Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e37322e302f32342d3234203d3e20343032383636.roa
File: 3136302e32312e37322e302f32342d3234203d3e20343032383636.roa (raw, json)
Hash identifier: pTxwMQS36/iP7ThnnhIwAjirIH3e7bKzkPK+JopdpaA=
Subject key identifier: 21:94:AE:C0:DF:E4:F7:B1:2D:1E:D9:8B:E9:27:9C:9C:F2:E1:6E:76
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 55F9EF2F7C050DA7D7C4E01A20A097D9CDC54963
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e37322e302f32342d3234203d3e20343032383636.roa
Signing time: Fri 04 Sep 2026 07:31:03 +0000
ROA not before: Fri 04 Sep 2026 07:26:03 +0000
ROA not after: Fri 03 Sep 2027 07:31:03 +0000
asID: 402866
IP address blocks: 160.21.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 03:19:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:f9:ef:2f:7c:05:0d:a7:d7:c4:e0:1a:20:a0:97:d9:cd:c5:49:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Sep 4 07:26:03 2026 GMT
Not After : Sep 3 07:31:03 2027 GMT
Subject: CN=2194AEC0DFE4F7B12D1ED98BE9279C9CF2E16E76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7e:7a:d5:12:06:b1:6f:80:73:94:49:0d:0f:
f3:d2:89:0b:ad:b4:bd:be:eb:a8:95:83:be:80:2e:
81:0f:1a:5b:ae:42:35:3b:f6:b2:db:7f:94:69:3f:
b2:8f:39:b1:d0:84:d5:3b:03:1d:0d:b0:3c:6f:67:
69:5b:f9:d6:1b:ce:84:50:dd:1b:e7:f4:a5:5a:01:
5e:41:40:ba:7f:b0:b6:70:60:21:e1:58:b7:e6:8a:
fb:99:b8:2e:1c:af:99:58:5b:93:6f:43:74:3f:8f:
3c:cf:ef:55:86:15:83:97:08:68:1e:0c:5b:08:68:
eb:d3:fb:70:79:49:ca:e7:c5:94:ce:1b:90:66:a5:
f8:1f:d1:81:e5:ee:c4:9d:d7:c6:37:5f:6f:a5:c9:
04:e2:b8:33:4b:54:10:6a:94:7d:c0:97:48:0b:ad:
f3:fe:3f:b5:7a:6c:b2:d0:51:27:ea:86:aa:18:84:
6c:90:10:ba:4c:26:4a:3a:f3:06:45:fe:db:31:2d:
f3:f2:6b:30:51:77:e2:ff:bb:85:eb:38:86:a6:f2:
23:b2:22:a6:aa:89:6c:ad:2d:df:3c:03:b1:51:12:
a0:62:d0:4d:d9:aa:1a:78:54:bb:70:49:dd:e5:30:
50:ab:ab:8a:8c:b0:a9:ed:cc:30:4b:be:b6:9d:89:
ee:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:94:AE:C0:DF:E4:F7:B1:2D:1E:D9:8B:E9:27:9C:9C:F2:E1:6E:76
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e37322e302f32342d3234203d3e20343032383636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.72.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:30:03:20:96:ae:85:72:a7:6a:ce:3f:cf:8c:84:16:b4:c7:
73:cf:d2:28:2d:8f:4f:7e:58:9e:b8:28:88:38:65:7e:39:e1:
21:e6:39:98:e5:9a:85:58:78:55:dc:74:bc:70:19:fb:74:50:
3f:cd:a7:ad:ea:79:28:c7:9d:dc:ac:50:8e:be:2e:34:71:f6:
56:bf:f9:68:00:34:da:19:3d:9c:d3:6d:59:9e:7c:2e:2a:ac:
64:b7:69:e2:ee:29:29:e4:91:27:9e:e8:87:aa:7c:8b:7e:e5:
45:93:06:ca:91:06:67:22:84:6b:ac:a9:58:46:83:19:ae:0c:
5f:fe:a1:e8:3c:22:af:e2:3d:61:e0:6d:9d:75:53:1e:ce:8f:
9e:9c:44:d4:03:41:14:5a:1d:17:29:56:dd:1e:a1:09:3e:bd:
1d:2a:36:d1:94:bb:08:99:6d:a3:ec:f1:1a:2c:94:bc:0b:b5:
f3:23:f7:50:e7:7c:fe:93:cc:64:0b:1f:29:07:f5:a7:31:16:
8b:08:8a:fa:e0:4d:c8:48:f8:c4:74:03:6f:75:04:5b:e5:ef:
7f:a9:86:ce:bc:2b:46:60:07:94:45:ec:f9:e8:d6:f3:81:13:
37:a1:eb:da:08:89:6b:c2:e0:6c:50:b7:ec:38:a8:f8:0e:6a:
5c:07:18:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 10:15:00 2026 by rpki-client