Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/pPtHj_8PIPTQq9_9HQ7moU-tNto.roa
File: pPtHj_8PIPTQq9_9HQ7moU-tNto.roa (raw, json)
Hash identifier: VG+uAOWni5Eou7Kbno7vLXQuzDBwYKJivK6FVEDldcE=
Subject key identifier: A4:FB:47:8F:FF:0F:20:F4:D0:AB:DF:FD:1D:0E:E6:A1:4F:AD:36:DA
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 0198BE904BAE2E78FBD521436B66AEBE2138
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/pPtHj_8PIPTQq9_9HQ7moU-tNto.roa
Signing time: Mon 18 Aug 2025 19:03:04 +0000
ROA not before: Mon 18 Aug 2025 19:03:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 144.56.13.0/24 maxlen: 24
144.56.23.0/24 maxlen: 24
144.56.36.0/24 maxlen: 24
144.56.38.0/24 maxlen: 24
144.56.40.0/24 maxlen: 24
144.56.76.0/24 maxlen: 24
144.56.93.0/24 maxlen: 24
144.56.94.0/24 maxlen: 24
144.56.95.0/24 maxlen: 24
144.56.97.0/24 maxlen: 24
144.56.98.0/24 maxlen: 24
144.56.99.0/24 maxlen: 24
144.56.100.0/24 maxlen: 24
144.56.101.0/24 maxlen: 24
144.56.103.0/24 maxlen: 24
144.56.108.0/24 maxlen: 24
144.56.115.0/24 maxlen: 24
144.56.116.0/24 maxlen: 24
144.56.118.0/24 maxlen: 24
144.56.120.0/24 maxlen: 24
144.56.121.0/24 maxlen: 24
144.56.122.0/24 maxlen: 24
144.56.124.0/24 maxlen: 24
144.56.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:be:90:4b:ae:2e:78:fb:d5:21:43:6b:66:ae:be:21:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Aug 18 19:03:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4fb478fff0f20f4d0abdffd1d0ee6a14fad36da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8b:ae:a6:4d:c2:a5:f5:88:09:43:24:5b:e8:
51:40:1f:f7:8e:9a:1d:1e:ae:29:1c:59:63:2e:93:
cd:2a:09:74:fe:c9:61:76:3f:29:2a:f5:34:f9:8b:
76:cd:fb:a5:12:94:13:59:db:fc:19:b4:66:e5:6d:
58:17:a2:71:a6:99:9c:15:bb:cc:6f:3f:af:cd:3b:
55:1d:b9:1e:09:85:89:e7:2b:f5:5f:d4:03:ae:2d:
b8:26:b5:9b:2d:d7:66:32:d4:e2:ad:b6:48:df:8c:
51:76:56:6b:09:af:c3:1c:c5:f1:83:50:9c:74:fe:
85:8c:1d:c6:fb:41:cf:0d:ff:9c:b6:a5:6a:97:f6:
6a:e3:5b:d6:07:cc:bc:3b:a0:10:34:f1:e2:17:0e:
12:be:d0:cc:53:f7:8f:99:23:3e:bf:7c:d9:f3:24:
cb:46:a9:a5:0b:92:3c:0d:e4:f3:5a:bd:a4:db:f1:
80:76:ce:22:ba:74:1f:6e:c1:10:99:c3:82:0f:80:
5f:01:8b:c0:78:60:10:17:32:5d:53:6e:75:fa:f9:
56:8a:9c:83:da:76:28:09:28:4f:d7:ea:ec:3c:01:
5c:2f:02:d2:3a:90:30:da:9c:14:e6:5e:94:3d:fb:
c3:63:35:d7:30:68:68:1e:7b:82:18:2f:48:7f:d8:
98:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:FB:47:8F:FF:0F:20:F4:D0:AB:DF:FD:1D:0E:E6:A1:4F:AD:36:DA
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/pPtHj_8PIPTQq9_9HQ7moU-tNto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.13.0/24
144.56.23.0/24
144.56.36.0/24
144.56.38.0/24
144.56.40.0/24
144.56.76.0/24
144.56.93.0-144.56.95.255
144.56.97.0-144.56.101.255
144.56.103.0/24
144.56.108.0/24
144.56.115.0-144.56.116.255
144.56.118.0/24
144.56.120.0-144.56.122.255
144.56.124.0/24
144.56.128.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:77:a1:18:55:9d:c2:a3:27:32:27:8f:ec:66:c4:d4:cc:64:
75:f3:b7:25:f2:e6:d2:9f:41:e6:50:79:c5:e7:89:64:5e:07:
7a:9e:52:d4:31:bb:fe:d3:96:d0:c9:3a:5e:ac:3b:9d:e0:5c:
51:6e:db:34:e5:3e:f6:88:7a:9d:2c:85:dc:09:f2:60:f2:a9:
f0:5b:03:bc:21:8f:ba:9b:f9:55:9d:32:6a:c3:cd:04:0d:2e:
68:21:28:8f:45:46:ef:ab:a9:30:82:51:c1:c9:18:cf:0b:c5:
40:8e:3a:0f:69:e3:76:d5:bd:57:58:e8:70:f5:6f:ad:dd:bf:
d8:79:1f:58:47:51:a8:13:9e:98:91:a9:26:f0:05:da:34:c1:
c8:a7:42:9f:65:c7:78:94:3f:0c:4e:50:2f:8b:c7:7b:a1:b3:
ef:44:96:e9:af:90:86:e2:7d:15:9c:c8:b1:e8:af:33:77:fa:
45:eb:b8:ae:d4:96:7e:53:4d:24:d8:48:f4:71:8a:d9:71:c8:
2b:b8:4d:62:88:c0:93:aa:bd:e8:c7:d9:b8:68:74:1f:04:5e:
32:f1:55:93:c2:79:0a:35:9b:f7:b8:78:8f:e6:7d:ed:d5:b7:
90:36:80:49:d9:52:a6:2f:01:95:71:21:ad:5a:f9:d1:1d:14:
3e:05:03:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:01:21 2025 by rpki-client