Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/7LtUkCfnFV91w_Qgt3azxsZGlDI.roa
File: 7LtUkCfnFV91w_Qgt3azxsZGlDI.roa (raw, json)
Hash identifier: i1o3vDAN7Yv1q7SUHLsRiMIQog9Vz1PLu8QgwEX9G30=
Subject key identifier: EC:BB:54:90:27:E7:15:5F:75:C3:F4:20:B7:76:B3:C6:C6:46:94:32
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 0199CE8617251A95B936A6ECCC9258B68B0B
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/7LtUkCfnFV91w_Qgt3azxsZGlDI.roa
Signing time: Fri 10 Oct 2025 14:28:38 +0000
ROA not before: Fri 10 Oct 2025 14:28:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64267
IP address blocks: 144.56.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ce:86:17:25:1a:95:b9:36:a6:ec:cc:92:58:b6:8b:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Oct 10 14:28:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ecbb549027e7155f75c3f420b776b3c6c6469432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f2:a9:16:35:86:53:29:38:39:a5:14:d8:e1:
55:b0:f9:71:45:59:d0:ed:7a:15:c6:12:c9:90:22:
4a:43:62:53:a2:1a:28:ef:4b:bb:4f:a1:a9:15:ac:
fc:52:12:41:aa:9c:eb:a7:4c:ee:f9:40:ed:5e:44:
51:fb:1c:97:0f:56:4d:24:de:49:2f:b7:f8:2b:ae:
52:50:e4:4e:47:98:1d:8f:e7:58:0e:dd:9a:36:01:
e3:3a:ae:8e:22:b2:08:59:e1:de:9c:ce:97:f0:61:
7a:a1:da:40:59:50:c8:ed:c9:90:65:31:d2:58:95:
8f:28:85:b0:7f:35:0f:43:80:ff:66:96:b0:9f:fb:
a1:75:d5:d9:58:5e:22:fc:e3:f1:ca:e4:fe:98:6f:
76:4e:c6:31:98:5b:29:80:cd:94:0c:41:78:02:97:
4e:6f:46:3b:90:d2:2c:c8:6c:c0:66:e1:71:36:c1:
f0:e5:03:c4:2c:38:25:c7:7a:3c:ee:68:a4:37:41:
75:6f:0d:20:2d:49:56:0b:70:e2:11:b6:d1:fd:c1:
b0:28:0d:81:28:c1:9d:fc:3f:a1:85:15:27:9b:e1:
81:62:de:8b:9c:c1:40:b9:7a:7b:b5:e2:dd:c0:0e:
b5:e6:bb:71:b1:b2:9a:b2:35:cd:b5:3c:db:d4:fa:
ac:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:BB:54:90:27:E7:15:5F:75:C3:F4:20:B7:76:B3:C6:C6:46:94:32
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/7LtUkCfnFV91w_Qgt3azxsZGlDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.7.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:de:b7:d8:41:e2:fa:2b:9c:a4:1d:6d:fe:6b:13:33:cf:ce:
82:4b:53:0e:e6:bd:7a:68:90:1e:e9:d7:4c:49:7a:90:16:f8:
1e:cf:ce:57:c0:97:d7:a1:df:a4:72:02:a3:85:73:b6:e2:a4:
d0:74:4c:0e:88:80:1a:05:92:dd:bb:0b:0e:e2:52:04:5a:53:
aa:07:c5:6d:49:d8:6a:8e:0d:13:20:f5:37:29:57:ee:a3:44:
80:78:a6:88:2e:e5:c2:a4:58:b5:f9:06:80:31:b1:34:fe:49:
6b:ed:f1:20:ee:7b:12:55:3f:49:8c:c8:a1:30:0e:28:61:2c:
90:83:29:72:d4:fa:54:d1:d1:57:cc:19:31:4f:52:d8:9f:bd:
df:c1:11:e3:d9:e6:fa:94:d3:56:5b:80:81:68:21:fb:51:48:
d2:29:5b:a6:91:d5:3e:7d:3c:5f:9b:69:8e:9c:8f:e4:55:7a:
a2:04:c0:41:df:43:84:98:a1:f3:43:ff:1f:94:90:1c:6c:cc:
74:87:e5:d3:e4:14:f9:d9:1d:c0:9d:03:94:9b:c0:68:7b:a1:
a6:0c:30:88:30:7b:e0:f3:ef:06:a6:8e:d9:81:90:33:02:88:
1a:fe:f3:e8:67:97:7d:66:62:23:40:8f:1e:d0:30:58:eb:f6:
72:cd:be:61
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZnOhhclGpW5NqbszJJYtosLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MDU1ODAxYjc3NWU3NzQzMDYzMjE0NTVmZDQ2M2ZiZDky
NzNjNGMwHhcNMjUxMDEwMTQyODM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlY2JiNTQ5MDI3ZTcxNTVmNzVjM2Y0MjBiNzc2YjNjNmM2NDY5NDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvKpFjWGUyk4OaUU2OFVsPlxRVnQ
7XoVxhLJkCJKQ2JTohoo70u7T6GpFaz8UhJBqpzrp0zu+UDtXkRR+xyXD1ZNJN5J
L7f4K65SUOROR5gdj+dYDt2aNgHjOq6OIrIIWeHenM6X8GF6odpAWVDI7cmQZTHS
WJWPKIWwfzUPQ4D/Zpawn/uhddXZWF4i/OPxyuT+mG92TsYxmFspgM2UDEF4ApdO
b0Y7kNIsyGzAZuFxNsHw5QPELDglx3o87mikN0F1bw0gLUlWC3DiEbbR/cGwKA2B
KMGd/D+hhRUnm+GBYt6LnMFAuXp7teLdwA615rtxsbKasjXNtTzb1PqswwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOy7VJAn5xVfdcP0ILd2s8bGRpQyMB8GA1UdIwQY
MBaAFBYFWAG3ded0MGMhRV/UY/vZJzxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgt
MTM1NzE3ZWYzODhhLzEvN0x0VWtDZm5GVjkxd19RZ3QzYXp4c1pHbERJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgtMTM1NzE3ZWYzODhh
LzEvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkDgHMA0G
CSqGSIb3DQEBCwUAA4IBAQDC3rfYQeL6K5ykHW3+axMzz86CS1MO5r16aJAe6ddM
SXqQFvgez85XwJfXod+kcgKjhXO24qTQdEwOiIAaBZLduwsO4lIEWlOqB8VtSdhq
jg0TIPU3KVfuo0SAeKaILuXCpFi1+QaAMbE0/klr7fEg7nsSVT9JjMihMA4oYSyQ
gyly1PpU0dFXzBkxT1LYn73fwRHj2eb6lNNWW4CBaCH7UUjSKVumkdU+fTxfm2mO
nI/kVXqiBMBB30OEmKHzQ/8flJAcbMx0h+XT5BT52R3AnQOUm8Boe6GmDDCIMHvg
8+8Gpo7ZgZAzAoga/vPoZ5d9ZmIjQI8e0DBY6/Zyzb5h
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:25:37 2025 by rpki-client