Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3130352e302f32342d3234203d3e20383334.roa
File: 3136302e32312e3130352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: Q9SzFfYoqVE0ZvIjLw3/8eRxlBKZ/03hF5yvoCcXOew=
Subject key identifier: 89:57:97:3B:FF:91:DC:A8:DC:AF:74:42:F8:CD:DD:61:EF:8E:90:73
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 0DB201DC108B2B80C253282BCF5138044C00CC64
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3130352e302f32342d3234203d3e20383334.roa
Signing time: Thu 12 Nov 2026 12:48:08 +0000
ROA not before: Thu 12 Nov 2026 12:43:08 +0000
ROA not after: Thu 11 Nov 2027 12:48:08 +0000
asID: 834
IP address blocks: 160.21.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:35:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:b2:01:dc:10:8b:2b:80:c2:53:28:2b:cf:51:38:04:4c:00:cc:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Nov 12 12:43:08 2026 GMT
Not After : Nov 11 12:48:08 2027 GMT
Subject: CN=8957973BFF91DCA8DCAF7442F8CDDD61EF8E9073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d5:8a:88:30:f5:17:dd:43:58:a0:4e:8a:9c:
6b:e4:83:1b:80:d1:6e:fa:fb:52:f0:0e:ec:e2:93:
64:27:4c:eb:f4:e8:91:10:57:7f:6b:86:72:55:b8:
44:1f:7d:c0:8c:cf:36:9e:60:3f:56:c5:e0:43:38:
4d:2d:65:36:a4:9c:a6:9e:56:a9:14:09:8f:b8:ea:
14:7e:14:7c:bd:11:79:82:ee:0e:a6:dc:48:9d:5f:
5d:af:50:c9:53:b7:9c:82:ca:16:03:34:5b:93:3a:
89:55:f2:04:6d:c0:b6:df:ef:87:74:02:ba:b5:23:
7c:fe:5b:6b:28:b6:97:23:81:f6:94:a5:03:a5:da:
35:55:77:1d:34:42:1e:4f:0a:85:58:64:9f:f0:ec:
b6:51:15:a0:0c:2b:b7:14:89:48:38:22:c8:ab:9d:
cb:6e:c6:5b:cd:d5:3f:7f:1e:03:35:78:61:a4:ab:
30:db:dc:cb:73:ef:c9:56:d6:3a:63:84:70:06:d3:
68:3a:b6:84:68:ef:08:00:a2:e6:d8:59:80:c9:78:
9f:97:46:6e:38:0b:b2:ce:87:c5:cd:18:cc:7e:af:
68:ea:13:52:c9:4f:cd:0a:35:c6:bb:83:88:d7:8f:
ca:b2:fa:b2:3f:bc:b8:78:80:4d:ff:31:a8:b8:f1:
a4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:57:97:3B:FF:91:DC:A8:DC:AF:74:42:F8:CD:DD:61:EF:8E:90:73
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3130352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.105.0/24
Signature Algorithm: sha256WithRSAEncryption
87:9c:90:0a:c8:e3:b2:e6:15:e6:c9:f8:b5:9b:04:a3:ae:ca:
50:05:d9:b6:12:62:ed:a8:07:10:97:05:2d:3a:f1:11:f9:be:
8b:27:0b:f6:c7:13:27:f3:d6:ca:af:b6:df:5d:a9:09:a6:36:
e8:4c:17:3d:9c:e8:5e:98:29:85:a2:5f:63:10:21:32:41:ac:
9f:7c:b3:20:46:90:55:9a:97:a7:9d:2b:4a:cf:69:2a:2d:46:
38:40:79:c6:65:4e:dc:98:bd:40:f8:bb:b1:b2:0b:0f:cc:19:
d1:6d:8b:53:ac:5a:f1:9d:32:84:ee:f0:57:39:54:86:e7:0e:
f2:37:a8:61:95:ed:51:d9:71:9a:52:fe:b6:e3:63:80:a9:81:
fb:1c:64:47:f3:17:83:63:46:fb:7d:1a:30:ff:9c:85:63:2d:
0d:2e:1c:73:16:f7:1c:ba:8c:20:89:51:26:9b:51:69:18:7a:
e6:72:72:6a:ae:01:b9:8c:33:eb:b4:0f:4a:77:a8:8c:eb:57:
98:be:ac:1f:d7:94:67:8d:e8:8f:b2:4a:72:3a:2a:9a:96:51:
4b:fe:ef:b4:47:fd:14:e3:03:e0:d8:02:ec:76:6f:02:7b:89:
a4:d2:28:fc:fc:1a:c7:14:62:6a:f7:cb:d5:58:2e:f7:d3:60:
8a:eb:1f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:39:40 2026 by rpki-client