Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e37332e302f32342d3234203d3e20323139333934.roa
File: 3136302e32312e37332e302f32342d3234203d3e20323139333934.roa (raw, json)
Hash identifier: zANnyRpKA55dt6uivD3DACStC/pJryk+F5Pk/Zu5H9w=
Subject key identifier: BB:45:A2:1D:6C:FE:F3:D8:8A:DE:C7:BD:B5:71:5E:64:A2:23:F6:06
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 32E0159834991C7966E0F597879A2AE1F53D5C69
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e37332e302f32342d3234203d3e20323139333934.roa
Signing time: Tue 15 Sep 2026 15:31:52 +0000
ROA not before: Tue 15 Sep 2026 15:26:52 +0000
ROA not after: Tue 14 Sep 2027 15:31:52 +0000
asID: 219394
IP address blocks: 160.21.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:41:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:e0:15:98:34:99:1c:79:66:e0:f5:97:87:9a:2a:e1:f5:3d:5c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Sep 15 15:26:52 2026 GMT
Not After : Sep 14 15:31:52 2027 GMT
Subject: CN=BB45A21D6CFEF3D88ADEC7BDB5715E64A223F606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7e:ec:ce:e6:96:6d:25:4d:bb:27:ae:2c:7d:
bc:26:3a:37:8f:75:16:bc:18:34:7b:c6:26:00:5c:
d0:d6:35:dc:15:3a:94:0f:eb:7b:5f:fa:f8:3d:95:
4f:8c:17:05:f3:2e:f1:5c:cf:78:1d:79:f4:c4:90:
a1:62:f5:52:aa:1d:c0:fb:9a:30:58:20:a5:d9:77:
1f:f1:f4:8b:bf:27:9b:4d:78:ff:8c:dc:f8:86:40:
35:e7:7a:d3:46:d1:33:ad:3a:49:25:f3:f7:5e:90:
ed:e8:d1:a5:3c:ac:0f:78:d8:23:cf:8b:53:0f:4c:
ae:3d:ed:8c:35:df:68:f2:d8:1e:cd:39:e1:56:3f:
b2:5d:3b:af:e5:64:69:f3:52:c4:4d:c3:20:d4:31:
fa:c7:d8:5d:5c:c9:fa:bc:6e:fc:fd:da:c7:85:3d:
e2:d8:c1:01:51:89:2d:51:89:aa:4b:0b:f6:2b:64:
93:01:d8:f9:d9:64:f4:d7:8a:26:3e:1d:87:0c:31:
ec:61:eb:05:62:80:b1:63:d9:c3:7d:2a:ae:77:8b:
e6:31:ec:b0:0a:ad:ce:da:93:78:c7:86:20:b9:db:
e0:2c:da:a8:c0:d3:be:9b:ed:25:2f:23:c4:76:8f:
b8:19:2b:ef:7b:0d:fd:2e:0a:d4:e7:8b:85:f3:19:
fd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:45:A2:1D:6C:FE:F3:D8:8A:DE:C7:BD:B5:71:5E:64:A2:23:F6:06
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e37332e302f32342d3234203d3e20323139333934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.73.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:96:7e:c0:cf:9c:b8:08:07:a9:c6:e6:a9:00:40:22:cc:3e:
87:82:ee:ea:8a:4d:9d:2d:85:e7:9e:a0:c7:a7:50:8c:04:d2:
19:63:e2:c7:e1:ca:67:89:f6:22:10:b8:67:78:6c:b6:1b:8a:
e1:b7:c4:99:3d:00:4f:04:59:80:a5:2f:3d:dd:cf:11:d2:0a:
