Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3134372e302f32342d3234203d3e20323138353031.roa
File: 3136302e32312e3134372e302f32342d3234203d3e20323138353031.roa (raw, json)
Hash identifier: ini95bisrb5GbQ3Ru56CFEqbhbnCmIErFcx9YBeKO7U=
Subject key identifier: 7E:33:A0:0A:CA:71:74:4A:7D:8C:39:B5:30:A2:A7:05:60:FC:5F:9C
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 216A39BFBB8AC9A8862CC360B3F97671783318C0
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3134372e302f32342d3234203d3e20323138353031.roa
Signing time: Sat 10 Oct 2026 06:09:42 +0000
ROA not before: Sat 10 Oct 2026 06:04:42 +0000
ROA not after: Sat 09 Oct 2027 06:09:42 +0000
asID: 218501
IP address blocks: 160.21.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 04:21:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:6a:39:bf:bb:8a:c9:a8:86:2c:c3:60:b3:f9:76:71:78:33:18:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Oct 10 06:04:42 2026 GMT
Not After : Oct 9 06:09:42 2027 GMT
Subject: CN=7E33A00ACA71744A7D8C39B530A2A70560FC5F9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:63:79:bc:28:f9:05:b6:24:f7:d3:c0:e7:59:
36:97:88:74:37:44:cf:a7:69:64:ff:61:b0:a2:fe:
84:72:a4:76:42:76:ee:ac:67:c0:a3:1f:88:58:f0:
29:86:3e:dd:89:16:45:4e:64:10:ac:48:c4:22:71:
8b:78:89:ce:c9:37:75:a7:41:60:c0:9a:4f:7c:7b:
d6:c7:18:1a:36:ec:54:bc:49:a4:8a:ed:c9:4b:2b:
c3:fb:d1:a5:f1:88:31:ff:ff:f5:73:9d:dd:62:4a:
8a:31:99:6c:b8:10:b0:a5:53:f2:64:f5:d5:ba:f4:
9b:c4:1d:d0:c2:d8:c6:86:82:51:b5:a0:b7:f8:53:
c2:2c:9e:6c:97:f4:c6:b3:ed:12:65:fe:01:a8:63:
6e:46:d9:f7:8d:1f:0c:6b:b7:0f:4f:bd:91:cb:d1:
08:7f:69:56:89:9a:d8:da:08:9a:26:c1:83:c3:ca:
8a:1c:1f:6d:0f:0c:de:f1:0e:a3:55:8a:16:0a:f0:
0c:c0:74:f0:ea:92:da:09:c2:8f:18:a0:3e:3e:6c:
b1:80:5d:61:3d:c9:59:b5:3d:f2:0e:1c:11:51:85:
69:e2:97:20:90:0e:d2:e2:7b:13:a1:db:13:c3:0a:
61:3e:02:f6:22:c8:be:13:39:f8:7c:72:30:cf:8b:
62:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:33:A0:0A:CA:71:74:4A:7D:8C:39:B5:30:A2:A7:05:60:FC:5F:9C
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3134372e302f32342d3234203d3e20323138353031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.147.0/24
Signature Algorithm: sha256WithRSAEncryption
88:63:07:68:34:43:1f:94:07:f0:3e:11:b8:70:18:9a:96:da:
d0:72:51:00:66:9b:a3:aa:ed:96:8e:f4:dd:b7:12:ea:7c:01:
1f:26:3e:f1:7b:47:a2:d6:f1:3b:1d:1f:57:9f:ef:86:1c:b0:
b0:92:10:e0:8e:c9:92:24:9f:b3:7d:85:66:c5:2a:fe:4b:83:
5e:57:20:75:da:bd:f9:53:aa:41:1a:7a:90:26:82:2e:cd:3d:
de:4f:13:b4:07:34:91:3e:89:e9:72:84:f4:70:bd:aa:4f:21:
56:0b:3e:98:cf:62:ff:44:89:fe:63:e7:c6:35:5e:14:4b:01:
b9:e3:d7:1e:13:50:31:42:bc:88:95:12:6b:dc:73:0a:16:ab:
2c:3d:ee:7a:c6:a6:1d:b3:72:88:0e:30:d5:54:e3:5e:1c:46:
38:80:d0:9b:b1:e1:44:66:9d:68:50:1d:dc:5a:36:15:8c:c6:
eb:68:cb:90:59:6d:1d:2a:84:f2:5b:a9:13:fb:f0:fb:bc:a6:
2b:a1:7b:96:d8:82:3d:f1:a9:c7:fb:dd:42:7d:4f:a1:d2:2f:
f9:79:f5:2a:29:ad:0d:a2:12:cf:79:ac:c5:af:11:f7:80:57:
ec:6b:20:9a:c6:69:62:11:04:af:92:cd:36:e1:10:41:06:1a:
79:d5:d1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:47:37 2026 by rpki-client