Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/RuO6KIVhjozoJ0kD2BkdhQgX4B8.roa
File: RuO6KIVhjozoJ0kD2BkdhQgX4B8.roa (raw, json)
Hash identifier: QibHxSQu8SWRhQzt1nTT+aioz4rYu6SGZB+KmUsIJdc=
Subject key identifier: 46:E3:BA:28:85:61:8E:8C:E8:27:49:03:D8:19:1D:85:08:17:E0:1F
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 01A0479ECBFF678E3682E6A6547D83494924
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/RuO6KIVhjozoJ0kD2BkdhQgX4B8.roa
Signing time: Fri 28 Aug 2026 09:06:24 +0000
ROA not before: Fri 28 Aug 2026 09:06:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219393
IP address blocks: 144.56.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:47:9e:cb:ff:67:8e:36:82:e6:a6:54:7d:83:49:49:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Aug 28 09:06:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46e3ba2885618e8ce8274903d8191d850817e01f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e0:33:fc:36:53:f8:09:ae:7b:a2:2e:8f:71:
94:21:ff:49:87:b2:e8:d1:73:d8:56:b0:1e:3b:da:
fb:1a:09:a0:f7:2d:70:90:1e:98:14:3d:b1:ce:a2:
30:61:b8:96:84:bd:b5:96:07:3b:d3:49:e2:f5:ba:
78:38:71:2a:b0:2a:99:db:b7:d4:dc:26:ac:a6:f4:
f5:91:21:e9:f9:60:0e:f1:6b:3e:f7:6d:5f:73:ae:
49:a5:59:61:01:06:ce:cc:e9:48:a5:ed:77:54:18:
22:67:7d:40:31:65:5d:3c:6f:a3:1b:de:e1:ad:89:
ce:79:41:1d:57:17:cd:7d:a9:f8:e4:d1:35:c8:a1:
e9:db:a5:8c:69:f5:b6:b2:87:72:2a:09:3b:0e:d7:
be:9d:32:47:ab:05:66:43:52:cc:e0:19:c5:27:a4:
1f:81:73:aa:ee:b0:d5:1f:41:b3:9d:66:66:22:98:
70:1c:1c:5b:86:33:7b:7b:20:37:61:c3:5c:87:30:
3c:b7:00:17:c0:4e:67:ea:3c:8a:e4:9c:be:04:36:
9e:90:81:93:f7:af:b3:6e:11:85:dd:24:84:f1:b6:
96:4a:eb:8a:9e:33:bf:e5:09:0f:3b:f8:49:9d:fc:
7c:d3:10:9d:83:fe:70:d2:96:fa:62:38:5c:d5:6e:
bb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E3:BA:28:85:61:8E:8C:E8:27:49:03:D8:19:1D:85:08:17:E0:1F
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/RuO6KIVhjozoJ0kD2BkdhQgX4B8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.38.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:62:57:40:a1:43:aa:03:7e:b3:4c:2d:49:bd:fc:a0:18:9c:
46:85:88:6a:74:e1:7e:8e:7d:4a:3e:e0:08:09:07:ac:7c:73:
d3:bb:25:5e:a5:92:ae:ca:ca:55:a1:ba:26:0d:82:a4:85:aa:
07:69:38:6c:42:71:4c:3c:b5:7e:e1:89:7f:a0:9f:13:0d:c1:
83:3f:8c:f0:c1:cd:18:29:73:d7:06:29:c2:16:19:f6:4d:92:
9c:06:8b:2e:ad:3a:76:b9:c6:23:8d:49:cc:b8:e2:04:10:bf:
f7:0a:d2:0e:3c:47:d8:56:fd:5a:36:26:6f:65:3b:82:50:a7:
77:84:84:ce:6d:39:89:39:c9:d4:46:64:04:bf:20:2c:7d:ff:
1c:ed:13:fd:7f:4e:89:ca:bf:5c:71:82:d1:d0:5e:29:88:29:
52:5c:e9:3c:b6:9b:bc:36:c3:44:ae:62:7b:a5:29:c8:ba:fd:
72:59:7e:fe:db:e8:5e:45:dc:e1:30:9e:7d:17:0e:0a:cf:34:
7e:10:41:bc:d9:da:07:06:7c:0e:b1:f6:26:fb:5b:d5:96:c3:
fc:e0:1e:de:60:75:ec:97:6f:bf:dc:e5:16:b2:f3:87:35:c0:
8c:2d:84:c7:36:c2:24:9a:13:cb:5e:46:0e:f2:a3:2a:8e:ab:
a1:4b:f1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:07:33 2026 by rpki-client