Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/RBkQeOg-cgnPNjuK2cCJOQuYiHA.roa
File: RBkQeOg-cgnPNjuK2cCJOQuYiHA.roa (raw, json)
Hash identifier: 2lb1scbNaCJBrzBBGo6DCjWa1PrAoi+G5fKlUn8AhFk=
Subject key identifier: 44:19:10:78:E8:3E:72:09:CF:36:3B:8A:D9:C0:89:39:0B:98:88:70
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 0199A661AB7431582A6E91BE218CEE0E06B0
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/RBkQeOg-cgnPNjuK2cCJOQuYiHA.roa
Signing time: Thu 02 Oct 2025 19:24:02 +0000
ROA not before: Thu 02 Oct 2025 19:24:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 63199
IP address blocks: 144.56.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 18:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a6:61:ab:74:31:58:2a:6e:91:be:21:8c:ee:0e:06:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Oct 2 19:24:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44191078e83e7209cf363b8ad9c089390b988870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b4:c9:18:56:67:b7:33:dd:d9:96:d0:d7:61:
73:53:06:87:7e:6c:ea:3c:36:36:74:68:eb:52:7c:
23:b4:af:8c:ac:1e:99:6b:d1:31:1e:d8:64:23:c9:
86:53:b1:94:88:1a:e4:7e:9e:91:13:68:1c:56:dc:
4a:0e:b0:2f:72:d1:f7:6c:5c:dc:e8:0c:4c:19:47:
5a:fe:03:0f:9d:31:7c:5d:ae:c5:72:f1:a8:dc:08:
5d:e5:1e:34:db:cc:cd:74:ee:6f:f1:c0:43:fc:0c:
fe:11:2f:19:ca:c7:c2:db:c4:1b:50:b6:f4:6f:b6:
95:be:de:c3:bf:6c:36:8c:26:d5:3e:20:b5:32:b8:
84:ad:45:d5:de:35:88:7c:68:f2:86:d8:ec:5b:e9:
9e:bf:24:f0:29:b0:04:33:5f:96:b1:36:25:73:70:
ed:0d:83:c3:93:90:58:5f:eb:ae:d9:fd:13:97:9a:
84:a7:f2:86:70:86:83:d3:36:23:cd:fe:f5:af:83:
7f:15:e8:df:a3:4c:89:8f:63:be:c8:95:ec:d9:0a:
cf:a6:a7:d8:0e:8b:a9:22:14:00:1e:f9:df:53:43:
31:fa:d4:67:ed:be:30:16:d3:a1:27:6e:cc:21:5f:
1d:36:09:6a:56:1f:09:c3:7d:9a:49:9b:5c:f5:4a:
4b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:19:10:78:E8:3E:72:09:CF:36:3B:8A:D9:C0:89:39:0B:98:88:70
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/RBkQeOg-cgnPNjuK2cCJOQuYiHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.80.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:76:9a:ee:11:a5:84:1e:5c:7a:7f:c3:cd:1c:92:71:58:a5:
f0:cf:ae:20:84:cc:6f:97:43:9d:3c:69:b5:45:fa:66:5e:2a:
ae:8d:21:30:16:89:e2:ff:08:1f:4e:fd:0b:d7:97:9d:25:fa:
87:81:25:a1:6c:51:cc:47:f2:7f:25:29:c3:ac:fa:e1:ab:62:
2a:3c:7d:02:fa:42:41:2f:cf:a1:3d:72:d1:4e:d1:b7:ef:cd:
6a:df:3a:82:90:2a:31:5f:96:a6:c3:0b:4d:d9:21:b5:b3:02:
bb:a4:3b:e9:cc:bc:46:c6:67:12:f7:9f:4e:65:e7:18:6a:d7:
36:48:4a:2b:cf:19:b3:ff:58:b1:63:6d:93:fd:e6:5a:1c:01:
35:62:48:d9:94:95:0a:9f:c7:8a:35:70:77:19:69:24:20:b4:
f2:7b:8d:d1:31:39:56:10:cb:20:45:23:36:d3:c8:d8:88:2e:
b9:f3:d5:01:3f:6f:d6:60:b8:f5:56:69:49:85:a2:9c:97:0f:
27:87:ed:f7:4d:4c:0b:18:d7:e2:c8:ae:d5:f1:40:43:22:a2:
e7:f1:4f:75:bd:67:04:a7:85:8b:32:e4:c4:5d:f9:92:52:fd:
65:e9:46:c9:c1:ea:b8:28:5d:c5:97:74:06:b5:21:13:d8:32:
11:3a:00:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:39:48 2025 by rpki-client