Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e36342e302f32312d3234203d3e20323131323532.roa
File: 3136302e32312e36342e302f32312d3234203d3e20323131323532.roa (raw, json)
Hash identifier: 1+IZGaN+0BempiqYn/sRLtxbFjZu6gZ9Vr2ZtfOZz9c=
Subject key identifier: FC:2B:05:C2:A0:08:A5:C8:49:6F:68:8D:3E:4D:74:B8:75:77:19:E9
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 50B9A084D088AE85B5C83E557FABCC0B1800B102
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e36342e302f32312d3234203d3e20323131323532.roa
Signing time: Mon 12 Oct 2026 10:03:17 +0000
ROA not before: Mon 12 Oct 2026 09:58:17 +0000
ROA not after: Mon 11 Oct 2027 10:03:17 +0000
asID: 211252
IP address blocks: 160.21.64.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 00:51:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:b9:a0:84:d0:88:ae:85:b5:c8:3e:55:7f:ab:cc:0b:18:00:b1:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Oct 12 09:58:17 2026 GMT
Not After : Oct 11 10:03:17 2027 GMT
Subject: CN=FC2B05C2A008A5C8496F688D3E4D74B8757719E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:c9:8d:14:69:f6:44:8b:7a:a9:95:b9:10:16:
0e:dc:d9:4d:ca:3d:98:64:2c:08:89:98:3e:32:2a:
bf:d0:ff:95:c6:30:40:ba:25:54:91:33:e1:cf:06:
3e:52:51:be:69:9b:b6:72:8d:6c:43:ab:e5:23:48:
60:ad:c4:12:d8:00:a2:79:78:08:4e:d7:8d:91:46:
63:ac:27:9d:72:29:1c:0e:e0:5b:df:4f:c9:9b:f5:
bd:76:44:a7:6e:5a:bb:50:e5:ee:b1:d2:3b:1c:a8:
a8:3f:cc:14:6d:89:cd:52:02:cf:41:c3:fd:0d:89:
6b:53:46:6a:10:35:a6:f7:db:d6:79:0a:e1:26:8e:
58:61:10:64:8d:4c:8a:3e:46:24:06:b9:7f:0d:b4:
35:d0:c2:06:d1:c1:31:77:b4:66:c1:24:78:23:cc:
1a:01:c7:a8:79:8e:ef:b1:4c:46:cf:62:7f:a5:fc:
b9:ff:ac:c2:94:c3:73:c0:66:e7:f7:cd:6c:a5:83:
22:6f:b1:cb:0d:18:80:78:d2:49:5c:d2:d7:71:35:
1e:08:88:b5:6e:7e:a9:51:22:fd:18:f7:14:36:52:
fa:75:4e:49:27:b4:2a:b1:34:a1:32:41:8a:f2:23:
6f:e8:82:ec:35:cb:a0:7d:93:1d:c9:82:60:b9:6a:
ad:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:2B:05:C2:A0:08:A5:C8:49:6F:68:8D:3E:4D:74:B8:75:77:19:E9
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e36342e302f32312d3234203d3e20323131323532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.64.0/21
Signature Algorithm: sha256WithRSAEncryption
a8:1f:a9:e1:1d:cc:86:ce:e2:96:91:67:7c:67:f3:48:c5:86:
2d:9f:f9:63:1e:c2:c1:13:a2:b1:4b:1a:9f:85:5e:90:71:02:
94:b2:be:a0:05:fa:58:13:d3:f1:ab:85:ba:36:f6:3e:b2:84:
0f:b6:26:d7:9c:70:5a:18:a5:c8:21:51:8f:15:9a:d5:e5:80:
7e:f3:20:ad:13:11:fa:6b:07:63:51:94:13:8a:1e:8c:4f:a3:
39:83:e1:89:69:12:5e:85:00:dc:39:bf:0c:0f:e1:36:ef:11:
24:7a:fc:58:69:c9:80:c2:6b:e7:11:0b:53:93:d5:97:c5:42:
b7:e3:9d:c9:62:18:20:5d:13:02:aa:84:f3:a3:99:c8:06:39:
c5:3e:f2:52:39:6a:94:57:df:be:81:c3:00:8f:84:2d:25:95:
e8:98:ba:ed:73:f5:9e:02:10:b7:77:e6:25:28:8e:65:0c:fd:
84:00:30:a0:a8:67:9a:80:dc:d0:10:a3:d8:d5:43:1a:f2:39:
7b:7c:4d:12:cc:bf:5b:f1:93:64:5a:e7:19:3d:bb:4f:67:4d:
09:3d:76:01:36:4e:18:50:55:39:7e:aa:6e:86:a7:1c:64:c9:
24:bf:e7:a5:61:cd:9f:d7:06:ca:ac:ae:a3:73:fe:d8:8f:9b:
7f:d6:6d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:20:56 2026 by rpki-client