3e:b0:7b:ff:09:46:76:f1:39:68:47:fb:b4:ac:c0:ec:d9:a2:
8d:88:cd:c3:6a:00:83:30:12:bb:b0:3f:07:35:6c:51:68:0a:
fd:dd:91:dd:64:4c:c0:91:11:12:7e:e1:92:7a:e1:54:3a:fd:
98:f8:e3:09:ae:05:57:70:e5:f8:21:bd:df:c2:6a:2c:cb:22:
28:e1:d6:70:17:38:bf:a7:99:6f:3b:57:99:c4:24:49:22:a0:
63:93:69:56:a6:83:54:ba:3b:7d:63:d0:c9:b6:db:2b:f4:7a:
00:ae:e7:c6:8c:aa:34:93:ea:fa:74:25:55:00:b2:b9:d1:ae:
78:6f:08:af:ec:b0:60:9c:6d:1e:d6:e8:c4:13:1b:d6:10:d4:
88:ec:53:f2:eb:b6:e4:56:bd:44:b9:01:e6:fa:17:b1:c1:47:
31:96:93:d0:36:67:be:1c:cf:f2:34:8f:7f:c5:1f:84:82:ba:
d9:7b:12:c2
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUMuAVmDSZHHlm4PWXh5oq4fU9XGkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRiZTRkODdmY2JlNmNjYTdjY2U1YjMyNTRmNjk2ZGJi
ZmNmMGU1ZDAeFw0yNjA5MTUxNTI2NTJaFw0yNzA5MTQxNTMxNTJaMDMxMTAvBgNV
BAMTKEJCNDVBMjFENkNGRUYzRDg4QURFQzdCREI1NzE1RTY0QTIyM0Y2MDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxfuzO5pZtJU27J64sfbwmOjeP
dRa8GDR7xiYAXNDWNdwVOpQP63tf+vg9lU+MFwXzLvFcz3gdefTEkKFi9VKqHcD7
mjBYIKXZdx/x9Iu/J5tNeP+M3PiGQDXnetNG0TOtOkkl8/dekO3o0aU8rA942CPP
i1MPTK497Yw132jy2B7NOeFWP7JdO6/lZGnzUsRNwyDUMfrH2F1cyfq8bvz92seF
PeLYwQFRiS1RiapLC/YrZJMB2PnZZPTXiiY+HYcMMexh6wVigLFj2cN9Kq53i+Yx
7LAKrc7ak3jHhiC52+As2qjA076b7SUvI8R2j7gZK+97Df0uCtTni4XzGf1NAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUu0WiHWz+89iK3se9tXFeZKIj9gYwHwYDVR0j
BBgwFoAUVL5Nh/y+bMp8zlsyVPaW27/PDl0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTc3NTU2NjctYjg0Yi00NTdhLWE1OGMtYjVlZGMxZjVl
OGUwLzAvNTRCRTREODdGQ0JFNkNDQTdDQ0U1QjMyNTRGNjk2REJCRkNGMEU1RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1ZMNU5oX3ktYk1wOHpsc3lWUGFXMjdf
UERsMC5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNTc3NTU2Njct
Yjg0Yi00NTdhLWE1OGMtYjVlZGMxZjVlOGUwLzAvMzEzNjMwMmUzMjMxMmUzNzMz
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM5MzMzOTM0LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
oBVJMA0GCSqGSIb3DQEBCwUAA4IBAQCiln7Az5y4CAepxuapAEAizD6Hgu7qik2d
LYXnnqDHp1CMBNIZY+LH4cpnifYiELhneGy2G4rht8SZPQBPBFmApS893c8R0go+
sHv/CUZ28TloR/u0rMDs2aKNiM3DagCDMBK7sD8HNWxRaAr93ZHdZEzAkRESfuGS
euFUOv2Y+OMJrgVXcOX4Ib3fwmosyyIo4dZwFzi/p5lvO1eZxCRJIqBjk2lWpoNU
ujt9Y9DJttsr9HoArufGjKo0k+r6dCVVALK50a54bwiv7LBgnG0e1ujEExvWENSI
7FPy67bkVr1EuQHm+hexwUcxlpPQNme+HM/yNI9/xR+EgrrZexLC
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:36:20 2026 by rpki-client