Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3131322e302f32342d3234203d3e20383334.roa
File: 3136302e32312e3131322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: W6/tYIGeT4l+4zuq4JG/4OAcEJL6JkANmu3Efv9vXIM=
Subject key identifier: 17:D0:CA:1D:91:08:FD:51:25:34:F0:13:75:15:DB:2A:14:76:EB:36
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 0103B019C639992D781E9952DAC9835FDE0B78A3
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3131322e302f32342d3234203d3e20383334.roa
Signing time: Thu 15 Oct 2026 06:50:56 +0000
ROA not before: Thu 15 Oct 2026 06:45:56 +0000
ROA not after: Thu 14 Oct 2027 06:50:56 +0000
asID: 834
IP address blocks: 160.21.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 08:58:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:03:b0:19:c6:39:99:2d:78:1e:99:52:da:c9:83:5f:de:0b:78:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Oct 15 06:45:56 2026 GMT
Not After : Oct 14 06:50:56 2027 GMT
Subject: CN=17D0CA1D9108FD512534F0137515DB2A1476EB36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:61:4a:17:82:85:b5:28:aa:91:1f:5e:8d:d2:
d1:69:85:4c:ec:39:a9:98:8e:09:1b:37:dd:42:f8:
86:b8:2d:76:d0:cc:8d:49:2f:17:fc:04:c3:50:9d:
3c:91:fe:ed:35:96:23:1e:f5:66:bc:ea:70:82:11:
96:8a:f6:73:cd:b2:1e:d0:b2:ec:2d:56:48:22:e3:
0b:a9:45:60:3f:79:45:2e:9e:db:8e:14:ab:aa:9b:
df:cb:c4:2b:2c:72:c9:91:bc:1a:b7:30:38:7d:08:
1f:d0:50:ef:3b:0f:9d:6d:c5:36:45:1e:bd:4b:f4:
b7:5d:ee:f0:9b:be:01:64:1f:84:b7:45:d6:68:7c:
0f:41:61:b1:f8:54:22:ed:46:5e:1a:be:7f:07:26:
49:cb:a6:cc:45:e4:c3:d3:45:af:bc:bf:df:95:5d:
cd:d6:26:d3:49:11:b1:37:1d:b7:e7:ca:cc:55:cf:
d4:c8:69:fc:13:23:3e:b9:9a:04:0c:5b:95:e4:0a:
73:8a:0b:60:62:f0:47:b0:26:2e:df:f0:52:9b:39:
8f:9f:16:39:86:35:01:1f:82:11:f0:7f:0d:55:37:
f1:9c:c2:a8:6f:f1:3c:fc:ed:a6:73:9f:c7:75:e4:
0d:ab:13:b0:57:63:7c:0e:0a:d4:5e:72:9d:23:2d:
41:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D0:CA:1D:91:08:FD:51:25:34:F0:13:75:15:DB:2A:14:76:EB:36
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3131322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.112.0/24
Signature Algorithm: sha256WithRSAEncryption
54:79:fd:80:34:33:30:a4:b7:f8:fd:2b:c5:80:3d:cf:3c:27:
45:49:f5:bd:07:ad:64:1f:5b:4a:64:48:fb:23:8f:6b:a5:6a:
f6:30:a7:0c:9e:0e:b0:d0:a5:40:31:97:c4:60:51:83:82:01:
69:dd:39:1e:c8:96:07:37:a7:04:cc:54:7d:7b:14:52:1c:df:
57:e7:b9:ca:5a:1b:f6:2b:65:fa:ad:04:3c:45:bd:57:80:13:
be:02:fa:d0:d9:e2:bc:6b:80:1c:aa:8a:fc:5c:85:b0:0b:6c:
11:9c:46:7d:3d:f5:f4:a2:0b:ac:01:57:2f:6d:d4:a7:93:b2:
68:2f:7b:fc:f5:73:28:83:a2:71:06:e8:d4:7d:6d:ef:b0:47:
c8:8b:05:4b:e0:72:7c:9d:51:4b:73:83:45:57:f1:f8:05:2b:
83:d2:43:b1:42:13:36:f8:21:f4:b3:d1:a4:26:a5:30:c9:1d:
4e:ed:4e:a1:43:57:a3:32:35:1e:c1:05:2a:6a:75:3b:fd:2a:
bd:7e:50:c4:22:52:23:35:92:6f:77:9d:20:81:be:f1:d0:46:
c1:f3:ab:7e:8f:e3:90:15:7a:0c:20:b2:34:44:29:92:c0:65:
43:06:e1:ec:dc:08:0a:d7:83:cc:64:3c:2c:21:7c:c4:38:75:
79:e3:9f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 20:09:44 2026 by rpki-client