Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3134342e302f32332d3234203d3e20383334.roa
File: 3136302e32312e3134342e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: pyG7VFM3FUoOrAUA/tsVhwxmA+w84giulsJP2ssdu9M=
Subject key identifier: F5:10:DB:A0:B3:EE:90:B0:46:C6:E6:01:02:89:C7:91:07:DE:84:AB
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 3C5B0B104742931D25F1886156ADBF5BCD6805F5
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3134342e302f32332d3234203d3e20383334.roa
Signing time: Sun 11 Oct 2026 08:35:15 +0000
ROA not before: Sun 11 Oct 2026 08:30:15 +0000
ROA not after: Sun 10 Oct 2027 08:35:15 +0000
asID: 834
IP address blocks: 160.21.144.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 08:58:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:5b:0b:10:47:42:93:1d:25:f1:88:61:56:ad:bf:5b:cd:68:05:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Oct 11 08:30:15 2026 GMT
Not After : Oct 10 08:35:15 2027 GMT
Subject: CN=F510DBA0B3EE90B046C6E6010289C79107DE84AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:93:ac:29:36:ad:d0:b5:e5:c9:73:ee:20:8b:
c4:1e:77:b2:ba:c1:9e:a3:5c:1d:50:9a:44:43:6e:
6c:f0:43:44:d8:73:a5:55:4d:52:8a:47:b9:ba:0b:
d2:8f:9e:48:21:5d:a7:51:55:58:b0:c1:3d:29:09:
68:ea:54:21:b8:6c:65:32:c7:2b:88:56:85:38:3b:
8e:7d:4c:f2:c5:72:52:a3:78:df:6e:1e:7a:aa:8b:
a3:b2:bc:e4:1a:b4:c6:77:06:ef:10:56:1a:ea:1a:
a3:35:f5:d8:66:77:0f:dc:ee:2c:dc:17:25:81:ef:
6e:c5:f8:e0:be:c4:b6:e4:6b:26:5e:73:5b:45:05:
db:91:fd:b5:9f:16:f4:67:da:19:b0:a1:7c:2f:9e:
3f:68:18:00:76:62:27:47:05:59:73:7b:6d:29:fe:
15:c4:e8:4b:b9:65:01:b4:8b:bd:62:4c:84:07:85:
a6:b3:66:39:ab:fa:c8:a6:f1:92:8f:2b:3f:be:91:
03:56:a7:a6:8b:dc:e8:e2:94:61:aa:68:c3:42:2d:
42:5d:55:a5:eb:53:81:e9:b2:1e:72:99:70:63:53:
43:1a:8b:6f:2b:58:59:b0:5e:9d:66:62:cf:f2:44:
2d:f6:10:84:10:48:cb:e4:e0:ed:29:7a:6c:9d:bc:
9b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:10:DB:A0:B3:EE:90:B0:46:C6:E6:01:02:89:C7:91:07:DE:84:AB
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3134342e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.144.0/23
Signature Algorithm: sha256WithRSAEncryption
42:54:16:10:35:cb:a7:d0:26:61:36:13:03:a2:6b:26:61:03:
cf:34:44:52:b2:a7:67:e7:3c:d6:fb:e3:9c:60:7b:3a:a1:e6:
94:83:96:3a:3e:8d:7c:62:5e:39:46:36:66:61:85:66:dd:2c:
1b:d1:cd:c0:d4:46:a9:7c:7b:d3:e6:5d:8f:c9:23:35:4d:9c:
22:82:36:a4:10:19:66:c3:41:2c:2d:08:1b:0c:76:ee:0e:05:
7f:09:a5:45:c6:80:a5:a0:01:d5:64:c7:d4:fb:0c:a3:fc:2b:
f0:1f:9a:cf:45:4d:50:b4:0f:3a:4f:31:c1:41:51:bd:9a:34:
6f:24:02:fc:9d:55:d6:8b:bf:df:67:4f:a6:32:ce:d5:47:3d:
dd:2d:90:8e:0e:bb:f4:f4:a7:b5:58:2c:6c:46:55:db:3c:b5:
53:a6:18:23:99:bc:9a:62:43:96:ef:67:9b:03:70:f4:b0:f9:
ed:a9:8d:dd:c0:5a:6c:21:9b:5a:ce:98:d3:89:27:25:87:e9:
43:76:1a:7e:73:41:3b:42:bd:a7:03:54:f8:32:c1:27:48:af:
a4:d2:79:09:07:7a:a6:23:86:98:d9:b5:45:a6:1c:4e:1e:34:
cf:2b:c5:01:15:fa:b1:40:c7:4e:56:b3:84:b3:32:73:29:b0:
6b:df:75:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 20:09:41 2026 by rpki-client