Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/9QabwwHqPhYKxP3gl0P9iQp-4Ik.roa
File: 9QabwwHqPhYKxP3gl0P9iQp-4Ik.roa (raw, json)
Hash identifier: RUl0Z99zvEAva+EAvwIVa5ruzB7qQYp5FRSsO8ORHMI=
Subject key identifier: F5:06:9B:C3:01:EA:3E:16:0A:C4:FD:E0:97:43:FD:89:0A:7E:E0:89
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 01A08B8162CBB36CAD3640CEEDDF6C67668A
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/9QabwwHqPhYKxP3gl0P9iQp-4Ik.roa
Signing time: Thu 10 Sep 2026 13:28:27 +0000
ROA not before: Thu 10 Sep 2026 13:28:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197537
IP address blocks: 144.56.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:81:62:cb:b3:6c:ad:36:40:ce:ed:df:6c:67:66:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Sep 10 13:28:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5069bc301ea3e160ac4fde09743fd890a7ee089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:90:eb:4a:b2:57:d6:ec:77:a6:2e:4e:ac:a5:
30:26:97:f3:65:97:86:26:3d:17:79:1f:ec:01:f2:
b0:76:5d:94:64:bc:5c:b5:03:56:6e:02:8c:56:38:
4a:76:df:f0:ce:b1:31:de:77:4e:4d:e4:71:9e:5d:
f0:aa:8e:04:96:b2:b6:0f:43:40:19:ca:3d:2c:98:
3f:02:77:45:af:27:43:ae:de:47:b9:4a:a5:f3:9a:
2c:57:64:81:0e:f9:4a:bc:bc:3d:45:8f:ed:00:7f:
54:1b:0b:29:c0:fd:65:21:46:d9:a8:fb:29:1e:b0:
1c:81:80:bd:60:d2:ec:d1:12:04:7d:4e:86:26:23:
35:3a:16:0e:f2:12:87:70:25:29:c5:c3:1b:7a:15:
84:4c:3c:05:be:f5:41:c3:40:9d:f3:b6:7c:68:55:
09:c8:7e:5a:c7:62:00:3f:2c:0e:fe:eb:04:55:cb:
08:0d:de:1e:3b:80:52:38:c5:f6:23:3f:72:8f:ef:
99:f7:fa:99:d0:85:e2:99:7d:7e:b3:f1:eb:63:4e:
ca:a2:d8:d1:2c:5d:b8:db:d2:52:80:b5:f8:dc:dc:
c2:79:8c:36:d7:ca:f1:8d:fe:cf:9d:db:b3:1e:2d:
a0:c2:e3:11:ac:80:36:24:e6:56:b0:c0:23:a3:c6:
08:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:06:9B:C3:01:EA:3E:16:0A:C4:FD:E0:97:43:FD:89:0A:7E:E0:89
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/9QabwwHqPhYKxP3gl0P9iQp-4Ik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.21.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:32:eb:ff:bd:6b:66:1e:66:25:29:69:3b:11:36:35:52:90:
8e:c7:31:99:b6:f4:61:06:e2:76:1a:d1:4a:bf:35:e8:e2:c1:
57:be:91:bf:71:a4:da:cf:e1:1c:cf:f0:7a:87:e5:73:ec:6e:
86:b9:f3:bf:6f:75:fe:df:9c:1f:48:ec:e4:c0:cc:88:ef:1e:
bd:bc:0a:bc:f4:41:5d:83:c9:be:86:04:55:91:c7:ed:d3:10:
ab:38:60:4a:c2:45:79:17:7a:e9:f0:d3:0e:e4:75:0d:7e:fa:
8e:f9:aa:15:78:a3:a0:49:a6:31:f7:ac:b8:a0:85:49:33:18:
0e:ce:65:da:0f:e4:ec:4d:31:64:1c:83:19:ad:1a:24:c0:19:
dc:ff:77:dc:c2:4f:d7:0c:89:34:b3:5b:d4:15:07:90:d9:82:
83:25:83:61:10:6b:69:26:a4:a5:cb:55:cd:32:af:ef:a5:bd:
50:88:cc:ce:c3:79:e8:c2:cb:dd:91:0d:99:a1:19:c0:f2:a0:
5d:02:6a:11:1e:ee:fb:a5:3f:44:f9:dd:16:1e:8f:d0:aa:a1:
86:82:f4:2b:df:7d:71:85:ce:8c:86:dc:fe:79:a8:c9:69:cc:
a0:07:51:e1:83:b2:20:17:ad:44:7e:2b:83:5a:c1:e7:00:d8:
db:10:dc:e9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCLgWLLs2ytNkDO7d9sZ2aKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MDU1ODAxYjc3NWU3NzQzMDYzMjE0NTVmZDQ2M2ZiZDky
NzNjNGMwHhcNMjYwOTEwMTMyODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTA2OWJjMzAxZWEzZTE2MGFjNGZkZTA5NzQzZmQ4OTBhN2VlMDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pDrSrJX1ux3pi5OrKUwJpfzZZeG
Jj0XeR/sAfKwdl2UZLxctQNWbgKMVjhKdt/wzrEx3ndOTeRxnl3wqo4ElrK2D0NA
Gco9LJg/AndFrydDrt5HuUql85osV2SBDvlKvLw9RY/tAH9UGwspwP1lIUbZqPsp
HrAcgYC9YNLs0RIEfU6GJiM1OhYO8hKHcCUpxcMbehWETDwFvvVBw0Cd87Z8aFUJ
yH5ax2IAPywO/usEVcsIDd4eO4BSOMX2Iz9yj++Z9/qZ0IXimX1+s/HrY07KotjR
LF2429JSgLX43NzCeYw218rxjf7PnduzHi2gwuMRrIA2JOZWsMAjo8YIeQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPUGm8MB6j4WCsT94JdD/YkKfuCJMB8GA1UdIwQY
MBaAFBYFWAG3ded0MGMhRV/UY/vZJzxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgt
MTM1NzE3ZWYzODhhLzEvOVFhYnd3SHFQaFlLeFAzZ2wwUDlpUXAtNElrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgtMTM1NzE3ZWYzODhh
LzEvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkDgVMA0G
CSqGSIb3DQEBCwUAA4IBAQBrMuv/vWtmHmYlKWk7ETY1UpCOxzGZtvRhBuJ2GtFK
vzXo4sFXvpG/caTaz+Ecz/B6h+Vz7G6GufO/b3X+35wfSOzkwMyI7x69vAq89EFd
g8m+hgRVkcft0xCrOGBKwkV5F3rp8NMO5HUNfvqO+aoVeKOgSaYx96y4oIVJMxgO
zmXaD+TsTTFkHIMZrRokwBnc/3fcwk/XDIk0s1vUFQeQ2YKDJYNhEGtpJqSly1XN
Mq/vpb1QiMzOw3nowsvdkQ2ZoRnA8qBdAmoRHu77pT9E+d0WHo/QqqGGgvQr331x
hc6Mhtz+eajJacygB1Hhg7IgF61EfiuDWsHnANjbENzp
-----END CERTIFICATE-----
Generated at Sat Oct 3 11:41:26 2026 by rpki-client