Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e37332e302f32342d3234203d3e20323138393130.roa
File: 3136302e32312e37332e302f32342d3234203d3e20323138393130.roa (raw, json)
Hash identifier: mQ3HaYBRClTauCVFosrFc5Fs3rgMh47mBTGslQvJdCg=
Subject key identifier: 23:CD:2A:4E:43:B9:E4:7B:4E:D5:4B:6D:00:87:D1:72:88:86:40:D7
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 03F291986FE6CFE86CADCC9CBB77A809C204503C
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e37332e302f32342d3234203d3e20323138393130.roa
Signing time: Mon 07 Sep 2026 07:21:53 +0000
ROA not before: Mon 07 Sep 2026 07:16:53 +0000
ROA not after: Mon 06 Sep 2027 07:21:53 +0000
asID: 218910
IP address blocks: 160.21.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Sep 2026 16:40:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:f2:91:98:6f:e6:cf:e8:6c:ad:cc:9c:bb:77:a8:09:c2:04:50:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Sep 7 07:16:53 2026 GMT
Not After : Sep 6 07:21:53 2027 GMT
Subject: CN=23CD2A4E43B9E47B4ED54B6D0087D172888640D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:49:7a:19:d4:3b:24:25:3b:a3:d8:50:20:fb:
17:74:58:81:ee:ed:8f:89:97:20:7d:be:5d:36:f1:
1d:c9:65:69:7c:cb:09:43:36:a6:1c:99:15:33:00:
6a:4b:cb:01:ed:71:cc:ef:25:62:1e:ef:ed:d0:31:
d5:bf:ce:32:20:14:76:26:fc:be:c5:1c:bd:9c:e1:
3c:e0:b2:10:e5:54:dd:e4:f4:89:5d:df:ba:b0:a3:
9e:52:34:a5:94:24:e9:f8:16:e4:06:fd:93:b9:ec:
16:ed:ff:4f:f1:18:f3:d1:d4:cf:dc:c8:64:9d:c3:
53:c7:cd:48:b7:e5:a6:e8:51:39:03:5d:8f:28:6d:
0d:be:51:45:c6:13:cc:81:8c:5b:57:21:d8:50:08:
3f:84:e4:22:f2:7b:94:ff:9a:04:20:71:e2:56:09:
65:20:df:4d:5b:9d:a9:23:ad:c5:67:cb:bf:42:98:
ec:8f:d1:ea:9c:56:0e:fe:d6:52:3c:12:8e:c7:f5:
4a:94:d4:47:6f:ba:8c:08:77:45:ed:0a:5c:6f:6e:
ee:23:1c:56:75:f5:b4:ec:46:30:ac:75:df:8b:eb:
4b:bb:36:05:b2:11:9e:0a:69:cd:ce:ed:da:56:f9:
c9:20:bf:42:ed:3a:0f:21:f7:9f:b0:11:5e:b5:d5:
ca:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:CD:2A:4E:43:B9:E4:7B:4E:D5:4B:6D:00:87:D1:72:88:86:40:D7
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e37332e302f32342d3234203d3e20323138393130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.73.0/24
Signature Algorithm: sha256WithRSAEncryption
76:fa:eb:1e:09:d5:1e:1d:8d:ad:0a:1e:38:42:51:5d:d1:23:
94:b6:00:94:d0:e4:c0:b1:52:1d:ab:d3:c0:71:a5:64:96:23:
37:29:6d:23:f9:27:06:56:4c:e8:72:3c:9b:88:c6:cc:5c:a0:
0b:6c:e2:b1:ec:41:b2:83:61:f9:ed:2f:f3:88:9f:22:66:a9:
22:85:8c:0f:07:1f:7f:29:a1:e3:b9:c4:39:68:42:47:39:d5:
e4:18:9c:af:88:e7:d1:d4:4f:cc:86:e5:de:ba:f0:5a:0a:df:
24:76:cd:f5:03:46:27:8b:90:81:ea:28:29:ce:19:27:c9:ed:
35:22:60:ae:97:64:b0:60:e4:50:7e:45:da:76:fa:c1:c9:aa:
8c:80:6a:d2:9d:b3:73:2b:6c:ec:e3:4b:d3:7d:a8:e2:74:cd:
a4:30:2e:3a:51:17:22:cb:e9:cd:2a:28:57:bc:ea:89:f8:72:
23:ff:14:9f:b8:6f:3d:6e:1a:47:35:8d:09:19:f8:12:03:a0:
c0:02:be:9b:9b:29:36:ca:a1:1d:56:d4:7b:1f:d4:67:99:9d:
51:71:95:8e:c1:18:f9:b2:ec:74:8d:3e:a5:b3:7b:4f:84:a1:
13:e6:e3:ea:a1:a9:57:77:4b:0a:c1:b7:26:89:87:aa:57:9d:
cf:cd:8e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 10:14:53 2026 by rpki-client