Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e37322e302f32332d3234203d3e20383334.roa
File: 3136302e32312e37322e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: bXMA8XGuIRxwZNvW06ZHB8bUe+1qnPfJW2W3hu7effE=
Subject key identifier: A2:90:30:C5:26:25:69:6B:6A:DB:88:45:79:C8:6F:B1:C7:BD:D3:88
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 4E6D7D3583F316FFD2AAFEDFA1B2A4F887072CE3
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e37322e302f32332d3234203d3e20383334.roa
Signing time: Fri 02 Oct 2026 13:27:47 +0000
ROA not before: Fri 02 Oct 2026 13:22:47 +0000
ROA not after: Fri 01 Oct 2027 13:27:47 +0000
asID: 834
IP address blocks: 160.21.72.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 04:21:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:6d:7d:35:83:f3:16:ff:d2:aa:fe:df:a1:b2:a4:f8:87:07:2c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Oct 2 13:22:47 2026 GMT
Not After : Oct 1 13:27:47 2027 GMT
Subject: CN=A29030C52625696B6ADB884579C86FB1C7BDD388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f4:cd:c5:0f:7f:13:e6:e4:91:cc:bd:f4:55:
f0:51:93:d6:64:e4:c0:cc:06:6e:62:16:7c:f7:b9:
14:0e:ea:03:54:8e:67:84:36:a2:31:20:85:8e:27:
24:28:12:53:de:f8:a5:9b:e2:1c:d9:5f:c6:b0:e7:
cb:0f:b7:1c:39:22:3e:0b:30:8a:5d:01:3f:52:32:
81:75:93:4f:d2:e5:59:b5:44:99:ca:be:d0:18:ce:
ab:74:af:44:9b:13:7e:73:69:8c:4a:1c:d2:cd:26:
7a:42:67:33:33:ef:7c:58:f8:4f:08:a7:4a:96:94:
8e:ac:45:7b:04:e2:9f:29:73:64:4f:23:80:82:0f:
3d:a3:1c:5a:df:87:a7:78:94:ac:e3:a8:bf:8d:c9:
0b:73:66:1e:d7:eb:41:b1:de:66:e5:3a:1b:a4:59:
51:16:2a:c7:eb:d5:eb:bb:ae:fd:ab:52:9a:0d:eb:
78:fb:bf:06:6c:cd:89:5b:9b:8f:e3:6e:90:b4:16:
89:00:78:e0:92:df:63:92:32:3c:7e:ca:40:a0:28:
28:9a:26:df:72:7c:07:14:0f:10:bd:03:7e:c7:f7:
75:d3:aa:69:8d:f2:a3:12:59:eb:9a:06:4c:a6:ff:
3b:c3:6a:8f:b0:ea:f0:37:e9:6e:19:19:63:ae:b7:
bf:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:90:30:C5:26:25:69:6B:6A:DB:88:45:79:C8:6F:B1:C7:BD:D3:88
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e37322e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.72.0/23
Signature Algorithm: sha256WithRSAEncryption
85:44:d9:e2:f8:ff:8e:9e:4c:51:29:a6:58:22:a2:73:df:a1:
86:5d:44:bc:68:31:ad:6a:94:6c:ba:58:bf:67:5e:63:45:6c:
79:af:70:df:5e:19:04:3c:c3:6f:bb:49:94:7b:4c:d5:65:a4:
e1:d1:5b:31:59:19:93:ad:eb:43:16:ff:1f:f3:87:17:56:2e:
01:ab:d5:03:23:48:6a:88:e9:8a:ae:e2:ca:39:9b:28:3a:c8:
6d:e7:a6:77:c0:11:11:14:13:b8:02:2c:d3:07:0b:d6:13:03:
fc:6c:e2:87:fa:83:d3:35:30:07:66:cb:5f:47:24:4b:3c:19:
d8:63:c7:ba:f5:aa:e7:79:af:5a:24:b1:9b:81:76:b6:7a:c9:
4c:d7:9d:bf:35:63:16:14:f6:11:09:65:db:7c:81:be:7d:b7:
e6:32:06:2c:cf:70:64:96:4b:89:b6:ec:20:7d:5d:f5:b7:ff:
4c:d4:e6:cb:f9:15:fe:cc:e2:ac:76:7d:20:10:67:49:f3:24:
22:ad:ba:ab:2e:c8:a6:d5:a3:83:c0:4e:13:37:04:32:61:14:
21:1e:5a:f4:dd:23:0a:9d:f8:59:a0:d2:4b:25:e8:60:cf:4d:
38:48:60:a8:58:69:27:ae:a3:e1:e9:e8:80:c2:83:cb:6c:9f:
df:63:6e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 11:30:21 2026 by rpki-client