Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e36392e302f32342d3234203d3e20323131323532.roa
File: 3136302e32312e36392e302f32342d3234203d3e20323131323532.roa (raw, json)
Hash identifier: S60cLwEosKxBoSL9zs9wtm9PY1fOLQVxGBWKyNTHSaM=
Subject key identifier: B5:66:F1:8C:AD:B0:DB:EE:36:EB:7D:67:4E:28:23:0F:91:C5:09:F5
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 5CAA68EA30F5BB6FE1CE0581E6125689A974B974
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e36392e302f32342d3234203d3e20323131323532.roa
Signing time: Tue 15 Sep 2026 07:38:37 +0000
ROA not before: Tue 15 Sep 2026 07:33:37 +0000
ROA not after: Tue 14 Sep 2027 07:38:37 +0000
asID: 211252
IP address blocks: 160.21.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:aa:68:ea:30:f5:bb:6f:e1:ce:05:81:e6:12:56:89:a9:74:b9:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Sep 15 07:33:37 2026 GMT
Not After : Sep 14 07:38:37 2027 GMT
Subject: CN=B566F18CADB0DBEE36EB7D674E28230F91C509F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:85:ef:c7:0f:a1:a8:71:a5:64:de:b1:c6:01:
f2:67:21:83:79:f3:0d:e6:2a:2f:50:af:17:81:3f:
47:05:93:7a:22:9d:7c:54:0e:17:ee:a7:97:e6:74:
b7:04:14:0e:8f:44:bf:39:54:b0:61:b1:6d:3c:d7:
63:40:3a:41:ff:b0:36:52:bf:28:50:d9:b9:fc:00:
f0:ff:76:43:65:3f:0f:82:e2:11:dc:84:2c:02:30:
8b:12:e7:a8:32:1c:0c:15:f5:5a:0c:20:23:78:c5:
aa:a8:ce:1a:45:82:c0:06:ce:00:46:e3:c4:83:3e:
b7:0b:1f:e9:31:26:ab:b3:b4:7a:2f:0c:94:b8:b6:
4c:26:10:cd:54:aa:73:f3:d7:4e:59:01:c1:5c:b3:
87:d6:ec:02:6a:61:35:9f:b4:cc:d3:82:c9:d9:d5:
18:cc:fe:15:fa:7d:16:ae:d1:08:b6:d7:f5:ff:38:
70:33:4d:55:30:a3:32:35:d3:20:39:25:51:87:8d:
30:31:62:51:c0:48:39:ad:5b:4b:bb:41:09:a2:b3:
9d:e8:5a:9e:1b:b2:aa:8b:73:d1:7c:3e:84:96:a5:
a4:8e:2a:ab:a7:44:c1:19:0e:91:3e:38:28:6c:40:
79:00:ec:49:22:bd:38:78:68:72:26:0c:06:03:71:
87:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:66:F1:8C:AD:B0:DB:EE:36:EB:7D:67:4E:28:23:0F:91:C5:09:F5
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e36392e302f32342d3234203d3e20323131323532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.69.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:8f:13:7e:01:1e:0b:2b:f6:35:40:68:59:84:a8:1f:fb:39:
24:04:54:35:c2:98:01:e2:89:fb:90:07:0e:f2:68:8d:22:6b:
9e:e8:d3:03:88:6f:42:e0:1f:14:9c:07:34:90:33:21:40:8a:
4c:b0:ef:14:14:54:be:3e:38:65:d7:10:48:3d:60:4c:95:33:
c4:02:22:a6:2f:1a:b9:f2:79:e5:40:79:f9:7c:8a:16:0a:6a:
92:09:c4:ff:74:29:6c:a2:19:8c:f0:bd:b3:c6:e3:55:92:38:
f0:9f:9a:ac:b4:88:38:57:2f:2c:54:7e:fe:77:82:fb:3c:85:
15:83:a0:89:e5:26:ae:3b:d4:9b:c8:ac:9d:28:a9:2a:10:a5:
97:98:9e:85:60:c0:b6:be:fd:30:46:f0:f5:d0:c9:2a:2f:9b:
8b:45:77:c0:b3:47:11:06:a7:2c:85:cf:7f:19:49:d5:cf:bc:
ee:5f:cd:5c:ce:df:59:b8:cd:e5:10:3a:17:d8:a9:2f:bf:bf:
e3:5e:2f:ad:33:66:d9:bb:5d:ea:e7:d5:c7:9c:d8:5b:2f:27:
16:29:28:7d:45:ad:25:ee:e5:76:d1:3b:e1:56:22:e6:71:e6:
47:b6:21:53:7f:e0:97:ef:4b:0c:53:45:fc:68:16:1c:78:69:
24:7e:7f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:48:19 2026 by rpki-client