Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e36372e302f32342d3234203d3e20323131323532.roa
File: 3136302e32312e36372e302f32342d3234203d3e20323131323532.roa (raw, json)
Hash identifier: vsr8F9PC6y44HVP+tnVQYPm52ghsraKKMzLuZrMCCE0=
Subject key identifier: 14:62:42:07:47:02:56:8D:98:34:17:3B:C6:0A:81:0D:6B:26:3E:49
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 22241651FB54D2DA05353A554A5E74CEFDFBCF73
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e36372e302f32342d3234203d3e20323131323532.roa
Signing time: Tue 15 Sep 2026 07:38:38 +0000
ROA not before: Tue 15 Sep 2026 07:33:38 +0000
ROA not after: Tue 14 Sep 2027 07:38:38 +0000
asID: 211252
IP address blocks: 160.21.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:24:16:51:fb:54:d2:da:05:35:3a:55:4a:5e:74:ce:fd:fb:cf:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Sep 15 07:33:38 2026 GMT
Not After : Sep 14 07:38:38 2027 GMT
Subject: CN=146242074702568D9834173BC60A810D6B263E49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:72:07:ca:cd:de:7d:c1:69:fb:33:19:11:0f:
0a:4d:43:dc:fc:8d:d6:5f:6f:40:2b:78:b1:1b:b2:
a6:e9:4d:27:5f:d2:5a:af:85:af:c9:27:6d:0c:59:
57:c0:c4:0f:0a:96:30:1e:95:fb:20:7c:eb:32:0a:
04:c9:5e:5d:5b:6b:68:de:93:8f:cb:d2:11:65:30:
a6:a4:57:39:d7:f4:ed:4f:50:c2:52:88:3d:b3:21:
74:e3:ba:5d:51:fd:97:0b:96:cf:ea:6d:02:5d:c1:
7b:aa:d2:95:81:22:4b:0a:14:46:42:2e:8f:1d:0d:
2b:05:52:e6:cb:8e:6c:cf:fc:75:ce:64:b1:b3:50:
40:f6:0f:83:c1:a8:35:db:c6:a7:18:f1:d3:66:a9:
5f:fd:e5:d5:12:6d:a9:43:e9:cc:5e:d1:f9:92:c5:
46:ce:3f:da:f8:f5:2a:53:8f:55:14:86:7d:f4:f6:
dd:9f:68:8a:12:75:65:97:78:4d:98:21:72:37:b4:
96:04:99:1e:52:1c:dc:0c:36:78:7c:f1:4c:f6:82:
39:6f:5f:c8:95:7b:f7:cf:fb:bb:4b:bb:8c:0f:3d:
53:39:c2:33:09:30:f2:09:e8:03:b0:2f:43:00:1c:
68:5d:ee:26:70:44:da:d9:71:d6:b9:84:76:80:81:
1a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:62:42:07:47:02:56:8D:98:34:17:3B:C6:0A:81:0D:6B:26:3E:49
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e36372e302f32342d3234203d3e20323131323532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.67.0/24
Signature Algorithm: sha256WithRSAEncryption
69:28:a8:7f:fd:04:0b:6d:b6:89:e2:57:19:e1:8a:81:57:4d:
53:38:05:ca:94:6f:d9:ca:73:78:07:a0:3b:5a:fe:9c:94:9e:
5f:e5:0b:55:42:e9:06:7e:92:b2:dc:45:d2:ca:c5:bf:2f:90:
31:79:97:e7:d5:59:a3:07:23:c2:d7:a9:76:f7:cb:b8:a8:cf:
ef:ee:61:4a:c2:00:b4:a7:5e:dc:b9:b0:46:33:d5:36:b3:87:
a9:23:df:93:0d:b2:de:a2:25:36:12:f9:74:7d:42:0a:d4:18:
a9:a3:88:3e:dd:55:95:26:f9:63:af:59:c6:cc:a0:16:9c:73:
71:3c:fa:19:0d:fa:3e:fa:2b:46:85:9c:0b:aa:d7:e3:71:b2:
2b:7b:68:11:fe:21:33:e9:44:64:81:60:c7:48:6a:f8:2a:0b:
af:b4:d8:8f:21:bf:f1:1b:71:78:b5:b5:df:1d:f9:11:d5:fc:
18:ed:ac:8a:d0:8c:bb:b0:11:13:9d:83:d0:2b:c5:a7:59:ee:
00:0a:62:cd:e4:73:b2:9e:b5:57:82:7d:b9:6d:bf:4f:fa:3c:
43:72:9e:c9:21:a1:d9:a0:5c:bd:4c:de:ff:f7:00:67:f8:40:
02:7e:40:c6:32:34:56:78:d0:fc:84:9b:5c:4d:6b:d0:7a:d7:
39:1d:e3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:27:45 2026 by rpki-client