Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3134342e302f32342d3234203d3e20323138373339.roa
File: 3136302e32312e3134342e302f32342d3234203d3e20323138373339.roa (raw, json)
Hash identifier: AFrvcyWZdwCwv+FZnD2msjCW9Y3bvuPnv13pRz+mCks=
Subject key identifier: 39:8D:C2:79:90:53:A8:CF:39:5F:E0:F6:D9:F7:B8:3A:93:C9:80:0E
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 7D36BA40695C7A4879EA8FE4FD971ACA96104FF6
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3134342e302f32342d3234203d3e20323138373339.roa
Signing time: Fri 11 Sep 2026 22:41:49 +0000
ROA not before: Fri 11 Sep 2026 22:36:49 +0000
ROA not after: Fri 10 Sep 2027 22:41:49 +0000
asID: 218739
IP address blocks: 160.21.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Sep 2026 16:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:36:ba:40:69:5c:7a:48:79:ea:8f:e4:fd:97:1a:ca:96:10:4f:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Sep 11 22:36:49 2026 GMT
Not After : Sep 10 22:41:49 2027 GMT
Subject: CN=398DC2799053A8CF395FE0F6D9F7B83A93C9800E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:84:fa:f5:26:e1:54:cf:da:a0:7e:49:fb:df:
75:40:e3:1b:28:4a:5b:5c:25:ef:f7:95:50:c1:6d:
45:31:3b:58:39:6d:c3:93:15:69:77:5b:a2:94:14:
ec:c1:11:a8:ee:b7:f5:55:6b:4d:9d:07:85:eb:23:
b2:80:fd:55:39:61:b8:31:7f:b0:5b:c2:65:19:36:
82:08:50:ba:9a:1d:52:f6:a1:67:b9:58:bf:45:4f:
83:36:79:26:8b:fc:c5:4b:0d:06:da:02:a9:08:43:
f9:8e:a9:c2:91:29:9f:f7:da:aa:26:24:f5:e0:e1:
f9:5f:3b:cf:36:31:89:d5:45:3c:59:0a:9d:df:d8:
a9:f7:41:30:bb:ef:20:c5:8d:5b:e2:63:44:22:a4:
bb:ee:9b:11:7f:42:fa:01:c2:7a:4d:3b:9d:2e:8b:
fc:e5:c1:1f:1b:d2:83:2c:eb:6e:65:b8:71:b8:30:
36:d6:20:fc:29:ce:62:46:00:b3:69:c8:ff:a9:f3:
d3:dc:db:f5:e1:c4:32:af:af:e9:bb:a0:f7:40:d9:
7e:49:cc:5a:de:33:b4:5b:10:24:d8:c2:e9:35:28:
fe:1c:19:cc:7c:56:59:fa:f0:90:8f:21:39:93:cb:
e4:24:f8:42:93:f0:81:6b:74:79:57:4b:69:99:39:
c3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:8D:C2:79:90:53:A8:CF:39:5F:E0:F6:D9:F7:B8:3A:93:C9:80:0E
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3134342e302f32342d3234203d3e20323138373339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.144.0/24
Signature Algorithm: sha256WithRSAEncryption
85:90:3d:aa:f7:c9:1a:b9:cd:5f:1d:fe:ab:7f:66:e3:85:e1:
f3:aa:e2:ff:a5:5f:ea:f8:3a:0b:ea:fc:f7:39:db:5b:3a:67:
bf:da:8a:86:5e:00:f6:6e:3f:8e:1a:17:e2:22:9b:35:68:0b:
46:74:5f:fc:f8:fe:1f:0d:93:3f:48:ab:d6:c9:7c:fa:ef:45:
38:fd:e0:ac:96:2f:a8:3e:42:a8:47:d5:49:68:02:99:4b:84:
54:33:79:97:60:0d:ff:ab:ae:56:1c:ee:76:e8:39:86:4a:b7:
1f:a3:a3:6e:0f:a6:df:dc:1b:c2:a3:02:10:ca:f5:cf:32:ab:
e0:37:c9:35:b5:9a:95:4a:27:78:2e:c8:f8:7f:89:3b:c1:84:
65:cd:0c:1c:ba:20:82:70:f6:21:dc:6e:af:20:ab:c1:7a:ad:
c0:e1:4f:e9:52:86:29:d3:3d:14:9a:10:b6:dd:07:b8:95:ec:
b4:0a:ab:a9:99:75:cc:12:bd:3f:22:15:3e:a7:2b:f2:eb:25:
6e:9f:8a:3e:76:06:b6:4a:0d:bf:5c:8d:0f:a8:04:a8:e5:67:
81:04:ec:0b:e0:d3:b6:a4:61:dd:97:ac:4e:28:e2:6a:58:9c:
64:f3:97:61:c6:21:c9:26:47:f7:ae:5d:07:7b:75:54:02:45:
f0:5b:04:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 08:48:32 2026 by rpki-client