Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/1-Zxv3Kw0-TaH9QonJVNF4xt--FY.roa
File: 1-Zxv3Kw0-TaH9QonJVNF4xt--FY.roa (raw, json)
Hash identifier: sdWRgTuLAn51+8HXVLa0jTAQ8mRzO7dfL4mFOSXplrM=
Subject key identifier: F9:9C:6F:DC:AC:34:F9:36:87:F5:0A:27:25:53:45:E3:1B:7E:F8:56
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 019A27445DCF70225D0A790303A92C984226
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/1-Zxv3Kw0-TaH9QonJVNF4xt--FY.roa
Signing time: Mon 27 Oct 2025 20:03:03 +0000
ROA not before: Mon 27 Oct 2025 20:03:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25160
IP address blocks: 144.56.8.0/24 maxlen: 24
144.56.10.0/24 maxlen: 24
144.56.11.0/24 maxlen: 24
144.56.18.0/24 maxlen: 24
144.56.19.0/24 maxlen: 24
144.56.25.0/24 maxlen: 24
144.56.26.0/24 maxlen: 24
144.56.30.0/24 maxlen: 24
144.56.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:44:5d:cf:70:22:5d:0a:79:03:03:a9:2c:98:42:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Oct 27 20:03:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f99c6fdcac34f93687f50a27255345e31b7ef856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:89:92:8d:da:f1:99:81:fe:2c:b4:a7:f1:ed:
b5:f4:28:70:9f:85:ad:e1:ff:92:e4:ff:b5:af:1d:
dd:02:7e:9b:2d:79:c0:88:f0:53:c8:cc:14:47:93:
cc:d6:3f:0c:dd:1e:02:66:51:29:37:9f:19:f5:1f:
d6:af:e5:7b:fc:a8:a5:fd:ba:5d:59:57:97:26:5a:
5b:60:8b:f5:84:11:f9:21:19:87:4f:1d:c7:03:e2:
e1:45:90:ba:6c:ff:68:e1:8c:fe:c5:4c:2c:38:a7:
a1:99:39:33:a1:e2:b5:e7:d5:b0:cc:bb:44:4a:be:
ea:6c:2f:22:84:98:08:5b:52:3a:6a:50:7f:90:28:
7c:4f:be:44:cd:23:5c:70:04:73:b8:a0:9b:61:1b:
c0:b4:1c:50:52:b7:08:22:9c:54:f9:99:75:c3:b8:
05:a4:2c:4e:6d:90:a3:2e:3c:a1:bc:ed:2f:df:1e:
35:ee:fd:a1:4f:30:9d:85:71:0c:87:44:d8:7d:0d:
37:79:93:d7:d9:9c:48:6c:25:cd:6f:ef:00:46:a3:
87:58:b6:50:d5:b7:63:bd:a9:c8:58:b2:b1:07:26:
28:7b:b4:c2:58:c8:20:da:88:bd:96:fe:ff:a1:98:
23:e4:6c:f4:90:d8:d5:45:1d:d4:18:d6:3b:0c:e6:
e2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:9C:6F:DC:AC:34:F9:36:87:F5:0A:27:25:53:45:E3:1B:7E:F8:56
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/1-Zxv3Kw0-TaH9QonJVNF4xt--FY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.8.0/24
144.56.10.0/23
144.56.18.0/23
144.56.25.0-144.56.26.255
144.56.30.0/24
144.56.32.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:53:2d:99:5d:e8:56:77:07:a7:e5:c2:b5:c4:c4:72:81:b4:
65:13:d6:b8:23:05:c5:86:15:d7:db:cf:a7:d1:0b:bc:5d:2b:
af:13:d2:00:b0:73:85:12:2e:6c:00:61:da:26:49:2c:32:c9:
6c:fb:5e:00:f1:4a:6a:48:4b:4a:ae:3f:56:09:55:1f:05:b8:
bb:55:66:ca:1a:2d:f4:f5:c7:33:fa:ef:d0:05:e2:86:a8:37:
ba:3f:04:9d:f0:37:0a:6b:ef:0f:16:b3:99:f9:3e:bf:7f:d8:
21:50:6a:ad:d3:82:12:c9:af:0b:71:09:29:56:f8:0f:de:24:
2b:b9:1b:c9:72:bc:1b:2f:d3:dc:9d:a3:35:3e:62:69:4a:f7:
eb:42:ea:3a:1e:84:c1:0d:1e:4a:ef:a8:f0:75:17:f5:b9:a3:
7a:63:b6:38:3e:7b:6c:e7:82:81:3e:87:72:f9:d2:b8:07:1f:
dd:b7:3d:3a:01:6a:65:45:4b:18:a5:32:bd:ac:d3:2b:0c:2f:
18:63:db:bf:41:bb:c6:43:bc:f2:9f:35:f5:1c:cc:9b:98:f6:
98:6f:48:0d:a6:f2:4e:ae:80:9e:aa:49:83:57:c9:c1:3f:f6:
0e:82:fe:ed:55:41:5a:21:7c:36:cf:56:7c:81:3f:1d:29:97:
eb:98:97:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:46:34 2025 by rpki-client