Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3134352e302f32342d3234203d3e20383334.roa
File: 3136302e32312e3134352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: zpDu7lA9oEn6BnoGfxi3xceBrSu4W9s0wGagdfBs2zw=
Subject key identifier: A4:5F:4E:3C:26:75:18:AC:8F:04:3F:BA:5A:93:2A:3A:78:04:CC:0B
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 6BE86D693A4BF058536E4A269F800E4836B29ADF
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3134352e302f32342d3234203d3e20383334.roa
Signing time: Fri 11 Sep 2026 22:44:32 +0000
ROA not before: Fri 11 Sep 2026 22:39:32 +0000
ROA not after: Fri 10 Sep 2027 22:44:32 +0000
asID: 834
IP address blocks: 160.21.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Sep 2026 16:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:e8:6d:69:3a:4b:f0:58:53:6e:4a:26:9f:80:0e:48:36:b2:9a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Sep 11 22:39:32 2026 GMT
Not After : Sep 10 22:44:32 2027 GMT
Subject: CN=A45F4E3C267518AC8F043FBA5A932A3A7804CC0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:69:57:f8:75:43:b7:7b:b8:96:aa:a0:95:b4:
d2:66:3a:16:d6:25:7f:fc:2f:be:ea:e6:58:ea:da:
bf:42:e9:14:71:cb:97:fb:1f:72:75:fc:82:86:de:
9a:21:13:b1:84:56:9f:87:c1:c6:54:c1:d4:0a:b2:
f6:8c:6d:d5:d7:18:a4:4c:68:17:16:b5:c2:f1:d5:
c7:73:85:9c:46:13:95:ff:df:5b:00:7a:0b:9a:1b:
5e:3b:e3:30:e1:79:5e:a0:39:19:9d:e5:c0:92:83:
b9:d7:1b:12:7f:02:9b:f6:82:41:f6:9b:aa:22:5b:
38:63:c9:09:63:07:64:f6:a4:cb:66:9f:5c:cc:78:
cf:86:3f:4c:01:64:28:ac:be:a7:e3:2d:71:a8:15:
21:9c:56:3b:5f:de:70:51:12:8b:2c:69:f8:54:9f:
26:51:79:99:fb:8d:f8:04:b6:e5:89:79:e1:26:21:
53:d8:b5:00:e5:10:70:1a:c9:39:8b:2f:f0:ba:2f:
3b:76:bb:70:8c:a3:1b:ba:e2:a6:eb:55:6a:b3:b5:
d3:f6:cf:c2:f1:46:a1:eb:3b:9a:38:c2:b7:d6:fc:
67:9a:5a:63:7c:9b:e4:3e:fe:b0:2e:2f:ef:4d:ea:
12:c1:a0:89:ff:3c:48:fc:13:fd:eb:4d:d9:91:88:
00:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:5F:4E:3C:26:75:18:AC:8F:04:3F:BA:5A:93:2A:3A:78:04:CC:0B
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3134352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.145.0/24
Signature Algorithm: sha256WithRSAEncryption
74:bc:0d:31:f2:78:b9:8e:40:91:53:bd:cc:05:ef:84:b0:95:
f0:85:c2:de:ce:c5:a5:26:58:9d:c3:bb:f0:45:28:64:75:1f:
db:44:6d:06:24:cd:c8:90:38:9d:05:b0:b8:85:8d:00:b9:32:
b2:90:32:21:30:88:0e:86:b4:f6:04:c2:48:8e:01:d7:a9:dd:
07:2b:87:b5:38:35:8d:95:17:dc:37:87:78:e0:18:0e:2a:29:
75:72:f2:c6:85:2c:08:36:fb:ed:be:b8:d9:6b:a6:6f:a9:ed:
43:88:b1:56:82:c5:b4:0e:c5:07:55:2f:62:78:6a:a7:13:3a:
c8:97:60:4e:9f:b1:7f:65:c0:5b:2e:4e:39:53:f7:da:34:18:
65:bc:61:af:ff:5a:bb:44:39:61:16:67:4f:9e:97:f0:c8:c5:
6c:80:94:3b:52:3e:43:f9:5e:49:db:b0:fd:8e:f0:86:91:f6:
31:4b:b8:5c:b5:5f:15:38:3d:25:18:a2:4e:a8:3e:58:23:29:
f3:d1:7c:b3:50:5b:e1:99:49:17:07:d9:82:34:91:a5:0f:db:
15:de:96:6c:03:45:96:5e:0e:69:82:79:42:d3:29:9c:b2:08:
db:90:da:d8:2f:75:61:4d:f7:8e:27:91:54:f0:5c:87:c8:02:
6e:41:51:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 10:14:48 2026 by rpki-client