Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/HXce6wRv-mHeHObDMPmWpzIn8vI.roa
File: HXce6wRv-mHeHObDMPmWpzIn8vI.roa (raw, json)
Hash identifier: vbEpAU6gugOWkSEZ9TUmzquMe6WJtO3s83SgzOzTs1U=
Subject key identifier: 1D:77:1E:EB:04:6F:FA:61:DE:1C:E6:C3:30:F9:96:A7:32:27:F2:F2
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 01A0A635A0ADA20CC9B3848C82AC0CB4E2E1
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/HXce6wRv-mHeHObDMPmWpzIn8vI.roa
Signing time: Tue 15 Sep 2026 17:55:27 +0000
ROA not before: Tue 15 Sep 2026 17:55:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218797
IP address blocks: 144.56.100.0/24 maxlen: 24
144.56.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a6:35:a0:ad:a2:0c:c9:b3:84:8c:82:ac:0c:b4:e2:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Sep 15 17:55:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d771eeb046ffa61de1ce6c330f996a73227f2f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ac:2d:02:3b:d7:af:f8:f1:ae:04:29:8d:58:
9f:2c:4d:8f:da:30:6f:f7:ac:dd:b0:fc:c6:cd:ed:
18:89:af:60:24:4f:8e:3d:c8:97:b6:ba:76:28:82:
db:9a:31:b9:8c:a0:c8:48:a0:1c:1c:22:16:d2:84:
d5:ad:24:b7:3e:6f:62:c7:0b:a6:21:07:cc:9f:80:
67:2e:e3:b1:fd:9d:f9:6b:c0:88:a5:e1:f3:e5:86:
2a:2b:d0:db:a1:81:b8:d7:52:ca:f4:c8:e7:11:c9:
1f:83:47:9f:ee:82:77:fa:36:45:93:f4:75:8a:01:
77:b3:2e:8c:cf:bf:da:21:31:e5:c6:67:d8:df:24:
5e:b1:aa:6d:fd:44:2e:97:c6:62:22:4e:2a:66:e4:
8b:b3:f9:f6:15:18:f1:66:d3:9e:7e:67:f6:25:55:
0e:ec:ab:d5:4e:db:f8:5a:5d:f0:c8:59:50:fe:56:
37:a7:cc:a9:b1:ab:cf:97:39:aa:d8:a1:ca:74:a6:
8c:dc:bc:f2:a2:c8:6d:1f:c3:cb:a5:30:32:65:ea:
88:27:8a:4b:4e:8f:6f:63:62:62:00:16:71:44:73:
e4:c9:56:4d:af:45:90:53:46:c2:a8:4b:9c:b7:44:
c5:b9:e9:62:c0:fb:a8:39:12:57:f3:29:92:a6:b2:
dd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:77:1E:EB:04:6F:FA:61:DE:1C:E6:C3:30:F9:96:A7:32:27:F2:F2
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/HXce6wRv-mHeHObDMPmWpzIn8vI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.100.0/24
144.56.127.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:cb:33:45:04:fa:e0:a6:cf:04:5e:5e:a3:b3:4b:b3:01:75:
43:a6:39:f3:d4:60:2a:0d:85:65:00:34:dd:c2:67:45:c2:a1:
3e:5a:d8:0f:e2:f3:30:c6:a0:3b:6c:23:80:02:66:dc:c5:b4:
29:e3:82:94:7f:b9:97:9f:a7:43:48:c1:05:4f:63:54:94:3a:
d6:a7:3d:df:02:36:ec:a0:64:1d:f3:ec:f4:6e:4b:db:08:f5:
77:b3:1f:80:6d:bb:82:39:8a:72:eb:a9:9c:e7:15:f6:af:88:
c0:40:2b:07:88:f9:b3:9d:ae:c1:58:3f:96:a6:72:fd:66:56:
58:43:e1:ec:ec:b2:c6:3b:5d:0a:79:0f:71:80:f9:e6:22:1b:
e6:2b:54:06:0f:52:64:91:fd:46:66:11:52:6c:4d:af:42:da:
73:cf:47:b2:42:e6:ed:b1:bf:d1:f6:99:70:76:be:97:4e:a6:
2b:20:8f:15:35:d1:ec:f0:b1:fa:e6:26:9f:74:02:f3:e2:ac:
c2:08:e5:90:31:d5:6b:fc:ff:cd:ee:52:dc:08:de:2f:46:01:
ed:cb:a4:cc:30:65:9b:2a:f8:3f:ff:54:b2:a3:a2:60:df:24:
a6:2d:cc:ae:4a:1b:d1:b4:cb:13:e1:6f:c0:66:98:85:3d:72:
43:2b:7a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:28:06 2026 by rpki-client