Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/076f-HNpF2ilBFVKVRrkAD9qVeo.roa
File: 076f-HNpF2ilBFVKVRrkAD9qVeo.roa (raw, json)
Hash identifier: Co208hkTAfcfLZxKtLAqP/Il81EQEypvzxxjg5x4irw=
Subject key identifier: D3:BE:9F:F8:73:69:17:68:A5:04:55:4A:55:1A:E4:00:3F:6A:55:EA
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 01A10B6563BAE0A3C1231EF88653DF82EE03
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/076f-HNpF2ilBFVKVRrkAD9qVeo.roa
Signing time: Mon 05 Oct 2026 09:29:16 +0000
ROA not before: Mon 05 Oct 2026 09:29:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8309
IP address blocks: 144.56.148.0/22 maxlen: 22
144.56.152.0/21 maxlen: 21
144.56.160.0/19 maxlen: 19
144.56.192.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:65:63:ba:e0:a3:c1:23:1e:f8:86:53:df:82:ee:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Oct 5 09:29:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d3be9ff873691768a504554a551ae4003f6a55ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:94:77:61:df:35:65:24:8f:ec:cb:57:04:0e:
fd:df:8c:e2:eb:bc:e0:27:9c:e5:5b:e7:fc:0f:c4:
fa:6f:85:f9:1f:f2:24:53:98:60:96:c0:ab:fa:81:
ec:94:cb:f1:ee:67:a2:a4:ce:3a:14:1f:9c:b4:47:
68:b0:34:97:5e:7e:72:b6:41:f4:32:3a:39:83:8a:
ba:63:8b:63:9d:42:b9:36:76:83:83:c5:0c:4e:fa:
37:e1:69:d1:20:5a:ca:dd:7b:ba:d2:fb:54:85:b1:
54:bd:9a:ba:1c:c0:e0:2f:21:1b:41:5a:4e:28:4f:
b2:6c:28:ca:e3:a7:08:40:7f:62:56:9f:10:92:1a:
a7:bc:95:05:32:3f:7d:77:86:4a:51:eb:b3:d8:65:
ee:6a:46:8f:3d:28:6f:ed:3b:88:ab:d1:b1:8f:08:
38:fa:f9:26:3e:a9:c4:9a:a8:d0:c1:7c:85:2f:79:
bd:99:22:52:1b:ea:b1:51:30:e5:88:91:44:a8:4c:
ed:dd:43:b0:ed:8e:5b:e4:62:bf:2c:f3:2a:58:c3:
0b:06:7f:33:ac:59:7f:d3:c7:79:13:d9:68:82:05:
9e:92:a1:25:3b:83:75:0d:45:90:64:6c:c2:78:30:
ed:15:2a:6c:db:36:ca:8e:86:ad:66:5f:ef:f9:c0:
6c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:BE:9F:F8:73:69:17:68:A5:04:55:4A:55:1A:E4:00:3F:6A:55:EA
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/076f-HNpF2ilBFVKVRrkAD9qVeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.148.0-144.56.255.255
Signature Algorithm: sha256WithRSAEncryption
6f:58:12:7d:82:e4:1a:1c:d0:d9:fd:9b:fe:c7:ce:2b:f4:05:
07:65:e3:0e:f1:64:9d:92:c9:a1:53:2a:32:c7:c0:ce:dc:d6:
27:30:4a:87:b4:2b:35:6f:02:79:ba:08:5f:42:a1:7e:92:63:
6f:69:81:93:de:39:30:04:30:e3:66:b2:8b:83:94:f2:69:c7:
c2:4b:35:f9:cb:3c:3b:0e:ca:ec:92:01:a1:51:25:c3:70:62:
26:e8:86:cc:b8:59:98:e6:2c:32:93:9a:df:79:f5:33:e2:e5:
83:92:7b:d7:4f:e7:a5:c3:eb:93:67:6f:e4:a5:29:64:c7:8f:
e7:da:9f:21:55:f0:84:76:36:75:50:d9:ed:29:f3:df:4b:2d:
65:95:e2:96:d2:70:c3:b5:05:27:bd:fd:2b:d6:82:11:b6:8c:
11:46:a1:a1:32:89:90:e3:68:1a:18:1d:68:02:39:5d:7c:66:
7b:fe:55:5d:89:a9:a8:26:28:a3:ae:98:18:34:cc:36:85:60:
a0:9d:65:34:c6:29:12:1f:0d:22:ec:d1:46:96:11:95:c7:3a:
c1:f8:69:8f:b7:80:40:27:05:32:0b:92:d8:02:01:d8:4c:98:
26:73:e7:3a:b0:de:49:86:0d:18:a0:c6:bd:c9:9b:36:e2:36:
d7:c8:b8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:21:34 2026 by rpki-client