Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e36382e302f32342d3234203d3e20323131323532.roa
File: 3136302e32312e36382e302f32342d3234203d3e20323131323532.roa (raw, json)
Hash identifier: +7KN57qlS27MvI3El0gjfXzRZQum1ud43BoMVLWMA18=
Subject key identifier: 7C:5A:FE:DB:82:21:B7:C8:5B:93:FC:4D:70:15:3F:A9:FD:FC:18:EB
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 41AD810E89FE3BE6A63ECB30F34E72C1B54DF398
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e36382e302f32342d3234203d3e20323131323532.roa
Signing time: Tue 15 Sep 2026 07:38:37 +0000
ROA not before: Tue 15 Sep 2026 07:33:37 +0000
ROA not after: Tue 14 Sep 2027 07:38:37 +0000
asID: 211252
IP address blocks: 160.21.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:59:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:ad:81:0e:89:fe:3b:e6:a6:3e:cb:30:f3:4e:72:c1:b5:4d:f3:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Sep 15 07:33:37 2026 GMT
Not After : Sep 14 07:38:37 2027 GMT
Subject: CN=7C5AFEDB8221B7C85B93FC4D70153FA9FDFC18EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:df:99:e3:a4:ad:c2:6f:bf:46:24:0d:ea:d6:
71:df:55:ed:f6:82:6f:e6:b4:67:eb:e7:a3:fb:e0:
54:40:ca:84:fd:ae:1e:00:80:bf:45:6b:9c:0b:a7:
65:d0:30:6e:56:2e:84:12:8b:3f:38:5e:b3:55:24:
6d:d2:b0:69:05:8c:5b:f2:28:c5:59:ed:a3:d5:e2:
ea:f4:82:b3:44:d3:b5:30:c2:d6:7a:15:12:55:7a:
52:88:ca:81:d7:82:fb:c8:97:0d:b1:0e:fb:8d:17:
f4:1e:05:a9:3f:80:73:32:cf:17:64:7a:41:8d:f1:
79:d7:df:df:d7:68:69:88:17:37:ef:9a:31:42:ed:
98:21:82:72:7d:c4:4c:63:52:8a:7b:6e:da:8b:f5:
ef:33:57:9b:36:a2:28:68:3c:9e:fa:da:e8:59:ba:
49:e9:f4:e8:01:e0:b5:f0:34:1b:58:b6:79:ae:ba:
8a:0e:b8:89:26:8d:83:67:8f:e8:66:e7:c6:9c:34:
68:47:94:bd:76:0f:35:a7:84:84:e2:d9:6c:99:e9:
05:e2:e6:3d:1c:c5:08:53:6e:d6:90:96:36:57:e0:
08:28:a3:d0:7f:cf:66:13:27:03:24:5d:20:6c:1f:
1d:15:8e:ea:f4:79:24:3b:1d:a6:5b:00:ab:90:7b:
b9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:5A:FE:DB:82:21:B7:C8:5B:93:FC:4D:70:15:3F:A9:FD:FC:18:EB
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e36382e302f32342d3234203d3e20323131323532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.68.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:24:61:b0:aa:b3:45:28:fa:a0:de:0b:51:36:62:db:95:fd:
97:ab:c0:7e:df:00:a1:db:6a:e2:3f:32:24:c0:26:88:ed:a9:
56:bb:46:a8:f2:8e:66:74:ef:f8:bf:5e:d1:ad:6a:b1:2f:7e:
37:66:11:8b:60:1d:d3:83:b3:75:ab:cf:2f:6b:4d:3f:78:e1:
85:c5:ee:6c:e7:25:6c:27:94:35:ef:51:37:e4:4e:09:45:3e:
ab:28:f1:6c:aa:0e:cb:ec:9e:20:44:e7:36:05:71:bf:ba:1d:
08:eb:a9:98:b8:0c:f8:c0:98:08:cb:1d:c9:f7:dc:1a:28:2b:
3b:4a:42:d4:0c:cb:63:c9:7f:e6:83:83:80:99:f7:b2:33:32:
af:35:f3:cb:e8:e6:27:e7:fd:70:3b:a2:d4:96:07:52:d7:84:
92:f8:21:87:b3:09:a8:0f:fa:70:12:48:3c:0c:5d:d3:55:53:
75:df:21:ce:60:93:31:37:d8:36:af:dd:52:59:d7:37:8b:49:
a8:6e:43:d9:0d:70:1e:2b:25:6b:08:6f:d9:1b:97:e6:1b:6d:
07:61:ba:3b:0d:37:b7:25:bb:aa:13:a9:c6:c0:0f:e8:44:a0:
e0:18:94:75:06:9e:76:0b:f2:92:c3:13:e1:86:56:fc:7d:e8:
ed:b0:8b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:09:13 2026 by rpki-client