Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e36352e302f32342d3234203d3e20323131323532.roa
File: 3136302e32312e36352e302f32342d3234203d3e20323131323532.roa (raw, json)
Hash identifier: /SU7Y+z1heEG/khHCdStpxIWpy2xqpF9vMoKbC/D1ac=
Subject key identifier: 8A:96:1F:13:D5:45:E8:5E:D1:69:06:3A:D1:75:DF:7A:79:7C:7E:5D
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 36B532460DDC82ECE4DEA576F4EE610CF84DC5C1
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e36352e302f32342d3234203d3e20323131323532.roa
Signing time: Tue 15 Sep 2026 07:38:38 +0000
ROA not before: Tue 15 Sep 2026 07:33:38 +0000
ROA not after: Tue 14 Sep 2027 07:38:38 +0000
asID: 211252
IP address blocks: 160.21.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:b5:32:46:0d:dc:82:ec:e4:de:a5:76:f4:ee:61:0c:f8:4d:c5:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Sep 15 07:33:38 2026 GMT
Not After : Sep 14 07:38:38 2027 GMT
Subject: CN=8A961F13D545E85ED169063AD175DF7A797C7E5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:69:27:4b:5f:56:fc:f1:ca:70:dd:0e:a9:d5:
25:b5:6d:18:0a:f8:0b:2f:85:60:fa:13:19:ee:d4:
0f:d4:e8:7c:e0:b2:77:b5:fe:17:e7:06:8b:36:c2:
1f:c0:06:b4:06:0e:4c:b1:25:d7:e3:6d:a6:27:d8:
8c:33:65:03:f3:ae:a5:87:dd:ef:03:b0:bc:2f:8f:
0a:2e:4c:b6:15:52:35:45:6e:91:f3:3a:ae:2b:be:
e1:2c:72:e8:59:25:c4:e3:90:4c:a6:e0:e9:69:b8:
00:5d:0b:6e:82:ac:d9:ba:9b:8e:12:97:f7:86:a5:
80:3e:e3:85:f6:55:a0:ab:24:87:c1:88:64:1e:95:
54:ed:c3:f9:e8:ec:54:49:5e:24:b9:9d:28:b0:91:
7e:23:b3:69:48:21:da:9c:92:c6:a7:1d:d3:53:e2:
71:de:47:b7:24:c3:77:c9:e5:5a:63:c0:ca:df:d4:
e3:05:50:63:8c:c9:81:ce:90:86:13:2d:f9:f1:49:
60:82:c0:4f:4a:13:55:8b:b1:4f:37:42:f9:e1:f3:
d2:16:2e:7d:36:69:16:23:75:a4:ce:11:99:a9:31:
4f:3c:e4:34:0e:e8:64:f1:e3:b9:87:84:28:03:a0:
b2:df:16:fb:5e:20:d7:b6:7c:69:fc:d9:ab:6e:01:
02:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:96:1F:13:D5:45:E8:5E:D1:69:06:3A:D1:75:DF:7A:79:7C:7E:5D
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e36352e302f32342d3234203d3e20323131323532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.65.0/24
Signature Algorithm: sha256WithRSAEncryption
12:52:ba:bd:f1:40:3e:72:23:3b:88:f2:d1:4f:2d:5d:87:11:
c7:e9:e7:fd:43:c9:45:6f:70:9b:c8:df:51:ea:36:35:dd:3a:
cb:30:6d:2b:55:f8:0c:8e:40:01:8f:fb:a3:47:ec:34:9a:26:
13:3e:ad:e1:fb:96:3d:f4:60:45:56:60:f4:19:e3:e6:c1:88:
bf:05:e3:db:3a:c8:b0:e6:b9:24:1a:61:c2:02:8e:bd:79:66:
dc:ac:8a:05:19:81:ed:9a:d7:1c:82:89:45:92:86:db:cb:b2:
11:5e:f9:56:f2:41:b6:d7:b1:ee:80:67:68:5c:b4:d8:c9:ea:
99:d1:eb:97:cd:cd:e4:ba:98:0b:46:17:9e:97:b8:99:fc:a2:
61:9f:79:57:16:30:36:b6:aa:aa:d5:4f:a2:c7:f0:45:1d:87:
bf:6c:91:0c:81:25:bd:d9:9d:5a:5c:96:77:7f:81:21:54:54:
eb:ae:bd:9f:26:18:2c:46:2c:18:dc:af:7e:6c:6d:45:c1:8a:
c3:c1:5a:ff:d0:f6:ab:7b:da:61:4b:8d:fc:66:b3:37:1b:41:
b9:af:c4:b9:16:5d:30:d6:db:6c:52:b6:8a:24:f6:97:0f:05:
68:1e:c5:ad:42:96:dc:14:96:f5:84:8f:d8:63:e8:c8:0a:f6:
86:5d:9f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:50:28 2026 by rpki-client