Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3130342e302f32332d3234203d3e20383334.roa
File: 3136302e32312e3130342e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: /NhaNBatpmUOOW6I48awslEijEscA2CxC6DgxIR0OuI=
Subject key identifier: 2F:02:12:6C:DE:EE:A1:34:E7:25:F6:B4:33:2C:93:FE:9B:E0:65:D9
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 1CAA3C1910E336D7FC9292C694E8BB8FE27535FD
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3130342e302f32332d3234203d3e20383334.roa
Signing time: Thu 15 Oct 2026 23:06:24 +0000
ROA not before: Thu 15 Oct 2026 23:01:24 +0000
ROA not after: Thu 14 Oct 2027 23:06:24 +0000
asID: 834
IP address blocks: 160.21.104.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 03:44:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:aa:3c:19:10:e3:36:d7:fc:92:92:c6:94:e8:bb:8f:e2:75:35:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Oct 15 23:01:24 2026 GMT
Not After : Oct 14 23:06:24 2027 GMT
Subject: CN=2F02126CDEEEA134E725F6B4332C93FE9BE065D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a5:ad:b8:6f:27:2a:c7:34:81:69:df:8e:a7:
bf:f7:7c:09:c5:a5:6f:14:17:0e:a4:e2:3d:08:ce:
6d:c9:55:be:fa:89:c9:fc:45:a6:79:c0:03:5c:73:
32:d2:95:52:ca:65:35:b9:1c:43:3d:0b:ef:4e:f3:
96:9e:ed:78:3d:8d:55:6a:1f:49:83:ae:0a:e7:05:
be:32:7f:2c:d3:2a:21:73:5b:af:be:20:70:f2:c8:
5b:f8:40:95:e2:ef:e6:6e:47:91:56:e5:35:a3:a7:
fe:31:ea:f0:12:14:81:18:dc:57:26:f1:fc:c1:03:
4b:4a:b1:d0:8a:9b:a7:ec:37:a5:74:5d:a1:09:62:
51:e8:0c:90:23:a7:0e:4f:26:6f:02:0e:3f:21:de:
7d:7f:f2:c3:e4:1f:1a:2a:24:6e:ec:4c:b6:43:04:
f3:8f:fb:f7:e3:2b:a8:6e:a9:1e:d1:35:55:ce:44:
5d:92:6d:aa:bf:c9:26:f9:ee:98:11:1e:c5:9b:95:
a2:56:a5:c6:58:a9:97:2e:a6:f4:19:21:42:0f:3b:
fe:c9:16:17:7f:08:ed:3f:60:86:f8:d8:9d:ea:58:
df:ab:7a:a1:35:7b:aa:fb:68:0d:15:79:e0:ae:fe:
1b:d4:05:fc:b2:78:b8:9e:06:41:ec:cf:30:21:02:
3c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:02:12:6C:DE:EE:A1:34:E7:25:F6:B4:33:2C:93:FE:9B:E0:65:D9
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3130342e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.104.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:54:b9:12:d0:5b:40:f0:06:f2:13:a6:5e:d5:2a:8b:08:c5:
da:a4:32:06:7b:19:ab:65:ca:7b:dd:8c:dc:bd:65:94:31:13:
24:a5:8f:b1:6b:38:ae:e4:33:ec:41:90:86:26:ac:73:6e:0b:
54:e0:a7:80:d2:f5:8d:0c:06:82:e1:68:73:98:bd:4b:59:c1:
00:15:b0:f9:c5:3d:ef:3b:9e:1f:f9:c4:89:58:0e:05:25:14:
cc:fa:86:36:ae:1d:0b:bd:7a:44:91:78:56:e5:8c:9c:63:6e:
88:20:6f:59:45:18:8c:e4:3f:5a:e9:e7:97:03:93:cc:29:da:
b0:0a:db:41:ce:b9:b0:bb:12:9d:a4:44:8c:19:48:35:18:94:
4b:94:82:09:84:64:e9:d9:88:e4:5a:eb:df:a3:30:7b:8f:30:
59:af:3f:49:b5:47:f3:ea:ef:02:41:07:37:f8:f8:79:7c:34:
63:53:43:d5:c0:10:3a:1b:10:3b:27:e9:dc:96:d1:e2:b2:23:
40:8f:01:4d:44:6f:d7:60:0f:43:15:5c:4c:e3:c1:59:f3:b7:
30:dd:c5:29:17:57:46:09:81:44:32:48:d4:f2:41:fb:c5:5e:
b2:ed:05:2a:ba:4d:7b:a0:89:3c:19:c7:1d:96:c6:a4:d4:02:
7e:59:4a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 11:30:21 2026 by rpki-client