Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/rPmv-ZYTtdxBIObiZFXTTrXUPMo.roa
File: rPmv-ZYTtdxBIObiZFXTTrXUPMo.roa (raw, json)
Hash identifier: DhrBMkiedUW5Z/x0EpV6Br3pjQNT7YFHGurp1RJwipw=
Subject key identifier: AC:F9:AF:F9:96:13:B5:DC:41:20:E6:E2:64:55:D3:4E:B5:D4:3C:CA
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 01A0A63775E4BD6F0A562C3D841D0445E8B6
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/rPmv-ZYTtdxBIObiZFXTTrXUPMo.roa
Signing time: Tue 15 Sep 2026 17:57:27 +0000
ROA not before: Tue 15 Sep 2026 17:57:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 144.56.7.0/24 maxlen: 24
144.56.9.0/24 maxlen: 24
144.56.13.0/24 maxlen: 24
144.56.15.0/24 maxlen: 24
144.56.24.0/24 maxlen: 24
144.56.27.0/24 maxlen: 24
144.56.29.0/24 maxlen: 24
144.56.31.0/24 maxlen: 24
144.56.34.0/24 maxlen: 24
144.56.41.0/24 maxlen: 24
144.56.51.0/24 maxlen: 24
144.56.71.0/24 maxlen: 24
144.56.72.0/24 maxlen: 24
144.56.76.0/24 maxlen: 24
144.56.78.0/24 maxlen: 24
144.56.80.0/24 maxlen: 24
144.56.81.0/24 maxlen: 24
144.56.85.0/24 maxlen: 24
144.56.86.0/24 maxlen: 24
144.56.88.0/24 maxlen: 24
144.56.91.0/24 maxlen: 24
144.56.93.0/24 maxlen: 24
144.56.94.0/24 maxlen: 24
144.56.98.0/24 maxlen: 24
144.56.99.0/24 maxlen: 24
144.56.101.0/24 maxlen: 24
144.56.102.0/24 maxlen: 24
144.56.103.0/24 maxlen: 24
144.56.106.0/24 maxlen: 24
144.56.107.0/24 maxlen: 24
144.56.108.0/24 maxlen: 24
144.56.112.0/24 maxlen: 24
144.56.117.0/24 maxlen: 24
144.56.118.0/24 maxlen: 24
144.56.119.0/24 maxlen: 24
144.56.121.0/24 maxlen: 24
144.56.122.0/24 maxlen: 24
144.56.124.0/24 maxlen: 24
144.56.125.0/24 maxlen: 24
144.56.126.0/24 maxlen: 24
144.56.128.0/24 maxlen: 24
144.56.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a6:37:75:e4:bd:6f:0a:56:2c:3d:84:1d:04:45:e8:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Sep 15 17:57:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=acf9aff99613b5dc4120e6e26455d34eb5d43cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:13:a8:ad:a3:16:19:75:af:fe:51:ed:e3:95:
48:40:17:19:7a:22:7c:37:99:99:34:db:b7:5d:ad:
ec:86:b9:d0:95:e2:dd:95:b5:bf:90:15:6f:a2:05:
02:59:bb:bc:47:be:56:1c:4f:25:70:5e:9a:b0:be:
02:9a:49:e1:4e:58:c1:c6:74:4f:bf:a8:cb:9a:a1:
70:21:85:2f:b5:e2:2c:d1:79:60:36:d0:fb:90:0f:
e8:5b:00:2e:40:6c:46:43:45:34:db:9c:8e:bf:53:
02:4c:06:65:13:bd:56:9f:ed:0a:39:2f:c9:4f:2b:
6c:1e:9b:e8:8f:a2:47:13:d8:2f:66:c2:6c:8e:a4:
1b:d9:78:87:92:43:27:c4:0a:bc:e7:85:b3:2d:a9:
aa:6e:8a:d1:86:12:93:46:f6:b2:41:89:d1:53:82:
51:1b:33:2d:54:5a:30:f0:35:d2:2a:9a:e2:02:ed:
59:a2:f8:9b:af:46:e2:4c:ad:93:92:18:3d:5c:d0:
f1:fb:44:5f:69:93:dd:c1:82:af:7c:e3:d8:04:0b:
7e:00:6a:61:49:43:68:43:89:32:e8:3f:b3:b1:b6:
9c:0b:46:ca:71:a2:fa:5c:41:11:e6:e2:b4:11:c1:
74:1e:72:01:5e:77:5d:d4:16:43:89:d3:68:fa:c9:
55:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F9:AF:F9:96:13:B5:DC:41:20:E6:E2:64:55:D3:4E:B5:D4:3C:CA
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/rPmv-ZYTtdxBIObiZFXTTrXUPMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.7.0/24
144.56.9.0/24
144.56.13.0/24
144.56.15.0/24
144.56.24.0/24
144.56.27.0/24
144.56.29.0/24
144.56.31.0/24
144.56.34.0/24
144.56.41.0/24
144.56.51.0/24
144.56.71.0-144.56.72.255
144.56.76.0/24
144.56.78.0/24
144.56.80.0/23
144.56.85.0-144.56.86.255
144.56.88.0/24
144.56.91.0/24
144.56.93.0-144.56.94.255
144.56.98.0/23
144.56.101.0-144.56.103.255
144.56.106.0-144.56.108.255
144.56.112.0/24
144.56.117.0-144.56.119.255
144.56.121.0-144.56.122.255
144.56.124.0-144.56.126.255
144.56.128.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:3a:ea:1f:3b:06:95:25:a7:82:e4:ff:33:13:44:51:1b:35:
2d:85:b4:d2:9d:3f:bd:d8:8b:2c:c7:f1:ba:08:60:8c:69:a4:
a8:35:76:e9:8c:fa:d3:41:a3:1c:83:fa:81:51:b4:fa:ad:93:
f4:c0:95:2a:1e:1f:a5:75:d9:12:32:5d:f6:ea:fc:3c:33:b5:
76:0d:3e:8d:a2:49:6c:d5:6a:62:5f:22:d9:a3:b8:4c:f0:a5:
8f:86:3b:4c:d2:ef:4e:2c:2f:61:9b:c1:dd:70:fd:16:bd:37:
54:b4:43:14:09:13:7d:d1:2e:2c:f2:f0:ef:d6:1c:fc:2b:b0:
83:c6:47:48:6b:a6:85:34:a6:23:19:82:c3:06:88:48:59:17:
3e:b9:c9:7b:8b:fc:fe:55:3b:a2:04:43:52:ff:d8:67:70:5e:
2b:c2:90:05:08:f7:da:5f:8d:ae:1a:26:32:43:49:52:f4:57:
de:ef:8d:77:0b:ea:48:d1:ca:74:07:e6:e5:37:34:af:00:5a:
88:fc:e3:68:73:5b:79:1a:6e:d2:b5:fe:f2:20:8f:28:c3:af:
a6:61:53:01:98:ed:e8:c8:28:86:8e:6a:a6:63:f9:2d:a1:a2:
45:21:fa:46:68:48:22:d3:46:01:ad:29:61:2c:fd:62:31:f8:
5e:d2:22:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:36:45 2026 by rpki-client