Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e37332e302f32342d3234203d3e20323138393535.roa
File: 3136302e32312e37332e302f32342d3234203d3e20323138393535.roa (raw, json)
Hash identifier: qBo0xQc9No11go2nd/ogwHN4MvK9hJV0nAjiDX+dfpk=
Subject key identifier: 3B:01:89:94:F1:8F:70:44:C3:BF:87:FF:95:5A:7A:92:F7:48:20:7F
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 081CD43507E324806CC23CAD4116E097717E566F
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e37332e302f32342d3234203d3e20323138393535.roa
Signing time: Mon 07 Sep 2026 07:21:40 +0000
ROA not before: Mon 07 Sep 2026 07:16:40 +0000
ROA not after: Mon 06 Sep 2027 07:21:40 +0000
asID: 218955
IP address blocks: 160.21.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 03:19:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:1c:d4:35:07:e3:24:80:6c:c2:3c:ad:41:16:e0:97:71:7e:56:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Sep 7 07:16:40 2026 GMT
Not After : Sep 6 07:21:40 2027 GMT
Subject: CN=3B018994F18F7044C3BF87FF955A7A92F748207F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:16:be:85:99:c0:54:96:c5:87:20:5a:7d:85:
8e:3e:82:43:47:04:46:c7:25:94:46:3f:ac:14:94:
d7:84:d2:e9:2d:e5:fa:3c:49:ff:b1:4d:45:be:24:
1f:3f:a3:7d:ba:53:b9:7d:75:cd:c0:35:c2:f2:1f:
53:60:4c:b0:bd:4c:79:7f:54:41:8c:66:01:8c:30:
86:d8:2a:34:4a:15:d6:b2:56:5f:4f:5b:9b:05:a6:
14:6e:5d:4c:81:c3:84:b9:93:be:c9:4e:70:98:81:
c7:5f:27:97:0b:06:5d:48:9b:94:f8:73:ec:41:36:
5c:23:19:d3:18:42:9a:a3:ce:77:5c:ae:ab:6c:16:
d6:b3:62:c0:29:e8:5f:60:45:8d:f1:32:74:8b:99:
df:80:86:bd:cf:a8:84:b7:12:09:26:96:7f:a8:61:
f1:c8:2e:c5:57:82:b7:d3:b0:aa:ff:22:4f:c5:7d:
b2:70:09:0a:d1:09:fd:3d:84:48:b4:45:bf:02:fd:
20:6f:62:3c:65:f5:b8:be:b5:7a:8a:68:fa:53:e0:
7f:20:72:4d:f8:f0:9a:9c:b1:88:ed:94:b6:32:cb:
0b:ee:fb:31:f2:3d:14:68:40:6f:55:66:01:a2:b1:
07:06:21:2f:53:5a:7f:c3:88:36:61:07:42:cd:4c:
e2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:01:89:94:F1:8F:70:44:C3:BF:87:FF:95:5A:7A:92:F7:48:20:7F
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e37332e302f32342d3234203d3e20323138393535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.73.0/24
Signature Algorithm: sha256WithRSAEncryption
52:19:84:44:dc:63:a1:21:79:13:34:73:5f:fb:e0:9b:7e:0f:
2d:d1:23:a9:ff:95:08:9c:26:e7:6c:35:94:53:73:58:dd:f6:
c7:01:e9:33:83:79:f4:4a:df:76:a0:96:80:be:17:64:e3:17:
6c:2f:85:64:f8:57:82:21:09:0d:60:5c:e9:cd:31:b0:2c:f9:
5e:1c:60:97:5f:e7:14:be:9e:1c:d5:a7:06:ce:69:f9:5f:95:
8d:ea:a3:c6:75:ad:e7:3d:c5:07:75:ed:81:b2:99:9c:76:26:
5d:95:2a:71:b8:05:d0:b2:ba:50:6a:a4:fd:ca:49:6e:ae:e1:
71:9a:93:5f:a7:b8:9c:27:49:8b:c2:8c:7e:f2:fb:c0:59:5f:
5b:e6:39:be:44:69:6a:9a:5f:59:37:1c:b8:8a:7a:65:b4:b8:
e6:03:ce:b9:62:50:8f:69:29:8f:ac:f3:a7:1d:f3:31:fd:a8:
32:fc:86:76:28:55:a3:1b:49:a4:00:cb:fb:a8:d3:58:c3:e4:
30:80:7e:85:fd:55:30:ce:b2:84:76:6a:1e:8c:c4:47:0c:9f:
26:e3:f3:16:5f:a9:1c:6b:76:66:bd:94:45:35:b1:97:0e:7b:
3c:4e:c8:a3:dc:23:f2:aa:bf:83:9a:3f:65:b1:ee:bd:8a:65:
3a:a4:05:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 10:14:55 2026 by rpki-client