Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/rsRNqWRJzQ3V1aoBKBx0__FfudY.roa
File: rsRNqWRJzQ3V1aoBKBx0__FfudY.roa (raw, json)
Hash identifier: o03gIgkgFKkVWOszmOOFbX6P7Fdr43ZfJ1ZJg4/EUa8=
Subject key identifier: AE:C4:4D:A9:64:49:CD:0D:D5:D5:AA:01:28:1C:74:FF:F1:5F:B9:D6
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 01A08AA1FFD4D466E07D060AE7F98A6A39D4
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/rsRNqWRJzQ3V1aoBKBx0__FfudY.roa
Signing time: Thu 10 Sep 2026 09:24:27 +0000
ROA not before: Thu 10 Sep 2026 09:24:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218955
IP address blocks: 144.56.17.0/24 maxlen: 24
144.56.35.0/24 maxlen: 24
144.56.36.0/24 maxlen: 24
144.56.97.0/24 maxlen: 24
144.56.100.0/24 maxlen: 24
144.56.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:a1:ff:d4:d4:66:e0:7d:06:0a:e7:f9:8a:6a:39:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Sep 10 09:24:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aec44da96449cd0dd5d5aa01281c74fff15fb9d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d3:03:02:ba:45:7b:56:3d:f2:a4:5c:8d:0d:
32:b4:ca:a3:e2:fd:42:16:e9:0f:1c:c2:68:bc:fd:
90:86:23:15:5c:35:18:11:cc:2a:cd:a0:9e:0d:3d:
f0:66:2a:cc:1e:c9:1a:12:60:c0:ac:40:2c:03:61:
e3:49:ab:9d:c2:8c:25:d8:a0:86:17:17:b1:71:ab:
9c:12:cb:0f:3a:e8:29:9f:31:fb:f0:f2:17:ba:4b:
a0:5c:8f:53:60:73:34:40:37:33:87:fe:be:57:2d:
2f:c9:c7:1c:f0:6e:4e:dd:77:3c:c2:ba:c5:d1:31:
82:9a:e5:3a:8c:e9:04:74:ca:a3:ad:87:6b:d9:6e:
96:c9:91:d5:5c:89:0d:92:03:e1:e5:94:83:cd:4b:
a2:44:84:1c:d8:eb:c3:1e:2a:62:cb:31:ea:13:f2:
0d:a3:0a:1a:5a:28:df:63:40:7e:a8:38:1b:f6:a5:
5d:98:28:70:aa:30:e7:4f:7b:dc:f0:73:be:76:6c:
2b:0c:e5:d5:28:6c:4b:84:c7:86:4c:e1:59:3f:7d:
1a:43:13:3c:e9:b7:01:48:1d:a7:d5:8b:ad:2e:75:
31:1b:cb:0c:66:39:5a:05:34:aa:a0:87:a7:f6:e8:
74:31:2e:82:02:6b:4a:cf:64:69:6e:1e:97:cb:fa:
e0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C4:4D:A9:64:49:CD:0D:D5:D5:AA:01:28:1C:74:FF:F1:5F:B9:D6
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/rsRNqWRJzQ3V1aoBKBx0__FfudY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.17.0/24
144.56.35.0-144.56.36.255
144.56.97.0/24
144.56.100.0/24
144.56.127.0/24
Signature Algorithm: sha256WithRSAEncryption
17:1b:e3:76:94:c6:d5:83:62:33:1c:16:b0:e0:a2:9d:70:1f:
1a:22:30:5c:8f:f9:ee:c1:7a:33:ff:c3:83:f6:04:97:5f:30:
2b:24:7c:b8:d0:5f:06:26:a6:04:88:5a:28:a3:42:fc:ac:24:
63:0b:6a:2d:79:cf:35:17:3d:48:67:8c:0b:9f:f8:20:2a:a7:
b1:c2:20:2c:57:88:49:07:1c:99:b1:43:70:e5:1e:cf:98:18:
1c:a0:e6:67:c8:05:b1:ce:dd:c2:c3:16:0e:00:16:81:c7:d8:
1d:3a:c1:68:90:d0:e3:0e:b9:8f:be:d9:a6:43:18:89:d8:7d:
d0:b8:4c:e0:80:29:a9:a0:d6:57:44:97:cb:ea:41:c2:b6:35:
87:4f:df:d6:a4:2e:89:00:30:24:8a:20:ce:01:77:42:41:fa:
19:42:68:0e:f8:95:f6:b5:4e:98:19:ea:75:16:d2:77:cf:c3:
6f:02:4f:b4:ae:e9:21:78:64:eb:07:97:8b:97:ab:d1:7d:7d:
a3:c7:21:f6:13:a8:3c:13:05:b7:1f:33:b7:24:e9:d4:19:71:
06:df:9a:75:10:8b:e7:70:86:b4:d0:04:1a:d5:6d:a6:c5:f0:
98:6a:a8:b3:c7:33:54:b2:10:f5:27:69:34:19:ed:70:e2:ba:
6b:c8:ff:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:48:33 2026 by rpki-client