Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e37362e302f32322d3234203d3e203538333235.roa
File: 3136302e32312e37362e302f32322d3234203d3e203538333235.roa (raw, json)
Hash identifier: pBcRAWhdKXgxnP4VpTYqhD3KkhkkboFXgO72pOVpjIU=
Subject key identifier: 22:46:37:F5:0A:22:48:33:9A:46:26:EB:1B:6D:F9:5C:9F:F3:5F:2B
Certificate issuer: /CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Certificate serial: 02DAEA7432AE0437F89ABB2BB9153485AA9C6C42
Authority key identifier: 54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e37362e302f32322d3234203d3e203538333235.roa
Signing time: Fri 04 Sep 2026 15:48:32 +0000
ROA not before: Fri 04 Sep 2026 15:43:32 +0000
ROA not after: Fri 03 Sep 2027 15:48:32 +0000
asID: 58325
IP address blocks: 160.21.76.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.mft
rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 03:19:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:da:ea:74:32:ae:04:37:f8:9a:bb:2b:b9:15:34:85:aa:9c:6c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54be4d87fcbe6cca7cce5b3254f696dbbfcf0e5d
Validity
Not Before: Sep 4 15:43:32 2026 GMT
Not After : Sep 3 15:48:32 2027 GMT
Subject: CN=224637F50A2248339A4626EB1B6DF95C9FF35F2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6e:94:66:40:1c:e4:fb:5e:13:b1:5a:a9:37:
8c:c5:27:3c:c1:97:5b:b9:57:ef:ce:92:24:8f:2d:
94:3a:23:e7:0a:40:5b:39:51:a4:4f:94:39:04:6a:
0a:83:f7:c0:02:d1:c2:8a:05:03:0c:e7:d3:12:7a:
6b:c6:d0:2f:1a:87:02:6a:ca:76:e5:bc:96:f9:71:
28:c4:03:c4:44:6b:df:7f:29:4c:96:f3:00:a2:9b:
0d:17:3f:b4:75:c7:d1:4a:d1:c0:6c:f0:ed:65:e8:
f6:eb:87:82:e3:1c:31:96:f5:32:60:0d:4c:89:ed:
21:cc:78:88:fa:1c:84:bc:43:14:6f:9d:16:c1:fd:
b2:1c:6a:83:0b:d2:d7:bc:f0:df:42:05:92:07:91:
9a:e3:e6:49:0e:5c:3e:ac:60:28:5c:49:3f:77:31:
10:c6:94:c2:32:35:5f:42:83:c8:87:ae:d5:eb:08:
7c:58:1b:88:c0:36:78:4f:56:bc:56:2a:04:31:3f:
1c:61:fd:60:78:98:71:47:62:3d:da:98:e7:c4:aa:
8d:50:76:7b:ad:95:8e:4e:54:32:4d:16:26:c0:a4:
43:2f:b0:b8:f3:c6:47:1f:b7:0a:4e:65:09:94:26:
3b:a4:8c:70:d2:b6:c3:7f:d0:b4:9d:84:eb:d9:d2:
f6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:46:37:F5:0A:22:48:33:9A:46:26:EB:1B:6D:F9:5C:9F:F3:5F:2B
X509v3 Authority Key Identifier:
keyid:54:BE:4D:87:FC:BE:6C:CA:7C:CE:5B:32:54:F6:96:DB:BF:CF:0E:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/54BE4D87FCBE6CCA7CCE5B3254F696DBBFCF0E5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VL5Nh_y-bMp8zlsyVPaW27_PDl0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/57755667-b84b-457a-a58c-b5edc1f5e8e0/0/3136302e32312e37362e302f32322d3234203d3e203538333235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.21.76.0/22
