Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/Geij325V4WM5RPtPgsMxg4NWK9A.roa
File: Geij325V4WM5RPtPgsMxg4NWK9A.roa (raw, json)
Hash identifier: WjGJT3tzXkp6yYst7FryVAv1gkDAqJyeqvTYVUvUsUw=
Subject key identifier: 19:E8:A3:DF:6E:55:E1:63:39:44:FB:4F:82:C3:31:83:83:56:2B:D0
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 019F24C516A63411F49168EF2CB58999AA34
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/Geij325V4WM5RPtPgsMxg4NWK9A.roa
Signing time: Thu 02 Jul 2026 21:38:43 +0000
ROA not before: Thu 02 Jul 2026 21:38:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 144.56.7.0/24 maxlen: 24
144.56.9.0/24 maxlen: 24
144.56.13.0/24 maxlen: 24
144.56.15.0/24 maxlen: 24
144.56.17.0/24 maxlen: 24
144.56.24.0/24 maxlen: 24
144.56.27.0/24 maxlen: 24
144.56.29.0/24 maxlen: 24
144.56.31.0/24 maxlen: 24
144.56.34.0/24 maxlen: 24
144.56.35.0/24 maxlen: 24
144.56.36.0/24 maxlen: 24
144.56.38.0/24 maxlen: 24
144.56.41.0/24 maxlen: 24
144.56.51.0/24 maxlen: 24
144.56.71.0/24 maxlen: 24
144.56.72.0/24 maxlen: 24
144.56.76.0/24 maxlen: 24
144.56.78.0/24 maxlen: 24
144.56.80.0/24 maxlen: 24
144.56.81.0/24 maxlen: 24
144.56.85.0/24 maxlen: 24
144.56.86.0/24 maxlen: 24
144.56.88.0/24 maxlen: 24
144.56.91.0/24 maxlen: 24
144.56.93.0/24 maxlen: 24
144.56.94.0/24 maxlen: 24
144.56.97.0/24 maxlen: 24
144.56.98.0/24 maxlen: 24
144.56.99.0/24 maxlen: 24
144.56.100.0/24 maxlen: 24
144.56.101.0/24 maxlen: 24
144.56.102.0/24 maxlen: 24
144.56.103.0/24 maxlen: 24
144.56.105.0/24 maxlen: 24
144.56.106.0/24 maxlen: 24
144.56.107.0/24 maxlen: 24
144.56.108.0/24 maxlen: 24
144.56.112.0/24 maxlen: 24
144.56.117.0/24 maxlen: 24
144.56.118.0/24 maxlen: 24
144.56.119.0/24 maxlen: 24
144.56.121.0/24 maxlen: 24
144.56.122.0/24 maxlen: 24
144.56.124.0/24 maxlen: 24
144.56.125.0/24 maxlen: 24
144.56.126.0/24 maxlen: 24
144.56.127.0/24 maxlen: 24
144.56.128.0/24 maxlen: 24
144.56.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:24:c5:16:a6:34:11:f4:91:68:ef:2c:b5:89:99:aa:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Jul 2 21:38:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=19e8a3df6e55e1633944fb4f82c3318383562bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:15:4f:cb:ee:b3:36:cd:e5:c8:7f:fd:33:3c:
cf:0e:95:7b:29:48:c2:6c:ab:41:91:a5:42:56:cf:
a9:61:89:46:0c:9f:24:77:4d:0e:62:7b:05:6d:cb:
d1:da:b1:c1:91:dd:0b:2b:eb:67:07:38:7f:24:60:
99:0b:ac:75:6e:61:11:2d:66:c7:64:c1:b8:d8:48:
66:91:e7:5b:a6:f4:a5:e0:43:26:05:cf:bb:10:b0:
80:6e:92:bc:42:5a:81:c4:44:ff:98:58:65:f9:cf:
5b:5f:43:cf:7b:73:c8:49:c5:31:13:f6:45:8c:68:
0e:66:f2:bd:86:81:37:c3:1d:df:73:de:5f:0b:3e:
d8:89:f8:18:02:f1:04:a9:ff:4c:d7:cc:fe:93:0f:
93:84:b0:70:5a:30:0c:36:e6:fd:db:5e:4e:f0:e8:
f4:d4:53:71:0f:5c:a5:b3:65:a5:e1:2e:e5:c8:3d:
18:39:db:45:c8:f9:66:10:c3:37:e9:a2:00:94:d4:
37:ff:9f:12:8c:51:2e:1a:97:b2:9a:12:d6:0c:e2:
42:5c:9c:45:70:65:1d:12:f7:0d:18:9f:47:6c:96:
4e:4b:d2:1b:d9:f5:cb:c9:18:5c:a6:58:e4:e3:c7:
ba:eb:18:15:a6:09:f5:06:39:ab:fd:58:65:6e:eb:
19:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E8:A3:DF:6E:55:E1:63:39:44:FB:4F:82:C3:31:83:83:56:2B:D0
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/Geij325V4WM5RPtPgsMxg4NWK9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.7.0/24
144.56.9.0/24
144.56.13.0/24
144.56.15.0/24
144.56.17.0/24
144.56.24.0/24
144.56.27.0/24
144.56.29.0/24
144.56.31.0/24
144.56.34.0-144.56.36.255
144.56.38.0/24
144.56.41.0/24
144.56.51.0/24
144.56.71.0-144.56.72.255
144.56.76.0/24
144.56.78.0/24
144.56.80.0/23
144.56.85.0-144.56.86.255
144.56.88.0/24
144.56.91.0/24
144.56.93.0-144.56.94.255
144.56.97.0-144.56.103.255
144.56.105.0-144.56.108.255
144.56.112.0/24
144.56.117.0-144.56.119.255
144.56.121.0-144.56.122.255
144.56.124.0-144.56.129.255
Signature Algorithm: sha256WithRSAEncryption
a4:90:17:dd:db:9b:f0:a8:8e:af:15:90:a1:bd:a4:14:90:18:
5b:cf:23:59:23:ce:1e:87:ac:5e:5a:eb:21:45:9c:5d:4a:5c:
38:d0:21:d5:0d:52:70:46:a8:0e:d5:b4:73:a6:e5:21:5b:ea:
01:fe:85:a8:43:f2:0f:89:06:8e:b3:69:e0:79:bc:3b:3d:69:
f1:b1:45:2f:0b:8e:77:66:03:6e:6f:bd:06:f0:bc:07:bc:1b:
d7:d4:a1:06:82:09:47:17:0c:e2:76:6c:89:68:e7:b6:e3:fe:
c7:a2:ad:e8:f4:6a:88:a1:50:7a:c1:d0:72:f3:24:3d:69:e0:
19:3f:c3:12:95:42:48:19:6d:1b:b0:2a:e0:68:f4:ed:8e:94:
dd:7e:a8:e3:01:1f:9c:d2:99:84:2c:11:09:0f:93:bc:a7:c4:
d6:5c:7c:e7:04:7c:1e:37:65:a3:35:89:5e:1a:0b:d6:82:45:
0d:da:44:11:34:de:2a:0a:df:99:35:fd:38:92:90:67:53:18:
ba:fc:2a:d3:b9:d2:8a:2e:46:0d:db:d5:d7:48:72:f8:da:3b:
cd:56:23:a5:00:ee:69:ce:d1:32:61:08:64:8f:8b:b8:2d:aa:
ea:85:81:c0:d1:2d:c8:25:4a:e2:55:17:11:46:0c:71:0f:b2:
d8:2b:cd:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:38:03 2026 by rpki-client