Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/TclUbrd6975ZeDAbyyXvRMcYLoc.roa
File: TclUbrd6975ZeDAbyyXvRMcYLoc.roa (raw, json)
Hash identifier: lBIrCaTQlgzFumRqzWpz5o4xFc6w43WTF6xdzbBQNaY=
Subject key identifier: 4D:C9:54:6E:B7:7A:F7:BE:59:78:30:1B:CB:25:EF:44:C7:18:2E:87
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 019DC3FE76364650192D705ADD5EEDE02ABC
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/TclUbrd6975ZeDAbyyXvRMcYLoc.roa
Signing time: Sat 25 Apr 2026 09:35:26 +0000
ROA not before: Sat 25 Apr 2026 09:35:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 144.56.20.0/24 maxlen: 24
144.56.23.0/24 maxlen: 24
144.56.33.0/24 maxlen: 24
144.56.40.0/24 maxlen: 24
144.56.90.0/24 maxlen: 24
144.56.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c3:fe:76:36:46:50:19:2d:70:5a:dd:5e:ed:e0:2a:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Apr 25 09:35:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4dc9546eb77af7be5978301bcb25ef44c7182e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8e:5e:96:59:1f:5b:df:65:2c:f5:e0:ad:53:
80:ee:7e:ea:cf:0d:71:75:cf:5a:d9:15:03:a7:dc:
37:97:5a:3a:e0:c5:20:4c:89:2c:9c:b6:83:c9:b1:
cd:cb:03:ca:50:2b:1e:e7:34:4b:9d:2d:d0:c9:a3:
20:af:bc:21:93:eb:7b:84:d4:ef:68:00:e2:e9:f6:
6e:da:77:da:ea:22:62:75:7e:0a:4e:97:44:e5:9a:
32:30:9c:5d:e0:c4:f4:20:d0:f9:b3:ce:ae:c3:09:
cd:bf:35:f5:e6:a0:2a:94:a5:69:7a:3d:dc:f2:f0:
78:42:8e:d9:d5:5a:61:d7:16:d2:2a:d5:9c:c1:6f:
4f:ac:70:e2:82:ba:0d:a8:97:99:46:49:63:b8:d9:
17:7b:6e:b6:71:bf:9c:db:c2:77:f4:a4:4c:04:5c:
e0:bf:51:7e:e6:7b:fe:45:7e:d2:ef:33:ef:43:c1:
a8:bf:d8:c4:32:f7:0b:49:5e:7b:e3:cb:c7:4e:af:
86:9f:ab:5d:c4:c6:34:78:b6:c2:4a:35:54:8b:e7:
4f:ab:b1:78:7e:d9:02:1f:f1:83:5d:95:ae:60:c9:
dd:58:01:40:bb:3c:0f:eb:04:24:45:3c:6e:de:67:
8c:61:ab:49:a5:5e:83:78:8d:20:75:26:4d:a7:c7:
c1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C9:54:6E:B7:7A:F7:BE:59:78:30:1B:CB:25:EF:44:C7:18:2E:87
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/TclUbrd6975ZeDAbyyXvRMcYLoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.20.0/24
144.56.23.0/24
144.56.33.0/24
144.56.40.0/24
144.56.90.0/24
144.56.110.0/24
Signature Algorithm: sha256WithRSAEncryption
70:76:74:d8:c0:18:2d:a7:ab:54:fe:09:e7:4e:f4:26:30:6f:
ef:79:3b:38:3e:25:4c:50:88:c3:67:6d:33:c7:7a:1c:d5:6a:
a1:af:7b:25:82:58:ea:51:cd:9a:7d:a5:aa:7e:82:d0:ad:75:
64:17:bc:a8:d5:13:b3:8c:97:b5:f7:77:06:54:c9:70:7b:f3:
ec:d3:29:dd:d5:a6:5f:2e:12:33:a3:c5:84:59:27:f1:55:36:
01:de:98:4f:d1:f6:24:9d:7e:65:27:d5:dc:c2:a6:b7:a0:5d:
b3:59:41:86:df:cb:d1:46:6d:d0:d9:2e:af:e2:91:ec:0b:ac:
4e:90:55:10:eb:d8:ef:6c:58:32:04:d6:25:2c:1e:8b:27:dd:
5f:4f:db:1c:76:f1:00:21:ad:c9:d6:5f:bc:bd:2d:10:23:85:
6f:49:20:bd:36:ec:5c:f2:f4:5f:22:4c:58:dc:50:52:f3:cc:
d0:60:ba:49:61:b6:92:b4:56:02:b6:0b:a8:f8:25:cb:d9:01:
83:ff:14:c8:b1:e9:74:47:64:8e:8e:13:59:61:b5:49:5c:1a:
44:ad:e0:97:58:ac:39:2e:1a:0f:c5:45:22:ef:9a:98:9f:d2:
82:19:8b:ff:37:8c:42:81:ac:a8:25:74:68:04:a1:f6:85:d6:
c8:e7:86:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:43:00 2026 by rpki-client