Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3134362e302f32342d3234203d3e20383334.roa
File: 3136302e32312e3134362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: LvMON4scXUxf8tQKl/9JKH78lI6UEHjFLYWvhoEGLvI=
Subject key identifier: CA:E1:F7:58:92:FE:16:DC:FF:25:0E:E8:DB:82:FC:AF:FE:D3:CF:16
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 7742079F01C2D40CC4D05E6E73F048E04BB8D927
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3134362e302f32342d3234203d3e20383334.roa
Signing time: Sun 11 Oct 2026 08:35:15 +0000
ROA not before: Sun 11 Oct 2026 08:30:15 +0000
ROA not after: Sun 10 Oct 2027 08:35:15 +0000
asID: 834
IP address blocks: 160.21.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 08:58:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:42:07:9f:01:c2:d4:0c:c4:d0:5e:6e:73:f0:48:e0:4b:b8:d9:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Oct 11 08:30:15 2026 GMT
Not After : Oct 10 08:35:15 2027 GMT
Subject: CN=CAE1F75892FE16DCFF250EE8DB82FCAFFED3CF16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:09:31:a7:59:95:e7:f5:a3:e1:5f:46:2d:3e:
6f:9f:79:08:73:16:43:bf:8b:a5:13:11:98:57:4e:
1f:69:3d:55:49:40:47:10:f5:7a:0e:4b:cb:02:d9:
8e:85:5d:e0:72:fc:d0:0e:e6:3d:df:b1:86:62:16:
87:00:b8:67:27:ec:34:34:3a:96:9b:6e:7f:13:7b:
18:b2:e9:40:70:68:16:89:0d:93:39:6f:9b:1c:55:
f5:b0:7c:c9:22:75:76:bc:d1:a5:85:46:c8:3f:ed:
3a:7b:70:25:db:74:e2:6e:6e:8b:02:04:b1:c4:64:
63:ac:d9:54:f8:a2:b7:42:e1:04:2f:bf:53:06:f6:
94:24:08:46:dd:f0:3e:ae:0f:30:3a:6f:1a:e1:ae:
96:2f:d0:ef:c3:65:de:cb:fd:7f:2f:68:07:ba:9c:
20:67:2d:d3:82:e9:1a:38:15:b7:07:24:04:ee:63:
8a:da:f8:ca:b3:1e:32:ac:1d:54:ef:13:38:47:ca:
ab:36:d1:f3:15:40:d6:0d:06:64:a5:80:63:19:d0:
86:94:18:1c:bd:fa:da:1e:67:53:9f:8a:47:2f:0c:
2b:25:e0:78:e6:d9:c1:b9:51:22:96:f8:f7:09:e7:
5e:2b:f9:2d:4d:85:60:f2:df:71:c5:53:f4:0b:95:
fe:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E1:F7:58:92:FE:16:DC:FF:25:0E:E8:DB:82:FC:AF:FE:D3:CF:16
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3134362e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.146.0/24
Signature Algorithm: sha256WithRSAEncryption
60:c9:4b:cc:e8:c6:f6:8b:14:e4:3e:bc:4f:e5:73:4c:37:4b:
79:7f:6b:f3:35:cc:3c:da:ce:14:59:83:5a:1b:96:c7:a1:26:
ec:fc:81:d9:a2:47:ea:c1:42:96:91:4d:0b:94:b5:f6:d8:2e:
57:72:bb:8b:d2:28:77:f5:a7:e5:57:78:8c:4d:aa:13:10:11:
