Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3130372e302f32342d3234203d3e20383334.roa
File: 3136302e32312e3130372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: I/l2mxJCbI+Ajmjy7ePNAjugehfxVU6CeSPlEVUiRbM=
Subject key identifier: 1B:2D:CA:15:30:F9:0C:AB:59:E9:05:84:B9:8B:1F:C4:BB:8E:22:BD
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 16C6A76A765B874794295EB405F119C9C34A8C6A
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3130372e302f32342d3234203d3e20383334.roa
Signing time: Thu 15 Oct 2026 23:09:26 +0000
ROA not before: Thu 15 Oct 2026 23:04:26 +0000
ROA not after: Thu 14 Oct 2027 23:09:26 +0000
asID: 834
IP address blocks: 160.21.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 04:21:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:c6:a7:6a:76:5b:87:47:94:29:5e:b4:05:f1:19:c9:c3:4a:8c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Oct 15 23:04:26 2026 GMT
Not After : Oct 14 23:09:26 2027 GMT
Subject: CN=1B2DCA1530F90CAB59E90584B98B1FC4BB8E22BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:63:dc:aa:ce:b3:65:ad:5d:55:b8:92:cf:82:
ec:1e:c2:c7:83:0d:51:44:88:f3:7c:8c:4a:c3:fd:
d7:52:f3:a9:66:f1:76:f5:77:c9:d6:00:24:25:7f:
cb:41:2e:54:0d:9b:d5:ad:ac:c9:f9:40:25:d7:89:
6c:29:45:19:93:fb:76:7f:62:bd:a1:d8:84:4e:af:
3b:c3:82:8b:5d:cc:ca:f8:f3:b8:22:f5:31:48:3f:
c3:29:b0:2d:69:f5:a5:18:10:56:aa:a9:2f:61:84:
10:67:b3:ed:3a:80:0f:78:9a:cb:32:b3:94:05:65:
bf:db:ec:c8:0a:8d:da:ea:55:0b:f1:6f:dd:11:28:
25:0a:f2:33:9e:04:9c:64:b0:92:79:74:b5:71:30:
57:9a:f0:aa:f0:93:fa:3d:13:3b:70:f4:ef:cc:0c:
b1:fc:44:a6:7b:2b:c8:f7:f6:26:d5:bb:9f:1b:14:
be:d9:f2:73:64:fb:0e:db:e4:8e:30:6b:7a:10:8a:
19:51:53:0d:90:8d:88:e3:27:a2:b3:30:61:6c:91:
ff:91:bf:47:ca:16:b9:25:f4:a8:97:9b:a1:65:bc:
f4:44:1b:a8:5f:b0:ca:ea:1c:71:47:ad:20:00:4f:
f3:c9:f5:b2:df:74:fa:a0:3a:40:2d:e0:77:b5:04:
d1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2D:CA:15:30:F9:0C:AB:59:E9:05:84:B9:8B:1F:C4:BB:8E:22:BD
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3130372e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.107.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:a6:bf:dd:f8:f3:7b:47:ca:10:d1:b4:80:d5:b9:d0:b4:5a:
57:99:82:e7:ea:ba:72:db:8a:e2:a7:06:ca:12:d0:8d:41:9e:
6d:91:30:8d:55:88:b1:77:60:79:0f:6c:69:fb:51:59:63:c9:
ed:14:85:69:79:45:19:73:2d:7f:19:82:1c:a7:e8:f2:7e:fc:
51:48:a3:1e:29:99:10:9c:15:e3:4e:55:ee:3e:fa:3d:17:d0:
53:75:2b:23:7e:92:c9:15:dd:c0:74:f8:30:74:1b:55:f9:7a:
47:9a:ef:02:0e:fb:34:bf:7d:6f:3b:88:de:ab:44:f0:72:51:
a4:bc:d1:6b:03:78:ae:e9:f5:32:2e:6f:43:6f:28:05:b2:6a:
5c:46:28:9b:a1:e5:a0:c2:c9:8b:fb:83:31:17:ef:6f:03:cd:
fe:b0:58:99:96:f6:82:2b:e0:49:88:4a:69:5b:b7:76:e2:cb:
f1:65:2d:ec:42:10:68:c4:56:9c:f6:68:fc:90:bc:53:f5:d9:
c2:cb:d0:95:c6:a9:da:3c:fa:47:bf:09:70:e2:2f:c3:b4:bc:
f6:af:93:3b:f6:dc:7e:5e:8a:34:44:e1:8e:e0:93:d6:49:83:
38:35:7c:2f:b1:2b:91:7d:a0:24:a7:bd:70:f2:e3:ef:5f:12:
be:a3:28:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 11:30:26 2026 by rpki-client