Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3134362e302f32332d3234203d3e20383334.roa
File: 3136302e32312e3134362e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: RndFPdLvL0P9IjHnsIOA1HNI8RqLoZ0DD0AcQILGOR0=
Subject key identifier: 5F:77:A0:B7:01:EB:45:05:83:6A:79:AE:D7:2B:17:DC:DC:55:00:39
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 668143DFE7413BCB3DBDCD90DEBC62D64215C082
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3134362e302f32332d3234203d3e20383334.roa
Signing time: Fri 11 Sep 2026 22:44:32 +0000
ROA not before: Fri 11 Sep 2026 22:39:32 +0000
ROA not after: Fri 10 Sep 2027 22:44:32 +0000
asID: 834
IP address blocks: 160.21.146.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 03:19:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:81:43:df:e7:41:3b:cb:3d:bd:cd:90:de:bc:62:d6:42:15:c0:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Sep 11 22:39:32 2026 GMT
Not After : Sep 10 22:44:32 2027 GMT
Subject: CN=5F77A0B701EB4505836A79AED72B17DCDC550039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:bf:71:12:a8:64:c2:b6:61:b1:28:76:80:e7:
5c:4c:43:33:5e:e2:fd:20:1a:5c:e0:82:8d:d2:59:
b1:53:45:eb:79:86:20:d3:1c:7f:d0:23:10:53:ae:
85:06:a9:9f:bc:b1:fd:89:a9:b8:96:55:53:f2:cc:
2e:94:1d:90:4b:87:60:82:9a:39:11:ae:b7:af:e2:
3a:fb:b1:8c:4d:ee:4f:36:88:b5:ec:f2:0b:b4:4b:
4b:bc:47:ad:38:a0:b2:10:6e:19:eb:18:d5:3b:ab:
a2:25:45:65:61:54:07:d1:24:18:1b:61:03:08:52:
54:97:f8:53:24:7c:75:3b:7e:91:16:91:d9:30:3a:
5d:75:5f:58:d3:d7:9b:fe:3b:75:18:e5:85:c4:8a:
78:ad:d9:8c:9b:f4:de:d7:f4:b6:6b:e1:4e:a8:1e:
91:8a:e4:b5:a1:1c:fd:47:b5:ce:e1:96:04:60:65:
d6:11:97:ea:a6:26:f3:bb:2b:cf:fa:02:52:d9:fd:
92:48:0d:f5:67:8a:42:dc:93:c9:fe:f7:8e:94:ee:
5d:b1:48:45:2c:ef:08:d1:36:43:08:82:bf:46:3b:
07:06:27:17:4e:e8:e8:f8:d1:46:72:a8:95:71:d2:
cf:11:45:9f:91:0b:06:98:d0:3a:e7:ac:5e:14:f8:
77:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:77:A0:B7:01:EB:45:05:83:6A:79:AE:D7:2B:17:DC:DC:55:00:39
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3134362e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.146.0/23
Signature Algorithm: sha256WithRSAEncryption
00:3d:22:14:fe:91:f4:6d:5b:77:f0:1c:38:f9:43:c9:43:7c:
92:d6:de:dc:15:35:00:b4:41:7e:50:78:24:80:b8:ed:ce:21:
bb:52:ed:76:0d:67:45:86:2d:17:72:d5:3e:72:67:41:6f:bd:
8f:aa:f4:bc:33:3b:57:da:01:cc:df:7e:42:63:c8:16:7c:5b:
43:f9:95:5b:13:de:77:e3:e6:a6:4f:b8:6c:cb:7b:4a:ca:71:
33:3d:ef:f9:4a:8e:16:00:b1:f3:0c:b0:5c:ff:05:61:64:a8:
20:11:6f:2e:d8:4f:d1:7f:34:a0:0e:72:c6:8a:cc:55:14:05:
e6:96:6d:6a:db:b7:9a:21:d9:36:a0:a9:e2:0a:9d:d0:31:03:
2e:e7:3d:12:60:3c:89:cd:16:7e:77:b7:40:c8:3b:82:e1:47:
a1:b7:cd:3d:86:20:c6:e0:eb:0b:db:51:1d:01:88:d1:60:3e:
ba:0d:ba:4e:6c:69:aa:2b:d4:08:c9:9d:71:e7:ff:b5:b3:18:
ea:36:b8:b8:66:da:db:13:41:86:6d:85:6a:8a:4d:3b:97:9d:
23:98:56:38:02:d6:7d:07:04:01:42:90:1c:48:93:f3:63:2d:
07:7d:a9:85:94:f2:40:9c:6c:df:df:2d:27:40:b5:3f:96:25:
5b:61:2e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 10:14:46 2026 by rpki-client