Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/M9Eq9TxB4ELCxYsSFSWqEOMd0yI.roa
File: M9Eq9TxB4ELCxYsSFSWqEOMd0yI.roa (raw, json)
Hash identifier: sGrNFgQoEqArMHwvAcAPBCRxd8TSnLVWDJPczgQN9pg=
Subject key identifier: 33:D1:2A:F5:3C:41:E0:42:C2:C5:8B:12:15:25:AA:10:E3:1D:D3:22
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 01A0A6368B6F0B622B3D66AA060D52505A43
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/M9Eq9TxB4ELCxYsSFSWqEOMd0yI.roa
Signing time: Tue 15 Sep 2026 17:56:27 +0000
ROA not before: Tue 15 Sep 2026 17:56:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219394
IP address blocks: 144.56.38.0/24 maxlen: 24
144.56.100.0/24 maxlen: 24
144.56.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a6:36:8b:6f:0b:62:2b:3d:66:aa:06:0d:52:50:5a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Sep 15 17:56:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=33d12af53c41e042c2c58b121525aa10e31dd322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:3d:92:a4:8c:d3:02:7f:5f:60:a8:72:89:39:
74:40:99:57:03:f6:b0:19:ec:47:fb:0d:a8:5d:be:
d3:b6:d4:84:22:b3:e1:ee:e0:67:fe:d5:18:6a:03:
e0:ef:2d:ec:1b:34:aa:57:05:65:76:1f:37:8e:d9:
c3:66:9a:9c:df:08:d1:14:66:c6:bd:7e:4a:cb:bc:
41:e5:0e:43:5b:63:1d:85:8b:5a:3d:fb:25:cb:91:
71:06:52:e7:5b:58:8e:6c:5d:a5:a8:e8:ca:ca:a8:
78:ad:02:5c:d8:1d:be:98:55:7b:a3:ad:40:4e:6f:
eb:6a:fc:e5:8a:d9:f4:a9:c5:19:a8:f0:b1:73:d1:
34:fc:78:7c:c4:78:55:da:c5:c2:36:e3:d8:2f:95:
39:a8:32:ae:d9:d4:c7:42:2a:f3:85:53:3e:bd:6d:
ae:90:19:40:e2:3c:23:44:d4:1c:92:32:08:7d:8b:
5c:18:4e:f1:9b:d2:6d:82:0b:d8:b0:29:c8:61:d9:
af:80:32:c6:6b:de:c4:f5:1e:cd:9d:6b:cf:be:5a:
ce:00:b6:c6:8b:6e:8c:af:a4:47:03:25:e7:81:d8:
44:8c:e8:c9:86:ee:bb:6e:1a:74:8c:dc:91:11:90:
1f:29:9d:d6:ff:b2:e3:c8:45:7f:96:d1:a6:7a:4b:
2f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D1:2A:F5:3C:41:E0:42:C2:C5:8B:12:15:25:AA:10:E3:1D:D3:22
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/M9Eq9TxB4ELCxYsSFSWqEOMd0yI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.38.0/24
144.56.100.0/24
144.56.127.0/24
Signature Algorithm: sha256WithRSAEncryption
48:d2:f5:bc:5c:73:12:11:1f:12:7a:52:e0:8b:1d:0d:e3:39:
4d:0c:9e:76:38:4a:3c:66:17:8a:a9:3d:8b:ba:ab:af:d3:7f:
d9:2c:b9:66:2d:af:71:94:b1:97:6d:99:51:1e:c3:7e:4f:40:
a2:5c:4d:01:b9:4c:29:ae:f6:df:6e:bc:52:a2:92:96:36:a6:
76:68:b6:e6:a1:0e:5d:1d:2f:e3:ef:23:c9:c7:32:37:5e:cf:
21:3e:75:80:49:6d:76:7e:06:bd:c7:ec:60:90:3c:96:d1:02:
94:ed:d5:12:16:a6:87:11:85:15:cf:26:6e:a2:31:f4:4e:ed:
7d:1d:1d:b0:9a:a1:48:67:9e:ae:fa:82:6b:cc:a8:1c:de:04:
c8:19:fa:f0:9d:4b:d2:25:ca:82:98:9b:94:f9:c1:94:db:b7:
e1:42:9e:e1:85:e7:63:a0:45:ec:ec:d0:16:39:95:e0:07:4d:
de:cd:1d:66:69:f9:d9:f8:90:a0:3f:f7:5a:f9:87:d8:8e:ed:
e3:e6:a6:e0:51:39:37:ec:73:8b:22:33:c8:f0:91:9c:bd:cb:
48:a8:43:e5:38:28:65:fe:2c:30:9e:e0:dd:d1:c4:52:ab:29:
13:a1:7c:df:b4:7d:bc:d2:10:89:3a:58:d9:9d:19:9c:62:cd:
fd:05:b8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:37:47 2026 by rpki-client