Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/_6Y6rmU3Q87e3mYJhUSvpdyOJ-M.roa
File: _6Y6rmU3Q87e3mYJhUSvpdyOJ-M.roa (raw, json)
Hash identifier: MU2k0JLgHnAz6+Q2NLRxKsFVTuyUV8a7JG+EC761Ul0=
Subject key identifier: FF:A6:3A:AE:65:37:43:CE:DE:DE:66:09:85:44:AF:A5:DC:8E:27:E3
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 0198C3DEF0F553C58BC70E9BC7512039D9C4
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/_6Y6rmU3Q87e3mYJhUSvpdyOJ-M.roa
Signing time: Tue 19 Aug 2025 19:47:04 +0000
ROA not before: Tue 19 Aug 2025 19:47:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 144.56.13.0/24 maxlen: 24
144.56.15.0/24 maxlen: 24
144.56.17.0/24 maxlen: 24
144.56.20.0/24 maxlen: 24
144.56.24.0/24 maxlen: 24
144.56.27.0/24 maxlen: 24
144.56.29.0/24 maxlen: 24
144.56.31.0/24 maxlen: 24
144.56.33.0/24 maxlen: 24
144.56.34.0/24 maxlen: 24
144.56.35.0/24 maxlen: 24
144.56.37.0/24 maxlen: 24
144.56.39.0/24 maxlen: 24
144.56.41.0/24 maxlen: 24
144.56.50.0/24 maxlen: 24
144.56.51.0/24 maxlen: 24
144.56.71.0/24 maxlen: 24
144.56.88.0/24 maxlen: 24
144.56.125.0/24 maxlen: 24
144.56.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c3:de:f0:f5:53:c5:8b:c7:0e:9b:c7:51:20:39:d9:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Aug 19 19:47:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ffa63aae653743cedede66098544afa5dc8e27e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:86:44:f8:1c:31:b3:27:a3:dd:0c:5a:2b:04:
73:ba:84:35:1a:5e:57:9a:f3:cb:cc:26:2e:5c:9d:
da:b6:81:f4:74:3c:0e:85:1f:19:31:d6:e2:36:62:
ee:fc:4b:8d:ba:3f:44:09:98:f8:73:3b:64:9f:7f:
4c:2c:a3:75:9d:a5:8e:93:25:6e:8c:e6:d9:90:4c:
d7:0d:1a:f9:0e:4c:60:77:65:2e:8d:2e:b8:3d:3a:
14:40:a4:95:f9:24:bc:e3:dd:c5:87:b1:ff:e5:21:
02:75:14:03:e4:77:f4:dc:8e:5c:b2:4a:a4:2a:1d:
01:76:22:0e:09:ae:32:22:47:6d:71:e7:14:dc:8b:
84:ab:18:93:c0:f2:f9:f4:4f:9d:46:92:ef:6e:ab:
2e:17:ee:b4:34:48:5c:65:47:a6:5a:ec:8b:3e:4b:
b6:42:4d:64:37:ba:81:9e:da:e3:67:5b:24:58:7b:
b5:1e:cc:8c:9c:c2:e9:b7:58:b9:5f:a9:43:28:9b:
2f:e2:19:ec:41:63:86:c2:40:6d:f0:12:28:0d:70:
11:0d:0a:6d:8f:c5:5e:13:01:ba:7d:1c:5c:00:db:
6e:08:af:89:b0:fd:a9:d4:db:58:fc:a7:cc:cf:3a:
43:f8:08:ea:c2:13:1d:87:b5:92:c6:3f:19:8e:66:
61:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A6:3A:AE:65:37:43:CE:DE:DE:66:09:85:44:AF:A5:DC:8E:27:E3
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/_6Y6rmU3Q87e3mYJhUSvpdyOJ-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.13.0/24
144.56.15.0/24
144.56.17.0/24
144.56.20.0/24
144.56.24.0/24
144.56.27.0/24
144.56.29.0/24
144.56.31.0/24
144.56.33.0-144.56.35.255
144.56.37.0/24
144.56.39.0/24
144.56.41.0/24
144.56.50.0/23
144.56.71.0/24
144.56.88.0/24
144.56.125.0/24
144.56.129.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:34:91:ef:43:79:63:0d:70:76:2e:74:f3:b5:e8:43:0c:ae:
40:38:ad:e1:a1:51:75:6d:70:4b:ce:69:3a:a2:bb:2f:6d:b6:
4e:c7:2d:2e:9d:b6:91:09:ea:29:1f:b7:13:4a:11:10:5c:6a:
25:7c:b9:bf:9b:c5:ac:73:03:de:df:2b:59:4d:25:75:0a:5a:
02:af:ad:a1:3f:d9:ff:c0:91:8d:d8:ea:0a:a6:2f:9e:49:06:
3a:62:f8:9e:96:a6:61:8a:60:1a:48:f9:a2:7e:f6:6c:11:b6:
7d:57:d0:89:ad:f9:8e:0e:af:98:7f:13:40:07:8e:3d:ec:3a:
e4:df:eb:33:9f:17:f1:9e:be:f3:8a:30:4b:72:fe:8b:6b:55:
36:7c:05:ce:5f:48:17:e8:31:ff:4e:10:81:7f:44:d7:a8:0c:
9b:b2:d7:47:e9:ac:3a:cd:d7:f6:ec:72:1d:de:68:bc:45:2a:
83:f4:16:14:d0:49:52:78:19:dd:4d:fa:99:94:b5:d6:f6:84:
3b:9e:ed:9e:c0:e0:76:1f:6b:03:db:c4:70:6a:51:17:9d:09:
c4:71:e7:16:4c:25:7a:b3:4c:83:ba:18:4e:28:8e:22:55:2a:
96:df:b7:8c:5a:d9:c1:a5:22:2b:c0:41:cc:ab:68:5f:2a:06:
cf:b0:c0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:22:47 2025 by rpki-client