Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e37332e302f32342d3234203d3e20323138373937.roa
File: 3136302e32312e37332e302f32342d3234203d3e20323138373937.roa (raw, json)
Hash identifier: bKNxu8XGDjISurR0+am6hDcNBUY1R4AitbjVVpaFiJY=
Subject key identifier: 2B:C5:17:DD:C6:4E:60:2C:23:A2:BC:2C:06:7D:79:A4:D5:16:CA:A6
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 4CF458E407A7B7E213D788BD5693C91D3A0BFD9A
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e37332e302f32342d3234203d3e20323138373937.roa
Signing time: Tue 15 Sep 2026 15:31:52 +0000
ROA not before: Tue 15 Sep 2026 15:26:52 +0000
ROA not after: Tue 14 Sep 2027 15:31:52 +0000
asID: 218797
IP address blocks: 160.21.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:59:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:f4:58:e4:07:a7:b7:e2:13:d7:88:bd:56:93:c9:1d:3a:0b:fd:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Sep 15 15:26:52 2026 GMT
Not After : Sep 14 15:31:52 2027 GMT
Subject: CN=2BC517DDC64E602C23A2BC2C067D79A4D516CAA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:57:71:51:2d:f8:dd:ab:8b:d4:91:90:ca:35:
86:18:26:3a:af:c5:fd:d7:78:cc:f8:65:e4:56:df:
8e:1b:06:80:87:a9:f6:e2:98:62:4a:ed:76:bf:88:
55:35:02:1f:00:62:65:8c:b3:b8:c6:0d:12:09:41:
ba:50:89:07:02:a9:75:99:9e:52:6c:c3:55:5a:18:
ec:83:df:cb:85:e9:be:2f:1d:12:2d:ec:fb:07:a2:
d5:ce:0f:43:f7:ef:d6:fb:d8:25:e3:c5:2b:89:28:
74:8a:ea:d6:67:ee:64:60:b8:12:e1:d0:97:2b:cf:
d8:64:6c:36:3b:df:6d:e6:24:63:40:59:59:8d:c1:
2a:37:b0:f1:19:d8:f5:58:28:a4:31:16:dc:d2:78:
cf:42:1b:d3:d9:43:79:c0:23:7d:77:52:93:d9:85:
e2:da:e8:2a:fe:40:2c:47:1a:84:3b:3f:02:89:de:
fd:a2:5c:38:e6:2b:a1:11:d8:f1:f4:e2:db:a4:d8:
43:77:52:a4:56:bd:db:e8:90:dd:a0:99:e7:35:19:
0b:8a:48:57:b6:bd:69:0e:de:7e:c8:c0:6e:d2:0a:
60:0b:1f:b2:9f:ec:4f:fd:48:9f:62:22:23:9a:ed:
42:20:a6:3a:ca:c1:db:cc:cc:da:3d:b3:d1:f4:e5:
d7:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C5:17:DD:C6:4E:60:2C:23:A2:BC:2C:06:7D:79:A4:D5:16:CA:A6
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e37332e302f32342d3234203d3e20323138373937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.73.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:ec:bd:32:84:51:b3:90:58:06:cd:c2:ce:32:b4:f0:d4:de:
22:3e:9e:f2:10:ae:1e:9c:ee:a0:58:83:9c:5c:b1:dd:08:b2:
f2:34:da:d1:a4:3d:40:64:2c:8e:ff:12:07:8d:18:d4:fc:1f:
3b:04:31:3a:c5:df:a4:cc:8f:96:4b:d8:1c:f5:dc:dd:67:ce:
a8:d1:7f:4b:c6:10:45:90:0c:94:43:15:f6:8c:22:25:70:1c:
93:c9:93:a1:8f:1c:e3:27:b8:39:85:51:7a:fa:0a:9f:ee:6b:
af:ac:36:61:c5:57:a1:90:d6:25:46:2d:13:41:74:28:10:f5:
fa:50:d8:cb:a4:cd:f8:de:08:09:a5:31:ac:02:50:25:2d:33:
39:64:98:37:b5:6c:db:4f:17:1f:35:8d:c3:bd:ae:fc:34:5a:
a4:e0:c5:e1:8b:7d:d5:6e:08:a7:6d:5f:d7:29:4e:13:32:1d:
0e:c3:8d:a5:c6:73:81:1b:96:ee:d6:82:b6:db:3f:12:04:27:
f7:9e:94:22:07:90:40:13:a3:b0:00:9d:37:32:84:c1:86:10:
64:65:bb:da:ad:c8:a9:37:22:ce:de:05:ea:51:89:ea:cf:5b:
da:6f:94:a6:bb:00:4b:6b:af:b7:fd:f3:6f:ec:06:71:0a:a1:
af:62:d8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:59:36 2026 by rpki-client