Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e37342e302f32332d3234203d3e20393739.roa
File: 3136302e32312e37342e302f32332d3234203d3e20393739.roa (raw, json)
Hash identifier: dg6G1ncYqhTPnnTRMPS6sK8jnRk6ZV8PtID37brs7HE=
Subject key identifier: 64:71:BC:0B:C3:F4:97:A7:AA:96:54:32:39:5F:29:53:07:9C:19:D4
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 0EA5A4402109E19249AC4567A4816E81B3A6E446
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e37342e302f32332d3234203d3e20393739.roa
Signing time: Fri 04 Sep 2026 13:42:42 +0000
ROA not before: Fri 04 Sep 2026 13:37:42 +0000
ROA not after: Fri 03 Sep 2027 13:42:42 +0000
asID: 979
IP address blocks: 160.21.74.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 03:19:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:a5:a4:40:21:09:e1:92:49:ac:45:67:a4:81:6e:81:b3:a6:e4:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Sep 4 13:37:42 2026 GMT
Not After : Sep 3 13:42:42 2027 GMT
Subject: CN=6471BC0BC3F497A7AA965432395F2953079C19D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b4:ca:27:c1:6c:ce:1a:a5:e5:4b:1c:8b:94:
7e:d3:85:30:0c:51:f5:11:54:6c:ac:8d:d1:d9:83:
2b:b7:b2:5d:ef:62:ba:d0:ee:03:8a:0e:11:35:a8:
d6:fe:96:c2:28:ce:24:5b:9c:80:f9:12:e4:68:3f:
46:65:1a:b7:e6:18:79:25:a3:e2:02:50:af:2f:04:
ff:ba:6c:e2:3b:d3:ef:4d:75:18:c3:0b:cf:6c:c1:
89:dc:84:ff:72:48:2c:a8:a1:d3:fc:b3:08:68:0e:
a3:e8:db:0d:12:c9:0f:2d:6f:a2:9b:d1:80:78:eb:
a0:d7:76:2d:91:89:10:08:5b:e9:bc:81:cb:cd:ed:
e2:e8:07:64:97:88:19:e2:61:12:8e:19:b2:77:1a:
e1:b3:21:97:20:d7:c6:6e:f1:ca:80:04:b8:dc:30:
6a:82:7a:4d:f2:3a:35:b8:43:a8:dc:ef:59:d9:37:
b8:87:0a:af:81:84:c3:ec:2a:14:d5:51:39:3d:eb:
ad:c5:e4:db:ca:f3:80:13:60:ab:11:ab:4c:33:0d:
7a:ee:f4:70:07:c3:9b:36:ef:49:cd:98:56:9e:87:
9f:aa:55:48:92:fd:8b:63:ef:d1:20:43:ea:23:14:
c0:ef:f5:ba:01:f9:7e:bf:d7:97:aa:e8:72:20:68:
23:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:71:BC:0B:C3:F4:97:A7:AA:96:54:32:39:5F:29:53:07:9C:19:D4
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e37342e302f32332d3234203d3e20393739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.74.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:c9:ce:fe:31:93:58:f0:b4:60:2a:95:a6:0a:f8:8c:2d:bd:
d5:23:5e:8b:3f:ec:42:25:78:86:69:9d:f9:5c:d1:cc:36:c4:
30:2b:64:11:2f:a0:06:99:69:12:4c:a4:0a:a9:83:84:be:2f:
99:cd:b1:59:e2:6d:a5:37:58:7c:6d:1a:a3:f7:ad:c0:a5:a0:
