Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3134342e302f32342d3234203d3e20383334.roa
File: 3136302e32312e3134342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 9gkmOgBDP2BqKvvRlmTmk9x6VWVjm5HmNqle9NE2B10=
Subject key identifier: 85:24:CB:6C:9B:D1:DE:EE:E5:8F:ED:0F:8B:86:EF:E1:F7:66:EE:86
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 52489EEA6A14B3A4DDF25FCB6C644CD29E625CE5
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3134342e302f32342d3234203d3e20383334.roa
Signing time: Fri 06 Nov 2026 13:56:35 +0000
ROA not before: Fri 06 Nov 2026 13:51:35 +0000
ROA not after: Fri 05 Nov 2027 13:56:35 +0000
asID: 834
IP address blocks: 160.21.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:48:9e:ea:6a:14:b3:a4:dd:f2:5f:cb:6c:64:4c:d2:9e:62:5c:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Nov 6 13:51:35 2026 GMT
Not After : Nov 5 13:56:35 2027 GMT
Subject: CN=8524CB6C9BD1DEEEE58FED0F8B86EFE1F766EE86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:39:21:a2:5a:19:6e:fa:80:85:7a:b0:5a:55:
64:a3:c4:9f:cc:a7:80:60:4c:32:2f:fb:4c:37:91:
01:b3:c0:cc:25:b5:4c:b3:50:bd:d7:c6:38:cf:e4:
0e:c8:12:2b:fa:c6:bd:78:f8:25:b6:ab:88:59:fa:
82:e2:9e:fc:99:5e:a3:93:e3:7a:a0:44:68:c7:92:
d1:6e:29:5c:b4:0a:59:c3:2a:ce:ee:4c:eb:a1:08:
39:3d:65:ac:43:36:0f:6a:94:0d:9d:08:6f:65:ec:
a2:90:15:4f:7f:51:39:44:3d:ac:bc:44:53:93:0f:
62:66:e8:3b:ea:0d:ca:4c:cd:b3:74:af:84:54:57:
65:c8:cd:95:86:91:5d:a9:54:70:a7:9d:99:9e:f9:
f3:35:53:37:56:0b:2c:da:ea:3e:8d:cc:35:3d:a8:
63:71:7b:45:62:e6:b4:e5:56:f3:9b:2f:95:e6:33:
df:38:7c:f5:21:ce:e7:f2:8b:69:d6:45:69:7a:e9:
fd:be:e1:0d:c2:0e:c8:33:f7:c0:29:7d:ee:4c:51:
7f:15:ed:eb:56:07:4a:a8:d4:36:98:b0:1f:d0:e2:
25:d6:46:23:4d:97:c9:84:34:e5:e1:2a:06:1a:c6:
2a:fb:6f:e5:e7:40:b7:dd:f7:71:27:52:4c:92:b2:
a0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:24:CB:6C:9B:D1:DE:EE:E5:8F:ED:0F:8B:86:EF:E1:F7:66:EE:86
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3134342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.144.0/24
Signature Algorithm: sha256WithRSAEncryption
49:26:bb:87:6c:a3:29:13:b2:77:88:30:ad:39:ec:67:b9:ad:
3a:f0:1c:69:a0:a9:5d:c3:21:8b:69:c5:e5:c1:80:f9:8b:bd:
fa:be:66:ce:fd:58:e1:7a:8e:60:89:a8:0b:38:83:60:06:62:
01:7c:0d:05:49:b9:c9:0d:e5:ae:6f:66:02:fa:44:d7:88:f3:
6c:75:e6:01:f6:89:63:16:cb:3d:08:91:a0:05:3b:38:ba:96:
d6:6c:6b:04:c6:2a:05:74:b1:c7:73:10:c0:d4:af:2e:88:63:
cb:28:d4:29:12:6c:06:c7:29:87:e6:7d:3f:4f:0b:ed:8b:67:
2d:f3:c4:39:3c:51:5b:fd:70:a5:c3:75:0f:d6:37:31:79:db:
31:4b:4e:2d:55:35:00:64:0a:f0:23:9b:38:da:61:d6:77:8c:
b2:78:b7:05:d7:b2:22:5a:dc:c0:46:60:7f:9c:76:93:65:ec:
3d:e0:73:8a:28:81:75:22:e9:70:6b:f7:dc:44:c5:71:0b:26:
68:2d:9e:fa:a2:a8:ea:67:e1:95:ec:e3:ce:29:b7:90:16:a8:
08:7f:e2:8e:69:7c:8f:23:c6:15:0f:58:ab:b5:52:85:60:4c:
83:4f:d0:00:22:cf:da:f0:c8:6d:7f:8c:2b:ee:66:90:bf:39:
97:aa:1c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 06:24:25 2026 by rpki-client