Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/rVd97ESQuMD8ReVawUkeb3TS11w.roa
File: rVd97ESQuMD8ReVawUkeb3TS11w.roa (raw, json)
Hash identifier: lFrJ3ijA5VWR6SSIzO+LEQ2lKyDoyCVvKpRPUOflmwA=
Subject key identifier: AD:57:7D:EC:44:90:B8:C0:FC:45:E5:5A:C1:49:1E:6F:74:D2:D7:5C
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 01A18820250B3DA922BF7D8CC44078C64C14
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/rVd97ESQuMD8ReVawUkeb3TS11w.roa
Signing time: Thu 29 Oct 2026 14:46:10 +0000
ROA not before: Thu 29 Oct 2026 14:46:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218911
IP address blocks: 144.56.72.0/24 maxlen: 24
144.56.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:88:20:25:0b:3d:a9:22:bf:7d:8c:c4:40:78:c6:4c:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Oct 29 14:46:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ad577dec4490b8c0fc45e55ac1491e6f74d2d75c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9b:01:91:fe:ee:a8:ae:4b:c7:50:4c:8a:09:
9d:15:d2:a1:a6:ec:88:4a:e1:96:9f:ba:d6:dc:03:
00:11:17:b8:dd:64:60:c5:23:5a:da:a7:1c:ab:d1:
72:f2:50:00:68:1d:8b:e3:7f:58:71:6b:0f:a2:4a:
ad:c7:be:e4:0f:ad:02:12:13:d8:30:2b:ed:dc:d7:
c8:e8:4f:b4:06:73:e5:68:a1:c9:98:4c:3c:2d:aa:
2d:99:f2:c3:2a:dc:9c:75:c9:6f:5f:66:a2:f5:4a:
22:a0:ff:81:fa:b4:38:2c:e4:3f:e7:aa:54:33:35:
1d:b3:b6:01:34:12:95:c7:54:85:03:66:52:0b:3c:
7c:5e:2f:f3:ed:a5:ec:a5:5b:6a:6e:5f:3e:cd:77:
a8:76:26:d1:c6:2f:6c:38:4e:dc:f3:fc:b7:19:c5:
fd:69:b4:89:dc:71:3e:54:5d:f0:b9:a3:b7:d1:b5:
e4:52:ff:c2:8d:d5:4a:73:f8:a9:b0:21:6f:e4:1e:
8f:42:11:e3:a2:99:bc:16:38:fc:cd:4d:cc:d7:be:
66:d7:b2:3d:ce:6b:48:de:be:61:cf:36:13:8c:f2:
46:b9:ee:21:f2:c0:80:9d:2a:ce:f2:8a:ad:9d:0d:
52:57:91:d7:3a:04:24:37:35:3f:17:80:e7:6d:80:
24:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:57:7D:EC:44:90:B8:C0:FC:45:E5:5A:C1:49:1E:6F:74:D2:D7:5C
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/rVd97ESQuMD8ReVawUkeb3TS11w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.72.0/24
144.56.81.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:1f:b1:99:a5:ba:aa:00:70:e3:14:b9:67:72:52:52:bc:10:
76:b5:34:b0:8a:9a:2c:db:a8:13:f7:d2:30:8f:ce:1f:d3:55:
34:db:36:96:0a:d6:bc:11:db:9b:b1:2d:cb:5e:a7:39:ce:05:
f1:7d:da:63:42:f1:79:68:e1:e5:9a:7a:15:06:70:59:3e:0b:
a6:56:bb:46:5e:81:4f:30:8a:a9:4e:c6:64:6b:d7:c4:37:31:
aa:fc:2b:c8:dc:d4:3e:79:55:24:7a:97:d4:20:fd:36:0e:99:
ac:a9:b5:16:89:ff:6f:c2:bd:84:21:7f:b8:4d:db:5d:4b:95:
c3:43:37:dd:b9:42:c8:b3:d6:c6:b1:69:11:43:25:b6:05:a1:
9f:56:69:da:fe:18:18:36:a1:f1:88:38:13:d2:9c:82:a7:fc:
92:86:7e:af:61:32:54:be:6c:47:e5:53:5a:22:87:a9:3e:52:
0f:74:e6:c2:3f:42:52:ec:4f:bc:f6:53:2b:e2:14:77:aa:14:
ce:92:1d:a8:46:85:99:f6:ad:e8:72:79:af:fe:84:f9:6f:9d:
59:dc:c2:b3:78:4e:fe:41:36:81:ff:d9:db:17:4b:50:9a:da:
26:9a:12:bc:c0:28:46:47:6f:eb:59:c1:99:f4:66:89:f9:3d:
f9:bb:a2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:37:42 2026 by rpki-client