Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/wQf3slSjcDcszDC3iCvBsgcbLck.roa
File: wQf3slSjcDcszDC3iCvBsgcbLck.roa (raw, json)
Hash identifier: WEx/rS+gh4VVC8ZVkRxH+m9dal/YGGtlbKf92wSvNJo=
Subject key identifier: C1:07:F7:B2:54:A3:70:37:2C:CC:30:B7:88:2B:C1:B2:07:1B:2D:C9
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 01A0C878130A6616BD5C8ECD25E82B7F42CA
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/wQf3slSjcDcszDC3iCvBsgcbLck.roa
Signing time: Tue 22 Sep 2026 09:35:07 +0000
ROA not before: Tue 22 Sep 2026 09:35:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218797
IP address blocks: 144.56.38.0/24 maxlen: 24
144.56.100.0/24 maxlen: 24
144.56.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:78:13:0a:66:16:bd:5c:8e:cd:25:e8:2b:7f:42:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Sep 22 09:35:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c107f7b254a370372ccc30b7882bc1b2071b2dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f8:53:a7:79:b9:c6:87:aa:9b:d5:31:95:5f:
4f:ef:86:6e:7a:49:1f:04:6d:42:ba:d8:c2:58:82:
d1:7e:a5:f3:1d:62:ce:c4:e0:b6:4e:fe:ca:9b:89:
42:f1:3a:2f:96:79:00:ea:bc:37:00:5a:2f:40:67:
f0:53:8d:06:09:62:9c:09:f5:5f:0e:97:68:21:41:
77:84:50:d8:8d:82:7e:a4:9b:2f:d8:1e:d1:8b:5a:
7c:b5:24:d2:90:ee:97:09:7d:bd:d5:db:d7:e3:c3:
4b:4d:f5:86:5e:08:31:7e:7e:72:75:67:51:53:c6:
b9:20:22:dd:59:e3:96:54:0a:62:39:4c:55:2e:cf:
40:72:3d:9d:fa:46:2f:c7:75:5f:a2:50:3f:77:1f:
af:ce:ae:94:51:4e:7b:0d:6d:f1:63:ad:ce:f7:33:
56:0c:72:d6:52:c0:0d:40:f0:3d:15:fa:2a:a0:e3:
b4:88:58:07:58:51:60:7e:87:b0:92:0f:b6:04:ea:
20:49:13:c5:39:bf:0d:33:72:c3:f5:05:78:e0:26:
60:de:15:b4:7e:b7:3b:84:af:fc:d3:e2:3c:ae:3f:
22:b8:aa:bc:a3:cd:d6:f5:7a:a1:e2:fc:6f:47:8b:
e7:15:11:f3:44:83:7e:db:f3:d5:6a:98:67:6e:d1:
95:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:07:F7:B2:54:A3:70:37:2C:CC:30:B7:88:2B:C1:B2:07:1B:2D:C9
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/wQf3slSjcDcszDC3iCvBsgcbLck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.38.0/24
144.56.100.0/24
144.56.127.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:ae:dd:43:47:3d:92:86:a9:2e:e4:18:e6:27:92:0c:e0:2a:
8a:7d:cb:a1:2c:f9:0f:22:90:8f:32:99:ff:ff:c2:07:ef:0a:
9c:43:b5:3e:e4:8b:2e:bc:83:ce:15:d4:16:ee:f6:43:ac:5f:
13:12:b3:99:1a:14:87:3f:fa:22:f1:c9:56:ce:7c:db:0b:e8:
a3:e7:a6:55:e7:a2:ed:9c:28:24:c8:d1:0f:94:cc:d4:45:64:
6a:b4:d5:f7:30:3f:30:fc:09:a1:42:4a:de:8c:0a:81:91:c5:
dd:03:83:ba:f7:d9:bf:3f:54:15:ad:1e:c6:5b:75:b6:6d:8d:
03:ac:4d:35:99:bf:85:f4:ef:9f:2f:4d:fe:60:10:6d:ff:f4:
33:77:78:72:1b:37:f4:15:c1:57:91:67:98:bf:a5:01:05:a5:
37:5b:65:f8:6e:65:d1:80:51:4d:77:d7:cb:02:a5:20:b2:e7:
f0:a8:19:31:a5:33:0a:64:1e:ed:8b:6c:52:33:c2:00:a0:23:
13:fd:3f:ba:a5:cf:f4:9b:cf:b2:37:d9:31:f9:e1:a5:55:6e:
6d:d3:84:95:74:5a:7b:07:a3:72:b6:0c:33:2d:dc:05:a9:e9:
d1:02:b5:6a:c8:c3:62:e5:fb:f8:d1:f0:ad:6b:7a:78:ce:7d:
53:1c:2f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:09:26 2026 by rpki-client