Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e36342e302f32342d3234203d3e20323131323532.roa
File: 3136302e32312e36342e302f32342d3234203d3e20323131323532.roa (raw, json)
Hash identifier: Rjv2Gl8DfJB5Qjwh83sgF9sjE/oftmhVtERfQ30M7TY=
Subject key identifier: 3E:C7:71:CA:17:33:74:2A:FD:D8:B0:CB:59:13:A5:79:C1:21:B3:80
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 7E219D627F72368FAC90F3DD7DC7A403A3E2E5B4
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e36342e302f32342d3234203d3e20323131323532.roa
Signing time: Tue 15 Sep 2026 07:38:39 +0000
ROA not before: Tue 15 Sep 2026 07:33:39 +0000
ROA not after: Tue 14 Sep 2027 07:38:39 +0000
asID: 211252
IP address blocks: 160.21.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:59:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:21:9d:62:7f:72:36:8f:ac:90:f3:dd:7d:c7:a4:03:a3:e2:e5:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Sep 15 07:33:39 2026 GMT
Not After : Sep 14 07:38:39 2027 GMT
Subject: CN=3EC771CA1733742AFDD8B0CB5913A579C121B380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:00:b5:08:30:bb:60:c5:d9:e9:e1:66:cb:63:
9a:05:cf:0f:70:15:75:8c:20:b5:ea:d0:40:2d:11:
12:a1:74:8d:c4:aa:2f:90:b6:ab:f6:9f:58:82:b5:
84:e5:dc:cb:4b:1e:1e:de:9b:0a:b2:3f:f7:f6:cd:
4e:62:cb:51:e8:08:a1:23:fa:b3:f5:b4:2f:9b:4d:
7b:a9:e7:6a:8c:0b:bd:58:31:4b:94:01:37:ec:cd:
48:00:15:d9:7d:3f:d2:d8:9b:20:0f:73:45:f9:51:
3d:da:95:22:12:ed:e4:4e:0f:8d:72:39:65:28:bf:
43:4a:a4:00:47:db:75:e0:1e:24:bc:ad:59:68:05:
ae:d4:09:83:7c:49:4a:e7:75:76:a7:cc:92:ac:b5:
2e:be:36:57:0b:f9:cf:b7:1d:a8:cb:61:f7:f4:19:
2d:9c:d4:b0:a1:fc:f7:bc:07:3d:2a:03:7a:58:29:
ae:2a:52:07:54:42:3f:38:e0:b5:4d:60:ab:83:39:
d4:dd:56:0e:4d:0a:78:51:17:54:4b:ab:74:6b:4d:
b4:37:a3:3a:e1:95:69:5c:4e:8c:26:1d:61:fe:c3:
16:9e:f6:f2:67:5f:c3:d1:12:6a:83:df:fe:1c:96:
98:67:e7:22:fb:9b:ed:ed:7c:04:cd:85:b5:b2:7f:
8c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C7:71:CA:17:33:74:2A:FD:D8:B0:CB:59:13:A5:79:C1:21:B3:80
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e36342e302f32342d3234203d3e20323131323532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.64.0/24
Signature Algorithm: sha256WithRSAEncryption
32:5a:ee:64:53:0a:a0:27:3b:78:f6:fd:ca:b3:4c:6f:ad:16:
46:c0:5f:b5:3c:35:46:18:86:53:f8:de:a5:2b:b6:7f:f1:8f:
ab:bf:b7:6c:2f:dd:ea:e7:00:22:28:b2:8e:a8:5c:f3:2f:77:
5c:71:84:10:a6:51:a4:55:08:52:b9:07:de:cf:4b:0d:7c:7b:
85:05:cf:df:a7:09:bd:ba:a4:77:53:02:5c:17:df:b5:5c:3c:
ca:1e:9d:7e:70:0a:3f:72:3d:06:31:b5:d9:ca:ae:4b:c1:ca:
8c:d8:ea:70:27:76:ec:73:87:81:fd:a3:dd:f2:54:d8:f9:e1:
3b:66:72:72:73:6f:c7:07:5a:15:a6:4f:ad:aa:3f:19:8c:76:
e1:95:45:16:c0:0e:62:3d:96:50:dd:7b:01:f5:0e:e8:28:8c:
f8:9d:70:5d:8e:4a:85:62:a7:92:32:ee:eb:82:60:83:99:1f:
ca:08:13:e7:9c:60:2b:fa:d7:2f:c6:aa:c4:d7:ff:d0:34:e3:
ba:26:bd:7c:9d:47:5b:fc:0b:5d:eb:ec:5c:63:85:23:45:d5:
ec:06:14:8e:6e:99:dc:69:fb:60:0f:b4:99:a2:e5:76:13:a3:
e7:21:c7:a1:81:0f:ca:70:ec:33:bd:ca:ca:ed:1f:d0:2c:33:
7c:ad:cc:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:53:21 2026 by rpki-client