bd:5e:42:44:e6:11:d8:35:9b:0a:40:db:78:35:8e:94:11:00:
dc:9a:ec:c8:be:7a:4f:1f:23:9c:11:e8:0d:d9:e5:d5:06:f3:
75:cf:82:7e:92:61:16:9d:92:0c:42:d3:c1:48:19:de:91:4a:
78:6f:29:85:7a:cf:30:13:19:29:44:18:d3:b7:7c:24:35:ae:
96:3a:af:6b:47:12:65:3d:06:ed:84:63:15:53:5e:0a:06:5a:
e3:44:44:8a:36:37:3c:a1:d6:13:69:31:30:de:c6:8f:c4:ba:
87:e8:d0:a7:0f:49:fd:6c:31:6f:91:0b:7a:04:a0:24:22:32:
97:4a:91:87:34:b6:ff:4d:ea:3f:15:87:88:e1:63:0f:7e:9a:
86:a5:40:c5:a1:83:15:75:d2:af:ca:a7:c0:f5:68:c6:4c:6b:
48:9b:c8:c1:6e:82:27:40:96:63:d0:f7:f6:84:42:19:96:45:
8e:80:e2:60
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIUDqWkQCEJ4ZJJrEVnpIFugbOm5EYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRiZTRkODdmY2JlNmNjYTdjY2U1YjMyNTRmNjk2ZGJi
ZmNmMGU1ZDAeFw0yNjA5MDQxMzM3NDJaFw0yNzA5MDMxMzQyNDJaMDMxMTAvBgNV
BAMTKDY0NzFCQzBCQzNGNDk3QTdBQTk2NTQzMjM5NUYyOTUzMDc5QzE5RDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCstMonwWzOGqXlSxyLlH7ThTAM
UfURVGysjdHZgyu3sl3vYrrQ7gOKDhE1qNb+lsIoziRbnID5EuRoP0ZlGrfmGHkl
o+ICUK8vBP+6bOI70+9NdRjDC89swYnchP9ySCyoodP8swhoDqPo2w0SyQ8tb6Kb
0YB466DXdi2RiRAIW+m8gcvN7eLoB2SXiBniYRKOGbJ3GuGzIZcg18Zu8cqABLjc
MGqCek3yOjW4Q6jc71nZN7iHCq+BhMPsKhTVUTk9663F5NvK84ATYKsRq0wzDXru
9HAHw5s270nNmFaeh5+qVUiS/Ytj79EgQ+ojFMDv9boB+X6/15eq6HIgaCMxAgMB
AAGjggI3MIICMzAdBgNVHQ4EFgQUZHG8C8P0l6eqllQyOV8pUwecGdQwHwYDVR0j
BBgwFoAUVL5Nh/y+bMp8zlsyVPaW27/PDl0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTc3NTU2NjctYjg0Yi00NTdhLWE1OGMtYjVlZGMxZjVl
OGUwLzAvNTRCRTREODdGQ0JFNkNDQTdDQ0U1QjMyNTRGNjk2REJCRkNGMEU1RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1ZMNU5oX3ktYk1wOHpsc3lWUGFXMjdf
UERsMC5jZXIwgacGCCsGAQUFBwELBIGaMIGXMIGUBggrBgEFBQcwC4aBh3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNTc3NTU2Njct
Yjg0Yi00NTdhLWE1OGMtYjVlZGMxZjVlOGUwLzAvMzEzNjMwMmUzMjMxMmUzNzM0
MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzkzNzM5LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoBVKMA0G
CSqGSIb3DQEBCwUAA4IBAQCeyc7+MZNY8LRgKpWmCviMLb3VI16LP+xCJXiGaZ35
XNHMNsQwK2QRL6AGmWkSTKQKqYOEvi+ZzbFZ4m2lN1h8bRqj963ApaC9XkJE5hHY
NZsKQNt4NY6UEQDcmuzIvnpPHyOcEegN2eXVBvN1z4J+kmEWnZIMQtPBSBnekUp4
bymFes8wExkpRBjTt3wkNa6WOq9rRxJlPQbthGMVU14KBlrjRESKNjc8odYTaTEw
3saPxLqH6NCnD0n9bDFvkQt6BKAkIjKXSpGHNLb/Teo/FYeI4WMPfpqGpUDFoYMV
ddKvyqfA9WjGTGtIm8jBboInQJZj0Pf2hEIZlkWOgOJg
-----END CERTIFICATE-----
Generated at Sun Sep 13 10:14:44 2026 by rpki-client