Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3131302e302f32342d3234203d3e20383334.roa
File: 3136302e32312e3131302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: Ur187nho/pZMR5FT5lOOU/3J7Jbuv+DWiXygHcuSMg8=
Subject key identifier: A6:3D:D6:81:DC:EC:73:17:58:6A:6B:B4:81:F3:58:8E:D2:37:FA:70
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 26F099A0D453E7B6176A8EE67687FBC37C046E1E
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3131302e302f32342d3234203d3e20383334.roa
Signing time: Thu 15 Oct 2026 06:50:43 +0000
ROA not before: Thu 15 Oct 2026 06:45:43 +0000
ROA not after: Thu 14 Oct 2027 06:50:43 +0000
asID: 834
IP address blocks: 160.21.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 03:44:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:f0:99:a0:d4:53:e7:b6:17:6a:8e:e6:76:87:fb:c3:7c:04:6e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Oct 15 06:45:43 2026 GMT
Not After : Oct 14 06:50:43 2027 GMT
Subject: CN=A63DD681DCEC7317586A6BB481F3588ED237FA70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0e:fa:92:bf:d4:a7:f0:7a:28:49:54:e5:93:
da:c3:d0:9c:de:3e:9c:cf:8b:e3:a6:b6:45:67:8c:
66:d6:36:eb:03:f3:b6:09:c1:6d:34:b6:2f:77:a6:
0d:3a:70:35:fd:3d:84:92:35:58:72:6e:35:b0:15:
f3:66:9c:4c:bc:a2:4f:61:84:ea:10:57:85:03:6f:
4f:02:9b:05:ef:94:ff:78:fe:5e:8b:9e:ee:b4:ba:
b4:f1:82:7d:62:f9:ac:ea:fc:3c:36:41:c0:d3:1f:
ae:b2:46:0b:0f:c7:63:12:2b:46:7e:62:76:11:f0:
52:46:7d:9e:73:d9:39:65:82:ac:aa:64:b0:56:24:
2e:58:1b:de:79:37:c9:2e:35:63:71:ea:13:86:bd:
e2:d0:12:8d:e0:d1:51:13:42:bd:3d:6b:6d:b4:cb:
20:0c:ce:6b:2e:53:c6:51:67:58:64:ca:03:83:a5:
e6:f0:0d:c1:86:ba:00:83:90:de:d3:8e:90:ba:61:
26:aa:0d:0c:13:f8:cb:3d:d0:3b:db:bc:7b:a6:a3:
3f:ad:cd:af:f6:65:e0:47:20:84:6c:ee:8c:c6:cd:
d5:f0:da:3c:1a:94:e8:d2:a8:d3:66:fd:7d:ba:fd:
b4:e6:81:3e:b2:7d:d8:64:be:9e:3e:fd:92:d8:70:
87:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:3D:D6:81:DC:EC:73:17:58:6A:6B:B4:81:F3:58:8E:D2:37:FA:70
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3131302e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.110.0/24
Signature Algorithm: sha256WithRSAEncryption
62:e1:07:fc:62:f8:cc:c5:74:b6:4e:17:bb:bb:df:33:dd:90:
69:c3:ea:07:ad:cc:21:b2:4a:da:a8:4b:cc:ef:46:e7:13:e5:
03:0a:af:b0:8f:85:db:a1:70:07:bb:8a:1d:25:50:9b:39:8f:
69:b2:c0:31:4d:f0:e5:b4:ef:c8:fc:2f:a9:ae:b9:fb:ec:87:
1b:67:ab:44:96:7a:9d:6d:81:24:95:51:1e:96:94:b8:46:e3:
32:8d:55:11:14:66:fc:3f:4c:76:47:73:5f:d6:8b:9e:98:db:
2f:96:0f:bd:ee:23:96:b4:54:34:e2:3f:9c:82:d2:75:3d:05:
30:f4:46:4e:0b:7e:65:13:16:af:06:5a:95:8d:84:5d:ec:60:
44:b5:81:ac:03:ba:34:d4:e4:27:e1:da:d1:02:8a:2f:e3:5b:
af:a3:8b:e4:af:c7:8c:a7:08:87:f4:0b:70:8d:58:b4:ed:83:
c6:0b:b7:7d:c9:4b:5a:ec:e8:9b:5f:46:56:59:39:88:9d:ae:
c2:ca:3e:c7:2d:6c:83:33:d3:16:26:36:94:fb:84:14:98:b6:
56:a3:64:1e:81:d6:26:0c:1d:c6:81:3b:ff:3c:00:d9:6f:fd:
fe:97:93:fc:21:8b:96:60:19:8e:0c:d6:ca:37:dc:2a:cd:c3:
1a:a0:b2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 11:30:18 2026 by rpki-client