Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3134382e302f32342d3234203d3e20383334.roa
File: 3136302e32312e3134382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: IkoznJ5+Hr34gy08l7ZkHjWnGpiKQ5zc3xoL4BfFPYo=
Subject key identifier: 08:5E:A8:D5:65:92:1B:5B:4E:0C:29:B6:A4:A6:59:AE:A5:82:B6:BB
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 69F5D7D5C59BD18A99B581D99069BED843CBF5B6
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3134382e302f32342d3234203d3e20383334.roa
Signing time: Sun 11 Oct 2026 08:35:15 +0000
ROA not before: Sun 11 Oct 2026 08:30:15 +0000
ROA not after: Sun 10 Oct 2027 08:35:15 +0000
asID: 834
IP address blocks: 160.21.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 08:58:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:f5:d7:d5:c5:9b:d1:8a:99:b5:81:d9:90:69:be:d8:43:cb:f5:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Oct 11 08:30:15 2026 GMT
Not After : Oct 10 08:35:15 2027 GMT
Subject: CN=085EA8D565921B5B4E0C29B6A4A659AEA582B6BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:aa:0b:16:d0:ba:ac:e8:53:4c:d5:b7:8d:26:
50:27:30:3e:66:d9:93:f8:5e:4f:b4:d3:15:5c:fc:
86:c4:36:42:9a:26:e3:ab:9d:fd:50:0b:c0:bb:cc:
46:97:f8:eb:a2:1b:ab:54:16:73:00:9c:73:0f:84:
02:9b:32:35:6e:f2:9e:63:0a:21:6e:44:a7:2c:c7:
8c:36:7b:54:34:c2:88:53:2a:e9:b8:4d:99:9e:8b:
52:3b:90:30:73:bf:b9:68:e6:0d:a9:7e:17:7b:6f:
4c:c3:03:d1:05:74:16:9e:6d:84:a8:a6:5d:d0:7b:
ab:7b:26:71:bb:8d:08:93:eb:81:98:cb:38:17:db:
22:dc:97:9f:c9:90:85:56:0d:96:17:85:59:6c:b1:
2d:27:ad:d9:9a:3e:c3:e2:d8:22:a9:89:f3:c3:8b:
b1:27:d7:e3:bc:19:5c:4a:33:24:a8:36:20:2b:10:
7c:de:01:89:5f:c4:aa:1e:61:4a:ab:25:a8:0a:e0:
3b:83:77:24:b9:57:bc:b8:96:c4:12:b9:56:75:9f:
b1:81:ee:dc:de:8e:85:ab:e9:ed:01:15:a6:bb:11:
94:c0:fa:00:35:79:fb:10:40:b8:fc:76:3e:a2:52:
63:18:e6:d9:2f:f9:6c:17:36:03:80:f1:7f:a0:c0:
e6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:5E:A8:D5:65:92:1B:5B:4E:0C:29:B6:A4:A6:59:AE:A5:82:B6:BB
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3134382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.148.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:5c:88:c1:78:e5:75:35:70:00:83:3e:6b:c4:97:e1:97:8d:
63:07:03:0b:1e:78:c8:cb:80:9a:bc:4f:24:8e:9c:89:91:15:
c1:41:8a:72:4d:12:3a:ab:66:c2:e8:c2:0e:3d:1c:05:b0:11:
52:b2:15:de:8c:c0:13:d8:22:5b:d3:7a:5e:9b:01:7a:7c:23:
1c:69:f7:3f:d8:46:6a:12:db:7e:d9:ba:31:04:90:35:7d:90:
8e:20:77:69:2a:fe:a0:01:5c:1a:98:84:d9:f8:50:36:f7:16:
31:97:6d:a2:63:7b:6a:29:8a:27:99:b1:42:d9:44:b6:24:20:
00:cf:96:50:23:d7:74:2d:3b:fb:82:d5:23:57:03:0d:43:ef:
6b:41:0a:68:75:af:35:96:de:26:b2:9d:3b:41:d9:e4:8f:93:
c2:25:fa:6a:4e:42:f4:71:f6:05:4a:c3:7b:98:6b:ab:6b:8a:
a0:0c:e8:13:8a:5b:aa:d8:ec:69:06:e2:86:39:54:fd:79:7f:
d2:f7:b3:8e:a0:f8:95:64:10:1e:8d:48:d6:a8:b0:39:07:bc:
fb:f6:07:d3:9f:ce:48:6d:68:5f:3a:ac:59:fe:e3:e1:90:c0:
d2:64:95:5f:6a:74:c4:a6:54:02:70:aa:f3:99:fc:2b:c7:5f:
24:55:22:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 20:09:56 2026 by rpki-client