74:82:31:de:77:e0:07:d3:b7:8c:8d:59:4a:2a:80:ea:c6:df:
c1:b0:13:b4:b5:5b:f9:b6:d6:0d:32:63:fd:54:d1:41:97:04:
4d:3a:6d:5b:8f:cc:fc:70:5d:e5:22:cf:ce:1e:12:47:ea:59:
56:f0:07:18:88:d8:52:0d:a1:ef:14:d0:0e:56:41:cd:49:bd:
30:51:f6:d8:fb:4c:41:2b:f2:f4:06:ae:0e:ce:a6:47:16:16:
94:e1:b3:b7:4b:46:70:09:af:13:65:a8:50:68:0e:46:5f:2b:
92:83:74:61:d4:d4:cf:e6:9b:23:9b:81:e8:9d:9b:c2:24:f2:
4b:a7:74:53:2b:b7:6d:df:77:f0:8f:14:10:61:23:1f:58:4b:
92:3c:bf:a2:9f:bd:b7:59:10:a4:52:92:b2:7f:a9:a1:82:7d:
6b:d7:25:c5:f2:95:9d:a1:63:ad:e6:72:a7:4b:bd:fe:e5:93:
46:b7:75:e8
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUd0IHnwHC1AzE0F5uc/BI4Eu42ScwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRiZTRkODdmY2JlNmNjYTdjY2U1YjMyNTRmNjk2ZGJi
ZmNmMGU1ZDAeFw0yNjEwMTEwODMwMTVaFw0yNzEwMTAwODM1MTVaMDMxMTAvBgNV
BAMTKENBRTFGNzU4OTJGRTE2RENGRjI1MEVFOERCODJGQ0FGRkVEM0NGMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+CTGnWZXn9aPhX0YtPm+feQhz
FkO/i6UTEZhXTh9pPVVJQEcQ9XoOS8sC2Y6FXeBy/NAO5j3fsYZiFocAuGcn7DQ0
Opabbn8Texiy6UBwaBaJDZM5b5scVfWwfMkidXa80aWFRsg/7Tp7cCXbdOJubosC
BLHEZGOs2VT4ordC4QQvv1MG9pQkCEbd8D6uDzA6bxrhrpYv0O/DZd7L/X8vaAe6
nCBnLdOC6Ro4FbcHJATuY4ra+MqzHjKsHVTvEzhHyqs20fMVQNYNBmSlgGMZ0IaU
GBy9+toeZ1OfikcvDCsl4Hjm2cG5USKW+PcJ514r+S1NhWDy33HFU/QLlf5PAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUyuH3WJL+Ftz/JQ7o24L8r/7TzxYwHwYDVR0j
BBgwFoAUVL5Nh/y+bMp8zlsyVPaW27/PDl0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTc3NTU2NjctYjg0Yi00NTdhLWE1OGMtYjVlZGMxZjVl
OGUwLzAvNTRCRTREODdGQ0JFNkNDQTdDQ0U1QjMyNTRGNjk2REJCRkNGMEU1RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1ZMNU5oX3ktYk1wOHpsc3lWUGFXMjdf
UERsMC5jZXIwgakGCCsGAQUFBwELBIGcMIGZMIGWBggrBgEFBQcwC4aBiXJzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNTc3NTU2Njct
Yjg0Yi00NTdhLWE1OGMtYjVlZGMxZjVlOGUwLzAvMzEzNjMwMmUzMjMxMmUzMTM0
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACgFZIw
DQYJKoZIhvcNAQELBQADggEBAGDJS8zoxvaLFOQ+vE/lc0w3S3l/a/M1zDzazhRZ
g1oblsehJuz8gdmiR+rBQpaRTQuUtfbYLldyu4vSKHf1p+VXeIxNqhMQEXSCMd53
4AfTt4yNWUoqgOrG38GwE7S1W/m21g0yY/1U0UGXBE06bVuPzPxwXeUiz84eEkfq
WVbwBxiI2FINoe8U0A5WQc1JvTBR9tj7TEEr8vQGrg7OpkcWFpThs7dLRnAJrxNl
qFBoDkZfK5KDdGHU1M/mmyObgeidm8Ik8kundFMrt23fd/CPFBBhIx9YS5I8v6Kf
vbdZEKRSkrJ/qaGCfWvXJcXylZ2hY63mcqdLvf7lk0a3deg=
-----END CERTIFICATE-----
Generated at Wed Nov 4 20:09:54 2026 by rpki-client