Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3131392e302f32342d3234203d3e2032393134.roa
File: 3136302e32312e3131392e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier: ghFldXOJclmQr/LCi9hcfOCrBDPxjbFBdtKNpkaSitw=
Subject key identifier: 9B:7D:42:85:53:44:2C:0D:DE:55:7F:B5:C3:0A:B2:10:C5:80:72:E1
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 1BAC70F3005916F4D8A436352E0B10E6785C8B72
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3131392e302f32342d3234203d3e2032393134.roa
Signing time: Thu 17 Sep 2026 07:34:29 +0000
ROA not before: Thu 17 Sep 2026 07:29:29 +0000
ROA not after: Thu 16 Sep 2027 07:34:29 +0000
asID: 2914
IP address blocks: 160.21.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 17:38:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:ac:70:f3:00:59:16:f4:d8:a4:36:35:2e:0b:10:e6:78:5c:8b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Sep 17 07:29:29 2026 GMT
Not After : Sep 16 07:34:29 2027 GMT
Subject: CN=9B7D428553442C0DDE557FB5C30AB210C58072E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5d:d4:b1:37:07:7c:30:dd:65:fb:fc:53:f6:
4f:25:45:ec:30:81:fd:6e:8b:9b:b2:3c:d0:71:48:
5c:15:4d:5f:0f:a9:01:87:ea:9d:a1:42:10:bf:6e:
c7:48:de:95:2f:4c:11:7b:15:6e:93:b6:4d:8d:58:
26:1d:b3:21:c7:54:19:a2:95:cd:90:8b:d2:51:17:
29:47:61:86:f4:a8:48:4a:f8:76:69:96:c6:5e:34:
89:38:51:17:1e:0b:c8:25:75:1b:f9:9f:f4:b7:39:
80:7f:65:fb:7d:b3:30:d6:53:4e:e7:ab:59:6f:d0:
80:33:9e:52:e5:71:c0:d1:0b:da:32:37:11:0d:25:
52:81:12:17:81:35:cb:df:4f:ca:65:6f:13:79:67:
f7:58:17:0f:27:2e:9a:ce:db:02:9c:fe:fd:08:15:
64:0a:68:4d:ce:58:d8:18:c7:20:25:fc:a0:1f:bf:
85:a3:40:91:4b:d2:13:1d:d0:de:11:f8:3d:f3:01:
10:05:f0:3f:75:0a:29:1c:2b:26:da:e8:bf:89:f0:
54:8b:02:bf:3c:d5:ec:03:f1:19:3b:86:4f:ea:de:
63:f1:4f:a2:f8:ea:a5:b9:af:f5:42:42:b0:88:08:
20:09:80:46:11:a3:0d:6b:1b:47:b0:4b:15:55:5c:
55:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:7D:42:85:53:44:2C:0D:DE:55:7F:B5:C3:0A:B2:10:C5:80:72:E1
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3131392e302f32342d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.119.0/24
Signature Algorithm: sha256WithRSAEncryption
41:ed:0b:8e:9f:cf:0f:e0:8f:f8:d8:89:92:4a:e9:56:4f:62:
e7:3d:91:43:c9:0e:72:d8:34:be:4d:e6:d6:3c:16:a6:53:29:
18:26:05:5c:b6:31:5c:de:18:4b:8b:d2:4a:14:41:99:b9:54:
ec:f4:a3:5c:9c:9b:ad:61:fd:22:e0:bf:d8:ad:e2:d4:f3:19:
93:f2:39:af:42:62:bf:c3:bc:72:77:5d:a9:5d:b7:bc:e7:50:
dc:d2:00:4e:6f:73:cf:40:e7:3b:0d:e9:22:9b:8f:a8:c5:1b:
66:5c:d3:3c:40:3a:60:9f:1d:8d:3a:36:4b:80:70:d4:1f:36:
66:8a:8a:18:7e:0d:c8:65:24:ab:57:d1:67:1b:9b:29:ec:2d:
a6:3e:c3:e9:0e:d7:00:48:46:43:24:eb:5b:bb:7f:db:16:ac:
7d:ba:ef:53:67:3a:f5:72:2d:10:b5:1d:ab:71:1a:58:ed:09:
b1:e8:3e:c2:ef:fe:a7:ad:f5:28:08:27:fb:3f:55:5c:c8:79:
3d:f9:80:c9:81:10:f8:09:ba:a0:ae:0c:43:84:cc:b8:f4:15:
f0:7d:34:63:fe:b8:a9:de:c8:ee:7f:29:27:b8:df:c8:6c:aa:
c3:44:73:86:8d:09:fc:67:7b:f2:72:88:e9:f8:97:63:71:dd:
39:52:8d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:15:38 2026 by rpki-client