Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/P-7YT_stn3QjMbmeVSoj54vRTCs.roa
File: P-7YT_stn3QjMbmeVSoj54vRTCs.roa (raw, json)
Hash identifier: fJS0qp2+kgQkR2L1HUuieZMpuL7XJ7LFlXT3cDzvL5o=
Subject key identifier: 3F:EE:D8:4F:FB:2D:9F:74:23:31:B9:9E:55:2A:23:E7:8B:D1:4C:2B
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 01A0A634B7180C1E33397FE2E66C5101F3AC
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/P-7YT_stn3QjMbmeVSoj54vRTCs.roa
Signing time: Tue 15 Sep 2026 17:54:27 +0000
ROA not before: Tue 15 Sep 2026 17:54:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219075
IP address blocks: 144.56.17.0/24 maxlen: 24
144.56.35.0/24 maxlen: 24
144.56.36.0/24 maxlen: 24
144.56.97.0/24 maxlen: 24
144.56.100.0/24 maxlen: 24
144.56.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a6:34:b7:18:0c:1e:33:39:7f:e2:e6:6c:51:01:f3:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Sep 15 17:54:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3feed84ffb2d9f742331b99e552a23e78bd14c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:68:ba:08:07:20:72:a3:0a:12:d0:97:ab:91:
b5:4b:08:57:a9:96:aa:0a:f6:fe:96:7b:62:f0:16:
23:d0:64:01:3e:2c:67:9c:1d:18:c5:8c:8a:b7:60:
e7:97:9c:65:53:79:14:0e:00:ee:c9:a3:56:6d:df:
58:34:29:14:5c:1c:50:50:a5:1e:19:bf:ba:77:85:
14:32:56:85:51:eb:4f:4a:22:c9:f6:d2:11:8e:96:
19:85:55:88:96:4d:d7:b0:0b:9e:6a:11:98:f8:b2:
10:2b:50:be:ca:14:51:27:0e:5f:34:70:ed:1b:0a:
d0:31:33:99:bb:6f:70:4d:7c:fa:91:97:a4:18:4f:
e5:48:17:7d:f4:6a:f4:df:c7:11:78:bf:23:7c:b0:
ff:b4:4a:a9:64:2f:f4:5d:b2:1a:11:24:4c:3e:7c:
fa:d4:5e:10:a5:de:47:b3:da:06:27:b8:ff:fc:3e:
b9:53:e0:03:ea:27:ef:54:e9:56:0b:59:9a:4a:8a:
ef:34:78:90:8c:5b:14:2b:6b:da:20:9a:20:15:04:
ef:6c:06:2d:ab:da:e6:67:96:5c:bf:40:27:b3:97:
21:02:76:3d:38:fc:7b:3b:d4:d9:86:b2:71:eb:e7:
1f:d5:d9:f8:82:74:4b:12:a4:79:c7:bf:b8:82:fa:
17:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:EE:D8:4F:FB:2D:9F:74:23:31:B9:9E:55:2A:23:E7:8B:D1:4C:2B
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/P-7YT_stn3QjMbmeVSoj54vRTCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.17.0/24
144.56.35.0-144.56.36.255
144.56.97.0/24
144.56.100.0/24
144.56.127.0/24
Signature Algorithm: sha256WithRSAEncryption
65:51:36:2f:5a:0b:67:15:a4:25:cc:c8:fe:21:33:e0:8f:9b:
44:2d:b3:d0:88:f0:af:61:f5:04:bf:19:f0:86:10:53:c1:e5:
50:55:bf:70:8a:58:c3:c6:be:10:82:90:d4:8a:71:eb:3e:d2:
5d:0c:ab:18:40:1d:96:86:70:5c:9c:ea:8f:b6:7c:98:53:b0:
69:66:ad:57:dc:ee:6b:f4:f7:3f:41:ab:96:8d:7c:8d:b5:7c:
9c:95:78:13:f0:86:44:31:2d:2e:b0:48:27:98:28:ef:43:eb:
df:fe:e9:99:82:70:31:12:7e:16:3b:c3:37:33:b6:1e:ff:7e:
51:fb:32:53:a7:e3:44:bc:a7:3a:af:e7:ce:90:d3:19:01:97:
7b:1c:23:17:e9:5e:15:9a:f2:db:5b:24:bb:62:cd:d6:55:8b:
58:1a:ff:a1:06:32:41:b9:82:ee:bf:b0:81:4e:4a:04:67:04:
ea:0c:3e:a7:0a:15:ba:4b:24:7b:09:9a:7d:3f:f7:10:c3:ee:
9b:0b:dd:a8:db:f5:86:be:b0:2f:d6:bf:7e:b9:6e:df:a0:9c:
ff:81:66:ce:68:43:3f:ed:91:39:fb:0e:11:a0:09:e0:a9:24:
3e:32:53:4e:bf:e7:c6:ac:d9:bf:3b:5f:80:9a:20:75:00:9c:
1d:6c:2a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:54:24 2026 by rpki-client