Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/bzVA0L8u_SZfC7nApdrrf5ziHU8.roa
File: bzVA0L8u_SZfC7nApdrrf5ziHU8.roa (raw, json)
Hash identifier: gJGDFjG8hgLSk5HDAK0NAWMPWyVeS4ztNaYMEZMThHU=
Subject key identifier: 6F:35:40:D0:BF:2E:FD:26:5F:0B:B9:C0:A5:DA:EB:7F:9C:E2:1D:4F
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 01A120489AA37E9127339295C201CC8E99B5
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/bzVA0L8u_SZfC7nApdrrf5ziHU8.roa
Signing time: Fri 09 Oct 2026 10:49:51 +0000
ROA not before: Fri 09 Oct 2026 10:49:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212669
IP address blocks: 144.56.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 07:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:48:9a:a3:7e:91:27:33:92:95:c2:01:cc:8e:99:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Oct 9 10:49:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f3540d0bf2efd265f0bb9c0a5daeb7f9ce21d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b1:e7:1d:52:76:f5:18:fd:54:7b:04:a7:9d:
dc:7b:58:9a:24:f9:46:b9:9c:e3:cb:28:14:c2:a6:
f6:86:12:22:79:26:a2:ec:3b:46:66:80:3d:7a:04:
8d:de:13:03:34:41:13:35:61:68:59:2b:d9:eb:b6:
62:9a:bc:c1:6b:7a:33:37:d9:1f:a1:b9:07:c6:1e:
7e:27:0b:83:1b:13:af:0c:b3:eb:9b:f0:1c:f3:6f:
c8:ee:90:fa:b8:ec:b8:06:c5:03:e6:d0:29:45:2f:
e9:eb:2e:0c:df:b8:45:2e:72:90:df:02:5c:4f:4c:
25:a5:15:03:db:02:9f:09:65:2a:5e:17:6a:8d:5c:
69:8e:04:a1:f7:9a:ff:f2:15:60:1f:a7:2d:ee:70:
e9:f0:33:2f:c7:98:3d:39:c8:c9:83:1b:8f:eb:68:
f6:c6:b8:02:61:a2:20:5a:ab:75:db:4d:e1:d1:a3:
10:1d:08:c7:18:3e:da:ae:14:02:e1:74:95:e8:85:
5f:fc:ad:77:fc:d4:bc:84:a4:c3:9c:fa:6b:39:6b:
8f:44:e4:22:44:3e:00:d8:59:54:0c:e8:48:0e:2d:
a2:3d:54:0d:7f:99:4b:1f:62:5a:c8:36:c4:58:d4:
7d:61:b0:b4:97:10:d3:5a:a5:7d:0f:9e:e8:b4:e0:
38:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:35:40:D0:BF:2E:FD:26:5F:0B:B9:C0:A5:DA:EB:7F:9C:E2:1D:4F
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/bzVA0L8u_SZfC7nApdrrf5ziHU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.49.0/24
Signature Algorithm: sha256WithRSAEncryption
50:67:14:34:81:62:bb:ef:2d:a8:b8:d4:33:ea:49:35:51:76:
ce:ee:f5:2c:87:08:4a:b6:12:2b:67:76:37:9f:e4:34:e4:3f:
c9:0a:17:1b:82:16:00:dd:10:78:37:e0:68:48:16:da:96:59:
97:c3:96:7e:5c:fb:8a:f5:47:a4:b0:1d:4f:0e:f6:be:35:91:
89:5d:47:84:a2:63:c5:93:0b:21:ff:89:c1:d1:42:da:fd:4f:
fd:3a:88:8a:51:ad:ba:fc:82:03:d3:4a:a7:00:a4:73:69:82:
39:60:a7:d8:9a:8c:12:aa:b3:96:b8:40:c4:4f:70:69:b5:f1:
e2:1f:05:50:9e:4c:63:e6:54:8c:49:d5:a6:c2:5e:59:f5:bc:
ba:60:57:73:1a:f1:9c:e6:44:77:14:e0:96:0d:9f:7c:6a:78:
02:3e:08:6b:03:5e:23:ae:ae:44:8f:81:ed:15:7c:ea:fe:cb:
43:46:ee:0f:0c:b0:fb:af:d9:a7:dc:67:6c:f6:d8:e2:30:12:
ef:1e:b1:34:ff:9f:96:2b:39:02:6a:94:a9:8e:0d:57:d2:29:
07:1b:eb:f2:7e:04:89:ee:62:d2:c3:9c:4b:03:7e:4c:9b:82:
2a:7b:22:f3:59:54:80:a2:7d:03:02:83:e9:bd:a9:a0:ed:bd:
e4:3d:72:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:08:45 2026 by rpki-client