Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/pgwGH_17ikEwMf3MSqbK3IV4Cq0.roa
File: pgwGH_17ikEwMf3MSqbK3IV4Cq0.roa (raw, json)
Hash identifier: f7JKzP80aFNEtVInpJ0ZAyyv7JxQqcN6q5Cb3slS9Uk=
Subject key identifier: A6:0C:06:1F:FD:7B:8A:41:30:31:FD:CC:4A:A6:CA:DC:85:78:0A:AD
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 019F6666E3250D813AD4DA184D4B540E48F3
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/pgwGH_17ikEwMf3MSqbK3IV4Cq0.roa
Signing time: Wed 15 Jul 2026 15:30:46 +0000
ROA not before: Wed 15 Jul 2026 15:30:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8309
IP address blocks: 144.56.56.0/24 maxlen: 24
144.56.148.0/22 maxlen: 22
144.56.152.0/21 maxlen: 21
144.56.160.0/19 maxlen: 19
144.56.192.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:66:66:e3:25:0d:81:3a:d4:da:18:4d:4b:54:0e:48:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Jul 15 15:30:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a60c061ffd7b8a413031fdcc4aa6cadc85780aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d9:b3:9f:9a:58:52:85:5b:43:80:db:66:1a:
ef:7a:50:ac:7d:93:08:ee:ee:06:6a:db:cb:54:6d:
48:ed:9b:0c:aa:e1:99:b3:f6:7c:a5:bb:49:c8:44:
5d:8a:a8:d8:73:4f:00:8e:29:b5:53:70:b8:c8:86:
c3:92:38:cd:bb:c9:9a:a9:9f:9b:bd:49:d1:2f:57:
61:82:1f:84:e9:ef:03:6f:3b:8d:de:86:48:e9:bf:
a5:74:c9:d7:40:bf:81:f9:7a:be:3a:33:7c:0b:fb:
eb:cd:9e:d0:b5:b3:36:23:04:6f:35:8f:c5:1d:5f:
4a:ed:d4:04:39:06:f9:1d:3c:43:ff:04:54:12:a8:
07:ef:e0:d7:27:05:fe:15:96:88:db:c6:a6:5b:a2:
5c:cd:fb:81:42:95:ba:82:91:24:db:35:3e:f0:e7:
b9:b4:26:2c:39:3e:55:72:55:c5:22:ed:ae:a0:aa:
bf:ea:18:2e:21:62:c3:73:30:87:db:a4:fa:08:bf:
3e:b2:67:17:f3:76:e3:23:60:b2:8f:b3:e7:64:29:
ae:63:f8:53:7a:4d:f4:df:72:da:54:9b:e2:f7:54:
a1:5c:dc:7e:dd:d4:db:ef:c3:cf:12:9a:23:e2:d4:
4d:75:1a:6d:ea:94:09:8d:83:ca:ad:25:fc:2d:11:
f4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:0C:06:1F:FD:7B:8A:41:30:31:FD:CC:4A:A6:CA:DC:85:78:0A:AD
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/pgwGH_17ikEwMf3MSqbK3IV4Cq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.56.0/24
144.56.148.0-144.56.255.255
Signature Algorithm: sha256WithRSAEncryption
05:59:ee:4c:b2:4b:92:2a:a9:c9:93:a0:0b:1b:0b:71:40:72:
85:26:5c:04:27:1f:3e:85:69:35:38:24:d1:75:f8:cc:bb:e0:
7b:89:37:3c:09:12:1d:ce:3b:b2:a8:ea:32:69:b5:71:a5:0d:
d4:ce:e6:b5:eb:b5:33:f2:71:97:20:74:5a:e9:6d:cf:b6:ab:
da:3b:fd:7d:61:7c:9d:5c:b0:8f:77:0c:6c:57:6a:39:46:5a:
90:36:49:16:23:7b:14:f2:cb:29:f5:b7:d7:54:8a:df:6e:f0:
8a:81:62:38:5a:db:fd:44:dd:30:10:c8:2d:55:1f:bb:5b:7a:
e7:b1:9a:d6:01:0e:18:fb:e3:9b:fb:61:04:2d:6c:d5:0c:a3:
4a:4e:08:55:26:8f:45:1a:91:f3:2c:9c:37:b8:4a:11:b1:71:
2b:d6:2e:b7:ad:f5:34:65:4d:ed:71:16:99:65:72:fb:44:18:
87:7d:3b:f7:6d:fd:15:63:dc:98:1b:f7:51:9b:0e:37:88:d0:
c2:47:ee:de:f1:66:43:17:d5:8c:ab:0b:b7:4c:03:2d:74:9f:
02:cd:da:88:71:5f:4b:38:25:56:e3:1e:de:35:85:ba:ab:75:
f9:ca:36:cb:bf:40:2f:49:59:aa:eb:f9:b3:01:64:8e:e1:74:
7c:10:10:cf
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:48:48 2026 by rpki-client