Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3134382e302f32322d3234203d3e20383334.roa
File: 3136302e32312e3134382e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier: CbGtu8WmTGSH7iWvOXbsTkUrZypMnq+2eknWjrEuFHU=
Subject key identifier: C3:F1:1B:1D:2E:28:5C:52:6A:06:E1:68:00:CD:BC:19:60:99:5B:B2
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 7A6067EA52178122A0F6CF12D57532B6ED47B52B
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3134382e302f32322d3234203d3e20383334.roa
Signing time: Fri 11 Sep 2026 22:44:32 +0000
ROA not before: Fri 11 Sep 2026 22:39:32 +0000
ROA not after: Fri 10 Sep 2027 22:44:32 +0000
asID: 834
IP address blocks: 160.21.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 03:19:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:60:67:ea:52:17:81:22:a0:f6:cf:12:d5:75:32:b6:ed:47:b5:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Sep 11 22:39:32 2026 GMT
Not After : Sep 10 22:44:32 2027 GMT
Subject: CN=C3F11B1D2E285C526A06E16800CDBC1960995BB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:63:b1:5a:66:cb:79:0a:52:1e:89:08:48:76:
33:e5:93:3a:31:9b:3f:19:ee:22:74:e1:22:cd:a1:
8f:7a:58:5b:a9:ba:7d:e2:56:2c:9c:2c:36:57:f9:
35:52:97:7d:3a:14:35:93:9a:fc:ea:2c:8e:0a:1c:
3c:b2:fb:f1:11:17:50:25:a6:88:7f:05:9b:b4:31:
bf:b5:fa:41:08:66:b3:ec:93:ae:d8:b4:56:58:0d:
f8:7e:a4:d5:ac:7e:77:22:10:a2:7f:c8:01:39:a8:
55:ea:f7:44:43:32:11:77:99:ce:cf:a5:36:81:d6:
18:f9:29:55:84:e5:e4:50:4f:38:f5:d8:7d:6a:75:
a8:4e:de:78:0b:50:77:8a:a4:03:ed:03:ec:df:8c:
98:95:90:49:dc:b1:f6:eb:2a:63:24:98:ae:16:ac:
65:c4:e4:3d:54:5f:29:e2:6e:fc:9c:4e:26:59:a1:
c0:bc:4e:63:67:ae:79:fd:31:34:b6:94:07:1d:d5:
00:3f:5b:23:77:12:97:48:12:b5:8b:0c:2f:77:d0:
d2:d4:3c:86:9b:79:06:dd:dd:e7:7f:88:6b:71:0e:
a5:e2:30:75:61:89:73:36:38:70:a9:86:e6:a9:d7:
6a:f2:e0:e6:4b:80:7e:74:23:da:c8:91:8b:98:cc:
2d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F1:1B:1D:2E:28:5C:52:6A:06:E1:68:00:CD:BC:19:60:99:5B:B2
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3134382e302f32322d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.148.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:5d:0a:10:97:93:8b:0b:90:b2:a7:2e:3c:4f:b4:d4:c3:f3:
b3:45:a5:2f:79:a1:48:68:0d:86:a7:42:f0:58:90:7d:0d:ab:
3e:9e:37:7f:c3:1a:2a:ac:5e:68:ab:81:eb:fa:46:41:30:78:
2c:06:0d:d8:f6:f9:52:a9:88:4a:5b:f3:6c:37:61:c5:2f:81:
4f:d1:40:d7:71:38:46:8c:c0:8f:64:8d:d1:b4:56:d7:f3:32:
e7:52:d7:11:89:e3:14:56:d7:bc:db:69:cb:16:95:b6:ca:c8:
cf:52:15:61:87:cd:53:95:e8:2e:24:30:e3:cc:3b:b1:4d:78:
fe:7f:3d:9f:e7:c6:b2:a4:61:1a:6a:82:56:00:80:4f:b2:b2:
92:3a:68:d5:f1:81:5f:d7:99:34:45:3a:b8:e1:ad:36:32:cb:
7b:22:80:55:30:48:ba:29:4e:7b:00:81:67:6c:0b:5e:0e:1f:
5a:8f:27:09:a3:2f:f4:3d:99:58:38:af:0a:d0:24:58:15:ef:
2c:02:67:75:fb:a9:88:ab:28:79:db:0c:3d:e8:14:17:14:91:
a1:68:cd:ee:58:57:e8:9e:a0:a8:59:e5:a1:a9:aa:5a:df:4c:
0b:d4:3b:4b:28:b0:46:53:a3:16:10:12:c4:ad:ae:ac:f6:6a:
14:0b:c4:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 10:14:50 2026 by rpki-client