Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/K4vnlgYwOC_eWKrSfoSMgz1g2uc.roa
File: K4vnlgYwOC_eWKrSfoSMgz1g2uc.roa (raw, json)
Hash identifier: upM4tqGeX0jyGr4y5y+hel2QqzNMOfPyvixflz/aPD0=
Subject key identifier: 2B:8B:E7:96:06:30:38:2F:DE:58:AA:D2:7E:84:8C:83:3D:60:DA:E7
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 0199CE89BFC5A944B072B4413BC4A2B0E02B
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/K4vnlgYwOC_eWKrSfoSMgz1g2uc.roa
Signing time: Fri 10 Oct 2025 14:32:38 +0000
ROA not before: Fri 10 Oct 2025 14:32:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214025
IP address blocks: 144.56.35.0/24 maxlen: 24
144.56.86.0/24 maxlen: 24
144.56.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ce:89:bf:c5:a9:44:b0:72:b4:41:3b:c4:a2:b0:e0:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Oct 10 14:32:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b8be7960630382fde58aad27e848c833d60dae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b2:28:f9:f0:f2:97:33:6a:ac:08:ff:90:18:
83:2b:44:5b:68:15:a6:fa:45:09:7f:4a:54:c6:c0:
d3:a0:06:3a:ed:1e:a0:c3:49:62:3f:35:f2:2a:29:
7e:f1:60:94:64:0d:c6:e4:d7:2a:69:90:1e:2b:48:
71:c5:8b:82:d1:28:ea:1e:d6:86:e1:f9:7d:b3:d8:
7d:a8:5a:25:18:bf:89:3c:a6:24:12:45:8e:21:24:
e5:65:b9:0c:4d:3c:02:db:58:b0:59:85:38:2c:1e:
a3:ea:51:be:63:5f:da:c5:c8:eb:da:55:e7:9f:1b:
f7:0a:fc:51:4d:9a:99:44:2a:53:e8:22:1b:86:6d:
2e:1d:52:30:4d:0b:55:18:12:81:a5:0c:b1:3e:81:
7d:c0:7f:64:2f:be:35:48:64:5d:cd:31:b0:29:f0:
4f:be:e5:08:f5:79:ef:6c:73:c5:50:ef:24:6d:95:
52:56:6e:21:cc:0c:a6:21:ec:1a:80:47:1b:5d:9f:
6e:d1:83:32:5a:ac:a9:f5:f6:fa:49:a7:00:66:25:
bc:1c:f8:c6:b1:cd:41:5a:c8:06:43:16:74:b2:6f:
ef:75:da:77:0a:ef:c5:a2:f8:03:ec:db:ea:f7:c4:
09:6c:d9:16:70:98:61:7a:90:a6:fb:16:60:b4:b1:
49:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:8B:E7:96:06:30:38:2F:DE:58:AA:D2:7E:84:8C:83:3D:60:DA:E7
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/K4vnlgYwOC_eWKrSfoSMgz1g2uc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.35.0/24
144.56.86.0/24
144.56.107.0/24
Signature Algorithm: sha256WithRSAEncryption
72:f1:dc:16:0a:f8:a2:08:ff:65:f6:fa:91:c6:a1:bf:4f:b8:
b4:4a:e8:a4:d5:79:28:e2:d6:7c:f1:fb:69:32:9e:e5:04:5b:
60:b8:58:b0:ab:71:49:78:7e:1a:a4:71:08:3c:0a:98:48:1f:
29:eb:2d:51:cf:1b:7e:1e:bf:6c:44:12:8c:13:33:2b:a1:f8:
3d:e0:0d:ae:11:b4:0b:ac:cb:dc:a0:65:4b:df:1b:cc:3b:8c:
c5:37:f4:0b:09:a1:12:cd:c8:ad:5d:b1:7c:5d:8f:62:ab:4a:
d1:9d:0c:dc:ac:9a:79:a6:63:de:3b:51:5d:a5:6e:75:51:92:
90:68:e9:11:43:05:de:07:33:2c:4a:d3:e1:0c:11:3e:d2:e0:
0e:9d:e2:1c:92:df:e2:d6:c8:80:45:88:d1:40:f7:8d:0f:f1:
e4:7e:27:c8:fb:fd:12:a5:4d:77:21:70:71:84:d2:cb:5d:ad:
de:9b:75:e5:cb:aa:42:00:83:8e:72:88:c6:b4:63:4f:91:6a:
3e:0e:b5:40:c8:a4:46:43:9c:d0:c8:74:a7:b9:4f:ed:78:a8:
f6:0e:7d:da:67:9b:e9:76:f2:c8:73:35:31:88:dd:a2:8c:78:
78:85:02:b8:21:6c:a3:91:f5:fd:86:44:6e:35:fd:3a:41:5c:
84:13:d3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:04:33 2025 by rpki-client