Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/HYxJ3SB2TSW99lTxlPt8S4QtcK4.roa
File: HYxJ3SB2TSW99lTxlPt8S4QtcK4.roa (raw, json)
Hash identifier: gRS9zeeuV8SKM1nbKlfewy+rOaMm993XLsQjTHdF2UI=
Subject key identifier: 1D:8C:49:DD:20:76:4D:25:BD:F6:54:F1:94:FB:7C:4B:84:2D:70:AE
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 01A08AEFD0E8DACE66BAC16AB161818E26EA
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/HYxJ3SB2TSW99lTxlPt8S4QtcK4.roa
Signing time: Thu 10 Sep 2026 10:49:27 +0000
ROA not before: Thu 10 Sep 2026 10:49:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 144.56.20.0/24 maxlen: 24
144.56.21.0/24 maxlen: 24
144.56.23.0/24 maxlen: 24
144.56.28.0/24 maxlen: 24
144.56.33.0/24 maxlen: 24
144.56.40.0/24 maxlen: 24
144.56.90.0/24 maxlen: 24
144.56.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:ef:d0:e8:da:ce:66:ba:c1:6a:b1:61:81:8e:26:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Sep 10 10:49:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d8c49dd20764d25bdf654f194fb7c4b842d70ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:32:40:d1:9b:f5:1e:8d:9f:fe:a4:ee:24:3d:
77:cd:76:10:8d:21:b9:4e:7b:e5:af:1f:e0:a0:89:
81:6f:c8:49:43:f6:f7:cb:6e:97:4c:50:7e:0d:af:
17:f5:81:4d:9b:e7:8a:e5:80:31:85:b8:1f:02:03:
f3:18:88:06:30:76:fc:97:de:b2:32:f2:35:32:cb:
13:2a:5d:d0:c3:ed:dc:46:34:29:b7:16:9a:fd:99:
d8:6c:d2:01:db:ac:98:88:8f:67:43:72:c5:06:e9:
da:e4:22:db:07:c4:14:1f:87:b8:b7:81:3e:ca:a8:
1b:28:52:f4:95:a5:41:3b:98:bf:9d:ad:46:d2:cb:
2e:5e:b1:f2:bd:4d:a2:40:8b:29:29:8a:9d:2d:aa:
db:23:7d:9a:c8:e4:43:89:e6:d9:ab:3d:3b:82:29:
86:59:0f:e6:d8:ac:bb:63:82:9f:7c:a4:8f:9c:47:
b3:96:4e:a6:66:db:e5:7a:76:a6:18:b8:16:7e:ec:
01:51:52:a2:d2:e8:da:4e:aa:e9:67:d4:a8:81:6c:
66:89:32:7f:c5:b3:c3:6b:01:fc:b4:e8:ac:e1:e0:
25:04:ad:fc:a6:41:3b:92:b7:10:fa:b3:73:93:49:
21:ad:06:08:9b:e5:55:e0:2d:43:69:fc:ef:39:82:
7b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:8C:49:DD:20:76:4D:25:BD:F6:54:F1:94:FB:7C:4B:84:2D:70:AE
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/HYxJ3SB2TSW99lTxlPt8S4QtcK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.20.0/23
144.56.23.0/24
144.56.28.0/24
144.56.33.0/24
144.56.40.0/24
144.56.90.0/24
144.56.110.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:9d:31:68:ed:ca:95:5b:09:7f:47:15:f1:83:ef:9d:91:99:
96:ff:fe:f6:d9:dd:30:f7:b6:6f:f7:9f:76:72:01:18:a5:40:
6f:79:bb:48:c0:ad:a4:7e:47:be:fc:86:e9:68:18:5f:aa:36:
a4:1d:26:bc:69:55:4c:5c:a3:2d:47:85:84:c0:0c:a5:16:97:
11:a6:8e:0f:3c:7e:d7:b8:73:8a:36:a3:32:5d:bc:76:a7:e2:
9f:0d:e9:7e:9f:a3:82:8b:e5:b4:a1:f3:e0:02:ae:06:35:61:
d0:24:76:9c:45:78:17:70:f8:13:c7:09:18:10:8b:c2:62:2b:
9d:15:aa:ea:d9:f5:8f:ea:a7:ad:a1:fa:64:a0:cd:6c:ca:e4:
de:4d:91:46:d8:e8:4c:64:db:33:bc:17:55:53:0e:b1:ef:72:
25:92:77:af:49:ab:9b:8d:14:15:26:63:6d:82:58:53:30:75:
f5:1c:f1:df:ba:28:fd:8e:76:43:dc:ca:e5:0a:84:2c:ae:83:
d6:cb:48:59:bf:a4:b5:9c:b8:f9:ff:13:7c:f2:d8:16:2e:55:
04:f0:2c:c0:35:09:10:c3:0a:79:b9:e7:81:77:35:1a:c1:0e:
ab:27:88:6d:99:a8:39:56:c6:ea:8c:7d:a6:6c:0c:74:1f:44:
48:d4:67:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:56:29 2026 by rpki-client