Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e36362e302f32342d3234203d3e20323131323532.roa
File: 3136302e32312e36362e302f32342d3234203d3e20323131323532.roa (raw, json)
Hash identifier: Un/INFgCFpYRz8WbZ8robJJ2ky1iqqVNW2b7d6qxeYw=
Subject key identifier: 56:1B:B4:AF:E8:22:68:94:9A:5D:3D:35:F4:D6:A4:25:EB:60:B8:74
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 4BDDBA63530B76322B57C8499E25417587DE3DD0
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e36362e302f32342d3234203d3e20323131323532.roa
Signing time: Tue 15 Sep 2026 07:38:38 +0000
ROA not before: Tue 15 Sep 2026 07:33:38 +0000
ROA not after: Tue 14 Sep 2027 07:38:38 +0000
asID: 211252
IP address blocks: 160.21.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:59:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:dd:ba:63:53:0b:76:32:2b:57:c8:49:9e:25:41:75:87:de:3d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Sep 15 07:33:38 2026 GMT
Not After : Sep 14 07:38:38 2027 GMT
Subject: CN=561BB4AFE82268949A5D3D35F4D6A425EB60B874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:15:34:b5:2c:c5:41:71:92:56:86:a0:ef:57:
9b:8f:31:8f:eb:2b:14:44:f4:d5:46:df:5b:c2:c9:
11:17:de:db:17:f3:5e:3a:ce:9d:f1:ea:37:b3:d3:
4f:af:62:88:7f:ef:8d:ea:85:51:de:87:80:77:31:
82:88:e3:4e:e7:43:48:89:ce:36:2e:c0:5b:23:2e:
5b:88:10:f5:ae:e4:10:0c:0c:bf:8c:57:06:12:0b:
47:b6:df:b3:66:eb:19:54:73:85:af:d2:fb:8f:ce:
f6:ca:c5:ad:00:51:62:30:cb:b8:01:9b:e5:e4:ce:
b5:f0:f0:a0:7f:e1:55:56:00:c3:03:8e:7d:e7:76:
72:c6:ad:6c:98:ae:88:49:5f:ed:15:7b:60:98:76:
b2:fd:72:45:d4:70:82:5c:b9:dd:97:d4:93:71:69:
57:c8:89:25:5d:c4:36:94:64:4c:11:09:66:5d:fd:
76:f5:48:d4:34:f8:e4:74:69:8c:3b:eb:57:60:07:
13:57:75:09:20:bc:a7:87:a1:95:52:fc:f2:4e:78:
32:fe:80:ba:8c:23:e2:e0:4d:40:98:11:88:e7:df:
0e:66:60:cf:c6:bf:c2:7a:5c:02:86:57:e0:91:88:
8a:3d:f0:72:11:f7:6f:3c:92:58:0c:9a:14:7a:92:
46:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:1B:B4:AF:E8:22:68:94:9A:5D:3D:35:F4:D6:A4:25:EB:60:B8:74
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e36362e302f32342d3234203d3e20323131323532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.66.0/24
Signature Algorithm: sha256WithRSAEncryption
95:79:44:81:c5:28:1f:e1:b5:06:ee:5b:4f:2b:76:75:9a:e6:
5c:c4:67:a6:45:90:91:fe:a1:18:c8:a0:01:d6:7c:ae:b6:ae:
f3:f3:c1:34:3a:a9:84:7a:34:9b:7e:c9:5d:a9:c2:d1:c4:32:
38:17:30:0f:70:ed:f5:e9:38:36:53:dd:c9:79:31:0e:6e:3d:
c9:17:68:16:ad:9d:7b:38:13:e2:a8:01:cb:7f:02:22:89:1f:
b0:bc:0b:0a:fd:3a:86:52:09:a8:8e:e6:b3:5e:03:44:b7:1f:
03:fe:8f:ea:ef:53:71:a8:aa:24:12:08:ee:4f:86:49:28:d9:
bc:fb:62:01:0b:ed:70:f2:2e:85:84:3e:9a:9c:e5:77:40:41:
96:a9:f7:71:ef:24:24:df:e5:09:27:bd:bc:bb:85:b2:21:0a:
25:31:67:20:ca:b1:c8:06:6a:ab:05:2d:a9:3e:10:fb:8e:06:
81:6d:dd:a3:45:d9:e0:fb:66:d8:e6:7f:88:93:9b:f3:c2:0e:
2a:46:b3:21:11:87:2f:68:28:b8:d1:07:27:93:77:c6:a7:77:
32:ce:51:5b:91:be:a9:d2:cf:08:f5:ed:0d:f3:ab:6c:19:da:
ec:40:5a:2f:a0:4a:df:32:23:2e:1a:93:ac:7d:88:b3:5e:fb:
e0:40:24:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:08:33 2026 by rpki-client