Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3131382e302f32342d3234203d3e2032393134.roa
File: 3136302e32312e3131382e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: avkAe4PYhTSByXSsPpL3HmM2kDDGaboKgJlaiNYBnw0=
Subject key identifier: 35:BE:9F:0E:48:51:19:DC:7D:A8:8A:65:98:04:C4:8B:B5:68:2F:64
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 7CE75DE3C46226B743FE99D569FE896D6DC79A09
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3131382e302f32342d3234203d3e2032393134.roa
Signing time: Thu 17 Sep 2026 07:34:32 +0000
ROA not before: Thu 17 Sep 2026 07:29:32 +0000
ROA not after: Thu 16 Sep 2027 07:34:32 +0000
asID: 2914
IP address blocks: 160.21.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 17:38:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:e7:5d:e3:c4:62:26:b7:43:fe:99:d5:69:fe:89:6d:6d:c7:9a:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Sep 17 07:29:32 2026 GMT
Not After : Sep 16 07:34:32 2027 GMT
Subject: CN=35BE9F0E485119DC7DA88A659804C48BB5682F64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c4:b8:b8:15:d8:9c:c2:6f:22:5c:75:a5:cf:
5f:fa:a6:83:6b:6a:78:32:f9:98:c0:84:39:9c:69:
b6:c2:74:b4:e9:02:88:28:53:1f:83:5d:e8:8d:4e:
83:96:3f:ce:2a:d9:36:11:f2:ed:50:21:60:a0:55:
1b:d4:87:9b:10:3c:a6:45:86:4d:a1:76:b1:3c:ec:
4b:cf:c0:a9:67:3c:cb:21:9f:99:c7:37:07:5f:57:
2e:8b:4a:bc:95:55:25:51:75:2c:db:40:94:b0:b9:
dc:e5:5d:fe:60:c3:8b:c4:fa:09:7c:96:3a:26:16:
3c:c3:90:9c:b5:dc:4b:a2:6a:b3:4c:c4:c4:c8:82:
fc:13:54:04:13:66:37:7c:01:8d:9a:2f:d7:b9:97:
ed:ad:3f:84:9a:e6:c0:53:13:07:28:e3:bf:7b:d3:
26:8c:ed:e1:37:6b:f1:2e:a5:b6:cd:b4:40:d0:9a:
c6:11:ba:b5:96:31:45:af:1b:02:dd:a4:9e:40:62:
05:7b:29:b4:08:4c:d1:98:9c:9a:6f:51:4c:7b:c0:
64:21:2a:64:bc:e1:80:73:99:e6:07:56:d4:c0:1a:
d0:6f:9c:51:58:dd:72:13:bf:36:bb:f9:05:29:e2:
f0:f0:b2:02:da:3b:ed:16:31:73:f8:37:68:eb:8e:
e6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:BE:9F:0E:48:51:19:DC:7D:A8:8A:65:98:04:C4:8B:B5:68:2F:64
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3131382e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.118.0/24
Signature Algorithm: sha256WithRSAEncryption
54:3e:49:12:77:7c:29:bc:93:82:d2:89:62:5a:1b:71:4e:57:
ad:52:fe:13:99:2f:30:4e:34:cd:6a:97:cf:b1:25:c9:ef:06:
97:5c:43:a2:22:94:e9:5c:d2:6d:3d:77:aa:8c:5d:5a:f3:f3:
27:bd:72:a1:bd:4b:61:a0:e9:4f:d3:66:62:19:44:85:25:26:
c9:6c:dd:74:c2:5d:81:ed:16:b4:b8:ed:3b:ce:22:6e:3e:00:
e2:78:b2:5b:69:51:b2:51:00:b3:37:d7:22:f3:5d:29:2a:b8:
4c:d7:fd:95:97:86:35:b3:70:d3:db:97:f6:d4:bd:04:04:18:
7f:61:f0:6f:4a:5e:12:fb:60:12:22:39:3e:f2:1f:25:bf:4f:
f6:ab:32:50:9b:4e:14:4b:15:43:b6:a8:68:18:57:35:74:a6:
c3:ba:07:7c:2b:ec:4c:4b:a3:37:fc:5d:2a:d5:ee:80:95:72:
26:4b:54:c5:6d:63:63:05:86:f3:7a:03:50:9c:79:c5:ff:c2:
a7:90:2c:81:e8:42:c7:49:ec:19:f0:ed:30:a0:60:5f:54:1d:
00:dc:31:0f:20:3b:61:55:32:34:bb:98:a3:ee:b7:ad:2b:41:
88:45:79:a7:f8:43:34:0d:cb:83:89:07:44:5b:4c:60:45:b6:
43:14:4d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:15:36 2026 by rpki-client