Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e37302e302f32342d3234203d3e20323131323532.roa
File: 3136302e32312e37302e302f32342d3234203d3e20323131323532.roa (raw, json)
Hash identifier: 5LtbTo2RUWFRkTx3DZRNiCxyyqw7bPvXE21Oe3TL5yY=
Subject key identifier: 5F:D7:9C:8E:F4:B3:DE:E3:D8:28:8D:DA:CB:FB:BD:D5:9B:6A:8E:31
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 438ABDA577ACE881CA969E47C63189408BC68D74
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e37302e302f32342d3234203d3e20323131323532.roa
Signing time: Tue 15 Sep 2026 07:38:36 +0000
ROA not before: Tue 15 Sep 2026 07:33:36 +0000
ROA not after: Tue 14 Sep 2027 07:38:36 +0000
asID: 211252
IP address blocks: 160.21.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:59:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:8a:bd:a5:77:ac:e8:81:ca:96:9e:47:c6:31:89:40:8b:c6:8d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Sep 15 07:33:36 2026 GMT
Not After : Sep 14 07:38:36 2027 GMT
Subject: CN=5FD79C8EF4B3DEE3D8288DDACBFBBDD59B6A8E31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0d:4f:0b:13:c4:22:46:92:dc:1a:62:80:47:
05:ef:6d:d7:74:d7:24:ec:21:96:fa:12:d5:74:2b:
b7:cb:3b:78:ac:86:1d:56:a6:6f:21:d2:28:3c:2f:
d6:0d:25:c5:f7:bc:d6:ea:00:74:09:30:73:ca:43:
f8:26:e7:fd:5a:b8:24:ae:53:58:f0:85:c5:0e:c9:
5e:7d:13:bd:9c:50:e8:6e:95:56:f6:e4:b5:d4:da:
4f:68:bd:64:bc:4a:3c:5c:43:fc:12:32:f9:58:14:
15:f6:c4:63:04:c9:59:0d:b5:5f:5d:09:ba:46:79:
21:96:21:e1:63:4e:fb:4d:5d:d4:98:c9:e5:c0:65:
5e:df:e3:97:8c:6a:e6:22:c8:b6:59:04:a6:fa:b5:
93:2b:50:2e:db:f4:6c:12:dc:93:c8:ee:5f:85:ae:
f2:ab:0f:ed:dd:dd:64:d4:1b:d5:a0:8a:03:fc:31:
28:e1:64:44:6c:09:e1:a4:1e:17:15:b9:2c:00:7f:
90:49:e1:2e:bd:ef:a5:a4:36:85:ea:56:53:79:94:
a2:61:25:17:88:12:8e:34:69:2b:e8:f9:97:ea:2e:
0b:69:c2:f2:95:a3:94:4b:e7:9b:64:a0:4d:38:43:
da:3c:b8:63:bd:61:cd:51:1e:fd:73:8f:25:ea:a6:
d8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D7:9C:8E:F4:B3:DE:E3:D8:28:8D:DA:CB:FB:BD:D5:9B:6A:8E:31
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e37302e302f32342d3234203d3e20323131323532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.70.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:37:48:34:07:93:25:2f:bf:29:a8:5e:3b:88:fe:89:1a:67:
15:a6:36:23:83:4a:de:2d:a8:17:4f:81:02:96:45:ff:db:e3:
a6:d1:2f:eb:2e:1a:b5:97:ac:61:8a:f6:59:81:73:09:a7:53:
b2:64:9d:33:44:98:55:15:10:23:78:ef:ea:7e:11:02:5a:fb:
09:72:1a:d8:b6:24:51:f2:3d:76:cd:39:85:b0:c2:98:56:7a:
d1:91:6e:eb:b1:36:d9:bd:66:6c:3e:1b:d9:8f:1f:c7:22:5e:
34:a6:ba:2e:74:cb:c2:c6:7d:2e:cf:e3:ac:23:63:f0:8d:6f:
23:b4:7b:cf:f2:0a:bd:09:1e:40:a3:62:3d:57:7c:29:ed:59:
85:a2:26:d8:1a:3d:37:fc:5e:2e:f9:ca:4f:1b:d5:41:82:1f:
19:88:d6:15:e9:d2:bd:23:6d:52:fc:36:a2:fe:d1:b2:e9:ea:
03:64:25:0e:03:42:a6:00:31:47:fb:a6:b4:73:d2:be:45:9f:
9c:8a:42:5f:a1:c6:48:58:66:2d:cf:d5:a4:9c:2e:c2:94:0e:
5c:86:5a:05:66:35:f5:de:05:45:e7:5b:6c:18:4c:18:e3:f3:
d9:ca:cd:57:7c:46:44:18:23:b2:31:38:d8:50:48:5c:7f:e0:
5d:b0:00:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:52:55 2026 by rpki-client