Signature Algorithm: sha256WithRSAEncryption
20:df:d9:33:97:73:0e:c8:c5:2b:8e:59:28:63:fd:75:03:0e:
04:94:d4:fc:e0:41:08:42:bd:04:a3:c5:54:66:6c:36:07:c1:
f6:46:df:e1:d5:5b:6f:ea:93:02:2a:23:b0:35:a0:ea:08:35:
3d:01:b3:55:2e:c6:7f:34:93:a5:bf:f5:a7:aa:c8:ff:3f:6c:
3e:f4:e8:05:54:a1:3e:2d:93:dd:77:7e:75:0a:c2:95:cf:ed:
72:93:eb:70:44:40:07:8d:72:ec:1b:72:46:ee:23:43:0e:b5:
27:92:5c:05:70:42:db:a7:ec:19:94:28:ae:46:b8:1a:91:25:
95:69:21:9d:b6:89:e5:d1:1c:61:8d:dc:1d:f5:fb:3f:16:ba:
82:ed:4a:f7:7c:87:75:38:c0:d9:68:65:25:c4:6f:09:94:da:
cf:0e:73:39:b4:3e:7a:5a:99:a6:69:c2:dc:7a:87:a2:23:5f:
74:6f:ab:b1:61:30:24:cc:a3:b1:8a:cc:d4:10:1a:cb:6c:12:
b4:ce:88:2e:78:67:ed:ca:dc:77:86:96:dd:2f:be:2d:86:c7:
9a:63:19:e8:40:f2:cb:70:ba:fd:55:f9:d4:af:15:13:83:54:
d1:1e:7d:55:2f:e6:dd:d5:fe:e2:ce:4c:16:e5:8f:82:27:35:
ac:a0:00:e0
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUAtrqdDKuBDf4mrsruRU0haqcbEIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTRiZTRkODdmY2JlNmNjYTdjY2U1YjMyNTRmNjk2ZGJi
ZmNmMGU1ZDAeFw0yNjA5MDQxNTQzMzJaFw0yNzA5MDMxNTQ4MzJaMDMxMTAvBgNV
BAMTKDIyNDYzN0Y1MEEyMjQ4MzM5QTQ2MjZFQjFCNkRGOTVDOUZGMzVGMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9bpRmQBzk+14TsVqpN4zFJzzB
l1u5V+/OkiSPLZQ6I+cKQFs5UaRPlDkEagqD98AC0cKKBQMM59MSemvG0C8ahwJq
ynblvJb5cSjEA8REa99/KUyW8wCimw0XP7R1x9FK0cBs8O1l6Pbrh4LjHDGW9TJg
DUyJ7SHMeIj6HIS8QxRvnRbB/bIcaoML0te88N9CBZIHkZrj5kkOXD6sYChcST93
MRDGlMIyNV9Cg8iHrtXrCHxYG4jANnhPVrxWKgQxPxxh/WB4mHFHYj3amOfEqo1Q
dnutlY5OVDJNFibApEMvsLjzxkcftwpOZQmUJjukjHDStsN/0LSdhOvZ0vZZAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUIkY39QoiSDOaRibrG235XJ/zXyswHwYDVR0j
BBgwFoAUVL5Nh/y+bMp8zlsyVPaW27/PDl0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTc3NTU2NjctYjg0Yi00NTdhLWE1OGMtYjVlZGMxZjVl
OGUwLzAvNTRCRTREODdGQ0JFNkNDQTdDQ0U1QjMyNTRGNjk2REJCRkNGMEU1RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1ZMNU5oX3ktYk1wOHpsc3lWUGFXMjdf
UERsMC5jZXIwgasGCCsGAQUFBwELBIGeMIGbMIGYBggrBgEFBQcwC4aBi3JzeW5j
Oi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNTc3NTU2Njct
Yjg0Yi00NTdhLWE1OGMtYjVlZGMxZjVlOGUwLzAvMzEzNjMwMmUzMjMxMmUzNzM2
MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzODMzMzIzNS5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqAV
TDANBgkqhkiG9w0BAQsFAAOCAQEAIN/ZM5dzDsjFK45ZKGP9dQMOBJTU/OBBCEK9
BKPFVGZsNgfB9kbf4dVbb+qTAiojsDWg6gg1PQGzVS7GfzSTpb/1p6rI/z9sPvTo
BVShPi2T3Xd+dQrClc/tcpPrcERAB41y7BtyRu4jQw61J5JcBXBC26fsGZQorka4
GpEllWkhnbaJ5dEcYY3cHfX7Pxa6gu1K93yHdTjA2WhlJcRvCZTazw5zObQ+elqZ
pmnC3HqHoiNfdG+rsWEwJMyjsYrM1BAay2wStM6ILnhn7crcd4aW3S++LYbHmmMZ
6EDyy3C6/VX51K8VE4NU0R59VS/m3dX+4s5MFuWPgic1rKAA4A==
-----END CERTIFICATE-----
Generated at Sun Sep 13 10:14:55 2026 by rpki-client