Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e37342e302f32332d3234203d3e20323036333030.roa
File: 3136302e32312e37342e302f32332d3234203d3e20323036333030.roa (raw, json)
Hash identifier: /hzxpBoMqDd2L0nPB4K0iySZ6VibEAmrFOdwOXZrRtw=
Subject key identifier: FC:6C:E0:E1:74:9C:DC:41:35:6E:8F:D0:AD:B4:4F:5A:72:0D:38:9F
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 5FB69FF49AA499F7CE8532045921F8251EC3BCD1
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e37342e302f32332d3234203d3e20323036333030.roa
Signing time: Fri 04 Sep 2026 13:42:42 +0000
ROA not before: Fri 04 Sep 2026 13:37:42 +0000
ROA not after: Fri 03 Sep 2027 13:42:42 +0000
asID: 206300
IP address blocks: 160.21.74.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 03:19:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:b6:9f:f4:9a:a4:99:f7:ce:85:32:04:59:21:f8:25:1e:c3:bc:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Sep 4 13:37:42 2026 GMT
Not After : Sep 3 13:42:42 2027 GMT
Subject: CN=FC6CE0E1749CDC41356E8FD0ADB44F5A720D389F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:0e:fc:4a:48:cc:3b:f6:7d:f6:22:bc:5a:db:
4c:8f:f1:31:6b:0f:fc:dd:21:ad:23:8d:93:dc:97:
70:55:92:c4:98:09:d2:df:1a:c5:8a:c5:ec:29:b7:
01:f4:d1:ea:52:6b:fe:17:d6:fc:dd:79:4e:6c:54:
d7:0d:6d:cb:36:62:be:d0:96:62:7a:f4:39:32:87:
33:90:19:d5:ad:36:8b:6e:66:3c:32:d4:8b:16:47:
16:e1:09:5d:53:eb:9e:5f:76:90:e6:b3:cc:f7:12:
e2:a1:51:75:f4:a3:7a:35:65:31:7c:bf:37:37:f3:
6a:ac:21:55:e6:55:a4:87:77:a4:47:02:75:e0:47:
7b:50:8b:7f:21:48:29:66:45:71:05:83:51:4b:df:
1c:5c:75:00:94:ce:2a:06:10:47:9b:9b:0b:45:2a:
73:7a:18:06:43:e8:bd:97:84:b5:12:2c:01:19:48:
6d:5e:33:36:59:80:a1:33:7c:ea:ed:7e:2e:0a:b2:
52:b9:6b:4f:cf:67:e5:81:fc:14:05:f9:e2:a6:91:
8f:be:06:cc:aa:86:11:41:bd:09:48:65:e5:d8:0a:
e2:43:35:21:ba:21:98:f9:03:5a:23:aa:ae:98:ba:
a3:c9:89:64:4b:5b:0c:26:68:68:b8:79:30:8a:e2:
7d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:6C:E0:E1:74:9C:DC:41:35:6E:8F:D0:AD:B4:4F:5A:72:0D:38:9F
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e37342e302f32332d3234203d3e20323036333030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.74.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:6a:1e:04:02:5c:f6:53:e4:36:c5:97:2c:96:b9:60:f9:3f:
6d:1a:19:ae:fa:ea:7e:f6:9c:77:04:00:a1:8a:14:c3:d6:12:
2f:dc:26:c5:ee:a9:e6:5c:3b:a9:a6:e3:bc:42:1d:ca:b0:2d:
c1:5e:f0:96:3c:26:e2:d8:33:f9:c0:c8:da:a9:e2:7e:47:cf:
bb:e5:60:a2:86:d0:62:96:03:eb:59:8c:76:ef:b5:78:89:02:
c2:f6:de:c3:e4:6e:1a:a7:9e:ce:cf:d4:50:5d:f5:76:54:00:
f8:7f:0b:50:87:59:bb:64:ae:f4:fb:36:e7:6f:df:83:bb:f3:
f5:3f:9c:83:76:70:94:ca:05:99:a3:a1:ee:9b:71:68:64:54:
eb:fa:5e:68:26:2f:5e:e5:63:e7:c7:e2:41:f4:eb:96:e8:0f:
f0:7f:ce:e0:c8:0c:bd:02:71:72:78:29:66:50:04:c1:c0:c6:
a8:60:ed:aa:35:2a:99:14:1a:a9:c3:e5:52:1c:98:fa:a0:be:
eb:ec:ad:9b:32:b5:b7:44:38:94:34:33:63:36:67:40:ea:77:
42:73:47:dd:cf:b7:49:e6:f4:2e:44:f1:b7:d5:86:40:f4:af:
ec:90:43:4c:16:64:99:c9:de:be:15:16:a5:ad:e4:3b:7f:5c:
48:27:28:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 10:14:46 2026 by rpki-client