Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e37312e302f32342d3234203d3e20323131323532.roa
File: 3136302e32312e37312e302f32342d3234203d3e20323131323532.roa (raw, json)
Hash identifier: sfQnxE6jHroxCFciBlY2rlzuq5Kr6HTkH6/tU05da3Y=
Subject key identifier: 58:D2:30:74:C4:38:9B:C4:6F:96:64:96:F0:4E:FA:E3:D2:AF:49:E2
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 7332615955A708ABE951F8FEA5233E85E4B5FC08
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e37312e302f32342d3234203d3e20323131323532.roa
Signing time: Tue 15 Sep 2026 07:38:35 +0000
ROA not before: Tue 15 Sep 2026 07:33:35 +0000
ROA not after: Tue 14 Sep 2027 07:38:35 +0000
asID: 211252
IP address blocks: 160.21.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:05:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:32:61:59:55:a7:08:ab:e9:51:f8:fe:a5:23:3e:85:e4:b5:fc:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Sep 15 07:33:35 2026 GMT
Not After : Sep 14 07:38:35 2027 GMT
Subject: CN=58D23074C4389BC46F966496F04EFAE3D2AF49E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a1:d9:42:85:09:f1:c6:5f:a6:de:47:4d:52:
58:57:ae:33:9d:5a:02:09:d6:dd:23:cc:bd:ad:a5:
09:66:dd:03:d8:5b:58:b8:ee:80:21:1f:af:41:29:
0d:a9:dc:db:ec:6b:db:44:13:ba:94:26:a1:11:a3:
42:fc:52:a5:62:7f:bb:dc:e1:3a:54:6f:1d:db:bf:
6f:a4:b7:2c:cf:98:3f:a6:ba:89:0a:d0:0c:17:3c:
c0:1c:c3:a8:dd:80:8b:be:8f:c7:e7:8c:6b:40:55:
a2:24:51:55:b0:f4:57:a8:82:0f:d4:6a:0d:59:d6:
6a:c0:40:19:aa:4e:46:46:d6:a3:1f:7e:1d:e5:b8:
db:fb:34:b6:14:36:44:d4:ac:bd:4f:95:1a:62:31:
54:a5:2c:b9:d8:5d:78:7a:cd:2a:00:18:e8:12:ea:
df:23:89:55:66:82:75:12:62:4d:ea:fc:53:95:5b:
7d:73:b9:0e:81:ca:8c:a8:cf:5b:de:4d:65:8d:2d:
fa:1f:f0:d5:6d:47:a3:67:ed:f0:03:a4:3d:b7:5c:
77:74:92:eb:5b:d3:5d:ae:40:ae:63:e7:4c:63:63:
03:75:c0:9c:bd:7a:9d:5f:2b:4e:d3:64:0d:b5:20:
e8:41:88:a5:9c:51:bb:2d:1f:50:a6:64:c0:c7:11:
11:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D2:30:74:C4:38:9B:C4:6F:96:64:96:F0:4E:FA:E3:D2:AF:49:E2
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e37312e302f32342d3234203d3e20323131323532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.71.0/24
Signature Algorithm: sha256WithRSAEncryption
42:7b:ed:1b:ad:76:2c:27:05:a3:5c:42:39:94:78:7b:52:31:
71:1d:28:f8:a7:aa:28:b7:c5:7f:b9:91:c3:e9:a3:14:f5:f4:
17:04:02:0f:20:5f:32:3f:43:98:8e:e4:19:14:f1:7b:c9:03:
58:67:72:9c:f3:5a:13:5d:54:7e:d5:89:12:2f:8a:8d:3b:af:
4e:7f:92:8e:d7:de:a3:f3:bb:25:7a:76:9a:ec:4b:a2:fb:81:
a5:b8:c0:43:29:8c:79:42:05:33:ce:8b:d8:1e:85:fe:a6:27:
4c:a9:3c:e0:22:29:0b:12:d4:32:5b:40:42:ac:70:a2:01:5c:
fc:af:92:04:3d:8d:86:42:a5:b0:6a:16:f4:c0:16:0a:6a:67:
35:d1:ed:79:aa:fa:08:d4:02:df:00:2b:24:f2:cd:db:52:b2:
92:a4:d7:f1:96:2e:c6:37:6a:bf:fb:62:ae:5b:e8:08:88:83:
e2:5b:41:21:bb:3f:25:67:b8:60:a5:25:2a:f3:6f:1a:ea:38:
a0:c2:a4:04:d0:d5:c6:57:44:c7:05:ba:4f:57:bb:eb:d5:8c:
da:7b:5e:c2:ac:4f:5c:d4:e3:2b:ec:17:41:aa:85:c1:01:72:
4b:33:06:bb:8c:80:12:90:68:4b:70:bd:1e:46:31:a9:a8:80:
96:87:81:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:39:24 2026 by rpki-client