Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e37332e302f32342d3234203d3e20323139313030.roa
File: 3136302e32312e37332e302f32342d3234203d3e20323139313030.roa (raw, json)
Hash identifier: WbGNOIp9REhp5ROv2BxCsW0zPIA+HK9IEdR8xrgDtV0=
Subject key identifier: 93:00:E9:05:33:62:96:69:77:3D:66:5B:50:3F:0C:69:37:F4:32:90
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 58BA0B51BDDC41B2F721682F8E37C8E62B8C6930
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e37332e302f32342d3234203d3e20323139313030.roa
Signing time: Tue 15 Sep 2026 15:31:53 +0000
ROA not before: Tue 15 Sep 2026 15:26:53 +0000
ROA not after: Tue 14 Sep 2027 15:31:53 +0000
asID: 219100
IP address blocks: 160.21.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:05:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:ba:0b:51:bd:dc:41:b2:f7:21:68:2f:8e:37:c8:e6:2b:8c:69:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Sep 15 15:26:53 2026 GMT
Not After : Sep 14 15:31:53 2027 GMT
Subject: CN=9300E90533629669773D665B503F0C6937F43290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:85:59:23:3c:9b:23:4a:d4:f3:54:e5:45:b0:
6e:f7:6a:d4:5f:14:03:ca:6e:dd:17:0f:1d:10:0b:
86:f8:7f:a7:fe:42:16:12:ff:77:09:8d:f3:c0:5a:
0d:8d:24:5f:d8:08:09:a7:6f:4e:67:c4:fb:be:2b:
31:16:3b:35:bf:86:5b:09:f0:d4:c6:bd:ca:35:8f:
f9:15:9d:a9:de:8e:5c:80:eb:0c:af:e6:29:c5:94:
ed:0f:08:70:50:e6:24:62:f9:d7:e9:26:42:5a:8a:
d3:3b:33:1d:98:50:33:f9:e1:e2:bb:91:44:1f:56:
c6:8e:45:a0:84:1f:1d:21:97:3f:1c:35:06:bf:67:
71:49:3c:4f:20:78:ef:78:1a:5d:95:c4:89:f6:1b:
03:9c:da:64:d4:db:81:83:cc:69:9e:18:16:99:e6:
f8:f4:33:43:dd:12:8c:43:99:60:b1:f1:54:87:a7:
e6:5f:ef:e7:b5:4c:81:b3:36:71:90:0c:39:b7:98:
c7:7c:06:06:d6:3d:99:88:09:6f:f0:28:99:10:03:
2c:8e:95:f0:e3:6c:58:ac:8e:49:79:e5:31:7e:3e:
04:da:1c:f8:eb:48:b2:85:bf:f6:18:c3:e2:62:72:
9c:a1:81:68:6c:c7:07:02:2a:26:36:54:27:59:d8:
53:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:00:E9:05:33:62:96:69:77:3D:66:5B:50:3F:0C:69:37:F4:32:90
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e37332e302f32342d3234203d3e20323139313030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.73.0/24
Signature Algorithm: sha256WithRSAEncryption
92:b2:47:a5:b6:af:90:c1:89:d8:09:18:97:c9:8e:a9:7b:90:
05:fc:bb:ad:04:a3:25:98:21:85:f2:b4:29:7e:5f:b0:19:82:
0f:9d:52:53:42:ec:00:83:04:2d:03:ac:a6:a5:0e:f2:fa:c9:
e5:cd:80:ca:cd:a6:33:88:dd:eb:2a:1d:e7:a8:cd:3a:8c:b1:
34:af:ee:f3:43:92:52:b0:5e:ca:09:d6:56:ae:5c:d6:d2:43:
57:b3:f7:5a:3d:e9:bb:7c:5c:b4:ec:24:07:4f:fe:f2:d7:dc:
4c:d6:dd:17:61:e4:27:f7:0a:a8:b5:74:f6:d5:6f:0f:ff:26:
d7:e6:31:35:6b:89:4c:36:87:9a:a2:9c:1e:14:80:95:1e:0f:
45:49:42:87:4b:ec:2d:c9:1a:26:10:23:d2:aa:29:d6:0d:78:
da:df:a5:5c:2f:07:30:63:36:ff:49:46:63:8f:8e:47:ec:c7:
7f:21:2e:fd:1c:a2:03:6b:3d:8d:77:d1:6d:6d:c3:8e:9d:5a:
21:8b:51:72:2b:35:5f:01:c7:c7:eb:6c:af:3d:c4:9b:d1:27:
bb:d7:9f:d4:de:11:06:fe:5a:1c:c2:80:2d:ee:b5:47:1b:b6:
e0:a8:db:4d:c4:47:5a:1d:99:af:c4:5a:e2:7f:ef:33:a0:2c:
1f:95:e7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:06:32 2026 by rpki-client