Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3135312e302f32342d3234203d3e20323138373339.roa
File: 3136302e32312e3135312e302f32342d3234203d3e20323138373339.roa (raw, json)
Hash identifier: lOaXWCjahBs5iMUUdylLOYypv9B0Rcf48ssM1+/BNEM=
Subject key identifier: BD:6A:6E:55:01:79:A2:3C:79:93:68:F0:A7:09:23:B9:0A:AD:94:A2
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 3F608CDB33B800BF423E5088E3D483007E03F2F4
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3135312e302f32342d3234203d3e20323138373339.roa
Signing time: Sun 13 Sep 2026 09:49:00 +0000
ROA not before: Sun 13 Sep 2026 09:44:00 +0000
ROA not after: Sun 12 Sep 2027 09:49:00 +0000
asID: 218739
IP address blocks: 160.21.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:41:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:60:8c:db:33:b8:00:bf:42:3e:50:88:e3:d4:83:00:7e:03:f2:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Sep 13 09:44:00 2026 GMT
Not After : Sep 12 09:49:00 2027 GMT
Subject: CN=BD6A6E550179A23C799368F0A70923B90AAD94A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5a:b8:d8:77:0c:51:da:f5:4e:04:04:27:db:
c0:cb:2d:c0:8b:99:64:c2:43:1e:16:84:99:a5:01:
7d:ef:bc:4d:75:9b:00:90:f2:f9:58:90:35:16:bb:
97:c3:9b:69:b6:f0:73:bf:5c:c7:b8:7d:b6:14:96:
e0:03:dd:de:8f:6f:d1:61:9b:73:72:a3:57:f4:1a:
85:ea:e0:77:36:10:dc:45:af:46:42:57:d6:fa:b8:
15:ac:90:e9:de:77:c6:19:5c:c8:f0:16:c6:27:11:
da:73:00:4b:af:e2:39:6a:af:d9:0e:7d:d9:23:60:
91:5a:08:e0:98:89:45:62:d3:4d:a1:73:1b:f7:ea:
0f:b7:74:d6:8b:94:70:d4:c5:27:60:77:81:33:77:
ad:ed:30:a7:c2:55:f7:d2:f9:cc:fd:21:db:64:14:
47:5a:0c:c7:3c:b9:39:d1:2f:cb:2e:08:d3:60:3f:
b4:8e:16:84:30:24:06:1a:48:fb:8e:35:cc:bc:b3:
2e:47:34:f6:f2:00:01:c0:59:fc:5f:db:13:72:2a:
5e:62:a1:7c:62:5f:ec:a0:7a:2c:48:62:6b:d2:82:
75:41:0b:38:9f:47:98:6f:5d:23:05:fd:54:5d:34:
13:9b:fc:2d:1f:14:67:34:9f:0d:b8:74:b7:ef:14:
be:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6A:6E:55:01:79:A2:3C:79:93:68:F0:A7:09:23:B9:0A:AD:94:A2
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3135312e302f32342d3234203d3e20323138373339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.151.0/24
Signature Algorithm: sha256WithRSAEncryption
08:41:2e:35:d5:c7:82:12:9a:ea:25:1d:db:a6:38:6c:b4:fb:
4a:fa:52:f6:48:0c:bb:cd:4c:a2:38:89:6e:c2:80:eb:4f:68:
95:2a:cb:bf:fa:18:70:4c:ee:85:03:82:71:09:93:80:e3:9d:
d4:b5:5a:8d:88:cc:41:ab:fc:3f:3e:e8:ac:f0:c5:1a:0d:f7:
a6:14:97:38:d2:cf:40:9a:90:21:66:cc:40:b1:53:1c:9e:03:
2b:eb:8e:df:9d:f0:30:d2:b5:bc:cd:f4:9b:ff:f0:48:00:6e:
31:52:9b:9d:0b:10:e8:8c:4a:e1:03:2a:a2:65:6a:dd:a3:0b:
08:32:48:5e:8a:bc:b4:b2:cf:dc:62:54:73:32:a2:e4:be:80:
c7:e6:bf:6e:d0:69:12:57:92:27:69:18:82:3f:df:c1:74:e1:
6c:0e:b1:88:e3:9c:bf:fc:91:fd:78:27:2f:98:1a:af:59:09:
74:e6:2b:33:69:5f:06:c5:e4:fb:1c:38:b6:c6:53:e5:6b:ce:
cd:07:32:50:77:ef:04:0e:84:56:f8:c6:02:93:82:7d:46:88:
b1:2d:6f:3d:b6:3e:c9:0e:a3:ad:8a:2f:85:1b:3a:10:f6:7f:
66:a0:85:77:2e:a0:18:20:26:52:90:57:ae:3d:bf:d8:15:e9:
71:93:aa:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:36:16 2026 by rpki-client