fb:19:6e:01:e2:5e:19:aa:4d:3a:d8:b6:5e:8e:59:
dc:ef:fc:6c:09:82:0e:f2:49:b7:ea:be:4a:78:95:
93:d6:40:10:9a:ed:de:11:55:6a:57:1a:02:26:36:
10:11:27:3d:12:ef:3a:f9:5a:d1:3b:34:da:94:68:
5c:ae:61:b1:8b:64:20:51:b1:13:1c:42:6c:ea:23:
c9:fc:9a:2c:6c:a5:2d:1b:ab:37:a7:d9:18:5a:15:
65:c9:59:15:94:03:5a:d4:76:c8:24:d7:41:bc:ae:
52:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:4A:BA:09:3F:50:05:F1:D4:1C:48:08:F4:46:DA:15:7E:65:C2:95
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3135302e302f32342d3234203d3e20343032383939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.150.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:0a:de:d1:d0:0e:2b:b1:2b:e4:37:f1:b5:8c:ab:f2:ab:4f:
6d:47:4c:c8:6b:21:64:05:ea:61:03:01:a8:b2:b0:26:8f:16:
18:a2:69:e4:1a:be:a7:56:fe:93:2b:33:15:43:c9:f1:20:19:
d5:be:72:01:ab:c2:2e:f7:39:3b:db:02:54:71:11:ce:b6:a1:
9c:4a:35:13:ba:b3:63:f8:e8:c2:41:4b:97:7c:2c:40:31:69:
91:52:3e:ce:bc:9b:a9:32:94:c3:f8:9c:7d:2a:64:d3:3d:1c:
22:93:e1:34:60:5e:0e:c1:c8:04:30:27:f3:90:53:5f:07:61:
cf:05:3e:9f:37:84:cf:f2:87:f8:ea:dd:95:ea:b2:aa:af:b1:
1d:aa:04:d8:42:43:fe:5b:e4:76:4f:03:2c:0f:c7:0a:37:26:
e2:cc:0a:ed:ef:05:15:89:e0:b4:c1:4b:21:b9:b9:fd:ae:51:
e8:02:23:f6:a4:fe:27:0d:e8:c7:79:83:b4:2e:ef:a5:5a:f9:
e0:f6:94:29:e0:ef:1a:8c:79:e7:ff:29:38:09:df:3f:91:a4:
1d:02:e7:8d:fa:59:c2:ba:c7:b3:b5:e3:69:11:45:0c:ea:65:
f0:ab:8e:b7:9f:98:4a:d1:00:7f:9e:d5:13:14:00:6f:ab:36:
74:1b:dc:49
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUBSPX05C8wbIROX/6wDosP2f20dIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRiZTRkODdmY2JlNmNjYTdjY2U1YjMyNTRmNjk2ZGJi
ZmNmMGU1ZDAeFw0yNjA5MTYwOTU4MTBaFw0yNzA5MTUxMDAzMTBaMDMxMTAvBgNV
BAMTKDdCNEFCQTA5M0Y1MDA1RjFENDFDNDgwOEY0NDZEQTE1N0U2NUMyOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9+vMr1J4pMF7l05c/YXWkuK1W
orQ+/wotART8Ro2Wi/inbkRMyE6WwcrAR7VXFKqrBzqonpRP6ejYrtfAYhl9Hgkx
P+8q2nu7Xk218Bxbyw11F4PdKJHL/jImyuJ3j7aGdJlgd4N6GOu+VNLJlnoF0RW7
wipJ4uG1tF9zgKfRvNXFeAc1c+EwRDI9PZK7DCg/B2iGf/sZbgHiXhmqTTrYtl6O
Wdzv/GwJgg7ySbfqvkp4lZPWQBCa7d4RVWpXGgImNhARJz0S7zr5WtE7NNqUaFyu
YbGLZCBRsRMcQmzqI8n8mixspS0bqzen2RhaFWXJWRWUA1rUdsgk10G8rlLvAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUe0q6CT9QBfHUHEgI9EbaFX5lwpUwHwYDVR0j
BBgwFoAUVL5Nh/y+bMp8zlsyVPaW27/PDl0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTc3NTU2NjctYjg0Yi00NTdhLWE1OGMtYjVlZGMxZjVl
OGUwLzAvNTRCRTREODdGQ0JFNkNDQTdDQ0U1QjMyNTRGNjk2REJCRkNGMEU1RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1ZMNU5oX3ktYk1wOHpsc3lWUGFXMjdf
UERsMC5jZXIwga8GCCsGAQUFBwELBIGiMIGfMIGcBggrBgEFBQcwC4aBj3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNTc3NTU2Njct
Yjg0Yi00NTdhLWE1OGMtYjVlZGMxZjVlOGUwLzAvMzEzNjMwMmUzMjMxMmUzMTM1
MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDMwMzIzODM5Mzkucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BACgFZYwDQYJKoZIhvcNAQELBQADggEBAF8K3tHQDiuxK+Q38bWMq/KrT21HTMhr
IWQF6mEDAaiysCaPFhiiaeQavqdW/pMrMxVDyfEgGdW+cgGrwi73OTvbAlRxEc62
oZxKNRO6s2P46MJBS5d8LEAxaZFSPs68m6kylMP4nH0qZNM9HCKT4TRgXg7ByAQw
J/OQU18HYc8FPp83hM/yh/jq3ZXqsqqvsR2qBNhCQ/5b5HZPAywPxwo3JuLMCu3v
BRWJ4LTBSyG5uf2uUegCI/ak/icN6Md5g7Qu76Va+eD2lCng7xqMeef/KTgJ3z+R
pB0C5436WcK6x7O142kRRQzqZfCrjrefmErRAH+e1RMUAG+rNnQb3Ek=
-----END CERTIFICATE-----
Generated at Mon Sep 21 13:07:42 2026 by rpki-client