Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3131342e302f32342d3234203d3e20383334.roa
File: 3136302e32312e3131342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: iP14cB7weHHavvNJg0HlGpGMLhTFTV4jOizMc6aYMco=
Subject key identifier: 46:AC:CA:4D:9F:F9:19:3D:3F:30:37:0F:C7:A9:AD:E0:8A:76:2B:66
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 52F8047ED57D35DE978DDB9868CB3966F7A159DB
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3131342e302f32342d3234203d3e20383334.roa
Signing time: Fri 16 Oct 2026 00:43:56 +0000
ROA not before: Fri 16 Oct 2026 00:38:56 +0000
ROA not after: Fri 15 Oct 2027 00:43:56 +0000
asID: 834
IP address blocks: 160.21.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 08:58:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:f8:04:7e:d5:7d:35:de:97:8d:db:98:68:cb:39:66:f7:a1:59:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Oct 16 00:38:56 2026 GMT
Not After : Oct 15 00:43:56 2027 GMT
Subject: CN=46ACCA4D9FF9193D3F30370FC7A9ADE08A762B66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6e:07:76:e7:8b:87:93:5b:2b:96:2c:87:e8:
0f:2c:79:fa:87:ab:b6:58:51:ea:68:e0:f7:14:d5:
ab:56:72:f1:4e:fa:f2:67:d0:9a:94:d5:36:b9:fb:
4e:f4:8d:19:b6:8e:83:05:7b:93:8a:06:e1:85:42:
82:85:d3:d1:38:f9:65:3b:9e:07:af:3b:28:92:6f:
e0:fe:4a:30:60:1b:5f:2d:40:38:79:a5:7b:11:75:
0e:84:0c:47:75:23:6f:ad:b8:ed:f1:4a:15:bc:f6:
78:c5:99:0b:3a:3f:25:f6:e2:82:c9:a9:00:f9:9a:
51:be:69:ee:af:99:2f:b8:ed:58:ce:45:38:7b:28:
a3:62:e9:49:c0:82:0c:28:31:b4:7b:df:c6:c6:e9:
e1:c5:59:fd:ce:4d:f2:70:15:d7:a3:bb:41:e2:9b:
18:2e:b9:69:6e:fe:a7:28:bd:44:4f:81:3e:0d:b1:
3a:97:c2:cc:5f:93:10:1d:fd:8f:11:48:50:1c:32:
3d:6c:97:c9:6a:cd:3d:d3:be:67:35:2e:40:a4:c9:
1c:14:9b:5c:1d:bc:a5:f4:41:7b:34:ed:fd:68:53:
0b:3a:00:69:43:f2:75:40:8b:8b:f1:cf:60:a8:69:
bd:8d:62:05:fc:8a:3b:a7:09:cd:ad:49:a0:45:26:
b8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AC:CA:4D:9F:F9:19:3D:3F:30:37:0F:C7:A9:AD:E0:8A:76:2B:66
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3131342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.114.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:92:f2:51:ea:1c:7d:be:36:d3:8c:9e:cf:d5:00:7c:42:b4:
db:6a:e0:ba:c4:f3:54:56:dd:4c:6a:4c:5d:41:ce:12:96:67:
c9:26:ba:e4:82:4c:70:34:77:aa:cf:f1:bc:ca:e3:f7:04:d0:
12:71:5d:2a:eb:15:73:8d:45:4c:8a:a2:24:32:3a:92:15:07:
13:55:21:10:0e:98:2b:bf:07:a1:e0:dd:61:5b:21:33:54:6b:
01:ce:f9:0d:31:3c:65:29:57:0e:65:5c:40:b4:38:95:64:ea:
c5:52:ba:d8:d7:55:55:1a:64:c7:ab:80:cb:c8:b4:0f:87:fc:
4a:3d:ed:6b:3a:65:3a:db:1f:fb:ad:2e:de:b2:81:f3:56:79:
63:2a:51:e9:7c:72:52:20:cd:3c:f1:aa:d0:ef:28:93:e0:57:
a4:53:92:76:c6:3c:2c:96:48:54:5c:2a:f2:64:b3:e7:31:99:
8b:2d:66:50:74:b0:98:70:9f:03:17:b1:cf:aa:fa:48:23:61:
c5:f7:de:2e:47:36:a0:69:1b:47:6d:13:e9:f1:2f:a3:0a:25:
6e:4e:05:22:aa:66:0f:42:78:67:11:7d:62:b3:47:1e:19:36:
d7:36:e6:a4:44:c0:2f:fe:6d:f8:90:15:a7:18:3e:34:9a:77:
9c:a2:65:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 01:05:07 2026 by rpki-client