Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3135302e302f32332d3234203d3e20383334.roa
File: 3136302e32312e3135302e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: kecJRePBm7eJaXyDU88OGEnwvFMmX5YHYZeU9obO4jA=
Subject key identifier: 6A:6D:9C:EB:96:53:BF:B6:F3:29:FA:2D:58:E7:EE:C1:EA:07:E0:1F
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 42F432017124E35567113CE2F2348CB5E5F77A74
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3135302e302f32332d3234203d3e20383334.roa
Signing time: Sun 11 Oct 2026 08:35:15 +0000
ROA not before: Sun 11 Oct 2026 08:30:15 +0000
ROA not after: Sun 10 Oct 2027 08:35:15 +0000
asID: 834
IP address blocks: 160.21.150.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 08:58:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:f4:32:01:71:24:e3:55:67:11:3c:e2:f2:34:8c:b5:e5:f7:7a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Oct 11 08:30:15 2026 GMT
Not After : Oct 10 08:35:15 2027 GMT
Subject: CN=6A6D9CEB9653BFB6F329FA2D58E7EEC1EA07E01F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0e:0d:f6:0f:72:fa:d0:a5:2e:99:1f:57:05:
bf:72:3c:d0:80:37:4a:21:b5:ca:71:4f:74:cc:61:
a1:07:1c:11:d5:40:76:85:19:16:3b:c1:b3:b6:21:
db:c8:7c:e6:43:d1:b7:0a:cf:a2:69:de:7b:95:94:
65:c8:0e:74:c4:f3:67:bb:06:8c:c3:62:77:40:10:
d4:5e:2d:6b:fb:3f:43:a2:e3:c2:df:b1:61:20:de:
7b:c6:bd:26:48:39:9f:94:26:bc:c7:02:86:68:cd:
31:f5:9a:ab:f0:e5:8a:2d:ec:42:bc:5f:cb:0f:2c:
56:7d:40:75:2a:5d:19:e0:1d:7e:17:7a:a0:b5:e6:
59:a1:c7:6a:11:ad:0c:90:df:a0:75:ad:7d:13:09:
ba:34:19:6b:17:91:99:15:5b:d2:5e:95:b7:ef:74:
69:5c:2a:24:8e:f5:28:7e:d2:69:f8:89:f1:05:37:
ad:fa:7c:6b:55:7f:0c:2b:54:bb:29:20:96:56:3f:
32:d6:8f:28:ff:46:a0:f9:0d:1d:d9:3a:97:fa:95:
8a:10:32:9f:7a:6a:c1:1b:d8:3d:95:88:50:a9:1f:
f6:e6:21:24:db:71:21:c0:6a:7d:40:d7:8f:b2:56:
b6:30:15:fc:08:cf:6d:02:53:e2:74:45:b0:23:6a:
39:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:6D:9C:EB:96:53:BF:B6:F3:29:FA:2D:58:E7:EE:C1:EA:07:E0:1F
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e3135302e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.150.0/23
Signature Algorithm: sha256WithRSAEncryption
96:d3:b7:e3:9d:ad:30:99:bd:77:f7:5b:98:ee:31:e7:d2:38:
ab:03:e8:40:c1:a3:65:27:1b:82:cc:4e:70:c2:0f:75:21:80:
df:29:8c:3d:d0:1b:05:ed:23:bf:76:71:cb:5e:14:c0:e3:0c:
61:d9:99:cc:86:3a:a5:1a:7d:c3:e1:9d:15:8d:60:b5:79:67:
61:25:7c:02:f5:47:2a:63:a9:49:ef:1c:8d:be:67:50:af:3b:
b5:4f:7c:b0:9b:32:2f:9e:55:e5:8f:73:a5:a7:51:f4:02:3b:
4e:ca:ab:c2:bf:ac:dd:4e:ef:74:38:e5:bf:b8:bc:fc:9a:0a:
89:56:da:82:2b:a5:0d:e4:7c:53:a6:93:2d:f8:f1:0a:cd:f2:
58:5e:38:e3:d8:66:9f:d7:f8:eb:78:c6:1c:f9:fc:0e:26:a0:
c9:9a:79:af:0c:06:4a:bf:bc:fe:48:f0:f5:f0:b6:23:f3:3b:
7c:b5:b2:bd:6a:a0:fa:3a:24:0d:a6:fb:3b:54:00:37:63:0a:
65:6e:96:8a:ec:ac:64:9b:16:c9:f7:2f:2c:ff:ad:73:89:6a:
a3:91:49:18:a3:65:d3:a6:ee:b9:65:87:9e:f4:e8:06:94:82:
93:15:0a:49:59:78:63:6b:13:1f:ea:ee:f2:33:fb:df:32:eb:
d5:ad:78:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 20:09:55 2026 by rpki-client