Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e37332e302f32342d3234203d3e20323139303735.roa
File: 3136302e32312e37332e302f32342d3234203d3e20323139303735.roa (raw, json)
Hash identifier: 83uoT6rikBYMBfJcxSOn1HIDoc8h2vhgKvl12e+Us0s=
Subject key identifier: 92:D2:0B:CB:C8:85:11:3B:A3:B8:AA:DE:E9:35:97:7D:40:3B:1A:E2
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 1E3563C0DE39686A2E3ECE958574E5F4DC884601
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e37332e302f32342d3234203d3e20323139303735.roa
Signing time: Tue 15 Sep 2026 14:47:04 +0000
ROA not before: Tue 15 Sep 2026 14:42:04 +0000
ROA not after: Tue 14 Sep 2027 14:47:04 +0000
asID: 219075
IP address blocks: 160.21.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:59:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:35:63:c0:de:39:68:6a:2e:3e:ce:95:85:74:e5:f4:dc:88:46:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Sep 15 14:42:04 2026 GMT
Not After : Sep 14 14:47:04 2027 GMT
Subject: CN=92D20BCBC885113BA3B8AADEE935977D403B1AE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c5:8a:27:38:04:ad:ae:69:d5:29:e9:84:9b:
4e:e4:90:89:68:da:db:16:f2:93:43:c2:90:df:87:
ec:23:13:97:d2:8e:19:24:59:95:e1:b2:11:24:18:
6f:35:b5:c3:6f:80:52:81:27:f1:43:98:e9:71:b2:
fa:42:e3:5e:eb:19:fc:24:d6:82:f4:d1:47:9e:39:
9e:8d:09:ba:9f:62:c7:a1:dd:4d:c3:40:88:93:f6:
3c:b0:2d:b8:e9:23:88:c1:c2:ad:a5:41:c6:3a:87:
30:a1:d0:ee:19:3b:e9:5f:8e:8d:6e:93:d2:2f:3a:
df:4d:13:29:8c:51:a0:55:34:07:c0:7b:0b:66:43:
ef:4f:70:2e:80:7f:1e:34:27:19:60:a4:c3:74:d2:
29:d2:9e:24:26:75:8b:df:fb:7f:b0:dc:ae:b5:87:
08:4e:70:1b:22:ac:8f:0d:8f:db:71:f3:b0:25:77:
d6:2e:27:45:bd:d1:09:c1:e2:16:c9:0e:f6:0f:67:
d2:c9:db:e1:83:df:a3:e8:c6:c7:c4:f9:9c:c8:26:
a6:b2:f3:6f:59:11:63:9a:f8:8d:f4:fd:48:88:5b:
8d:1b:a8:7a:95:e1:28:67:f2:57:37:39:6a:c9:83:
7f:c6:c3:40:e7:9a:a0:df:76:37:7c:82:68:0c:54:
8e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D2:0B:CB:C8:85:11:3B:A3:B8:AA:DE:E9:35:97:7D:40:3B:1A:E2
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e37332e302f32342d3234203d3e20323139303735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.73.0/24
Signature Algorithm: sha256WithRSAEncryption
16:a4:ec:be:2a:05:fc:f8:a6:14:50:4f:38:87:ec:1a:93:e6:
9f:ba:97:ba:2a:c5:64:57:a7:97:04:2d:6a:ae:9f:41:fa:2f:
6f:3e:92:08:c3:6f:9d:91:71:75:69:fa:78:62:0b:f9:f9:32:
60:df:4a:d0:a8:cb:3b:2a:ab:f9:d4:73:a3:0d:37:c0:62:66:
99:eb:28:26:fb:5f:19:5a:4f:de:00:40:05:d2:45:a2:3c:be:
e8:55:b4:02:26:95:ab:e8:db:09:5e:02:41:0d:ea:4a:b1:72:
f4:20:eb:58:b3:d6:27:04:0c:3e:a3:4b:73:50:9a:4f:72:a6:
18:3f:69:04:3e:9a:29:36:50:92:d6:71:55:3a:79:d3:25:81:
8e:cf:26:24:9e:60:b3:f9:85:9b:2f:9c:18:dd:bb:b1:28:75:
75:eb:08:c1:5e:cc:d9:90:e4:8e:7d:a4:f1:65:4b:b1:cd:da:
8a:d3:ab:61:80:9f:dd:2c:02:75:e3:d5:f6:2e:40:73:de:87:
fe:1e:be:ef:e1:ea:f7:66:4c:bb:aa:7b:24:d8:72:97:ec:b1:
44:97:dd:82:98:da:f5:c2:76:a9:a0:01:8d:67:51:6b:00:29:
a6:00:a8:03:38:8a:cb:f7:7b:5b:d9:a1:e8:3d:e8:60:ab:68:
29:a6:1c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:59:29 2026 by rpki-client