Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/vqt0rbfV8plKXwzHwFkLCkR8uiU.roa
File: vqt0rbfV8plKXwzHwFkLCkR8uiU.roa (raw, json)
Hash identifier: apnoW6LOIW0vxspzq8aNFUezbLoCqM0NLgJLIAYc5MA=
Subject key identifier: BE:AB:74:AD:B7:D5:F2:99:4A:5F:0C:C7:C0:59:0B:0A:44:7C:BA:25
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 019D5F4589FAF479A1B2BEF96C9E7E725ECA
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/vqt0rbfV8plKXwzHwFkLCkR8uiU.roa
Signing time: Sun 05 Apr 2026 20:11:25 +0000
ROA not before: Sun 05 Apr 2026 20:11:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 144.56.7.0/24 maxlen: 24
144.56.9.0/24 maxlen: 24
144.56.13.0/24 maxlen: 24
144.56.17.0/24 maxlen: 24
144.56.20.0/24 maxlen: 24
144.56.23.0/24 maxlen: 24
144.56.24.0/24 maxlen: 24
144.56.27.0/24 maxlen: 24
144.56.29.0/24 maxlen: 24
144.56.31.0/24 maxlen: 24
144.56.33.0/24 maxlen: 24
144.56.34.0/24 maxlen: 24
144.56.40.0/24 maxlen: 24
144.56.41.0/24 maxlen: 24
144.56.51.0/24 maxlen: 24
144.56.71.0/24 maxlen: 24
144.56.72.0/24 maxlen: 24
144.56.76.0/24 maxlen: 24
144.56.80.0/24 maxlen: 24
144.56.81.0/24 maxlen: 24
144.56.85.0/24 maxlen: 24
144.56.86.0/24 maxlen: 24
144.56.88.0/24 maxlen: 24
144.56.91.0/24 maxlen: 24
144.56.93.0/24 maxlen: 24
144.56.94.0/24 maxlen: 24
144.56.95.0/24 maxlen: 24
144.56.97.0/24 maxlen: 24
144.56.98.0/24 maxlen: 24
144.56.99.0/24 maxlen: 24
144.56.100.0/24 maxlen: 24
144.56.101.0/24 maxlen: 24
144.56.102.0/24 maxlen: 24
144.56.103.0/24 maxlen: 24
144.56.105.0/24 maxlen: 24
144.56.106.0/24 maxlen: 24
144.56.107.0/24 maxlen: 24
144.56.108.0/24 maxlen: 24
144.56.112.0/24 maxlen: 24
144.56.117.0/24 maxlen: 24
144.56.118.0/24 maxlen: 24
144.56.119.0/24 maxlen: 24
144.56.121.0/24 maxlen: 24
144.56.122.0/24 maxlen: 24
144.56.124.0/24 maxlen: 24
144.56.125.0/24 maxlen: 24
144.56.126.0/24 maxlen: 24
144.56.127.0/24 maxlen: 24
144.56.128.0/24 maxlen: 24
144.56.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:5f:45:89:fa:f4:79:a1:b2:be:f9:6c:9e:7e:72:5e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Apr 5 20:11:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=beab74adb7d5f2994a5f0cc7c0590b0a447cba25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e2:af:7f:42:89:29:9c:3a:ff:8b:60:95:34:
d9:d4:39:b8:05:4c:35:6a:c7:23:cf:e6:87:59:95:
b1:ff:ae:26:f4:d1:39:03:86:82:8c:60:35:40:67:
79:50:be:99:11:2c:f9:fa:ad:12:0f:25:b9:ce:f8:
d0:0f:9e:5c:17:6d:d9:d1:35:6d:52:e2:d8:b8:98:
94:4e:7a:f5:1a:11:57:22:48:09:f9:98:1e:2d:34:
4c:02:5d:bf:d8:03:81:ed:10:14:ce:fc:2d:b7:8c:
0a:17:77:5b:8c:2c:75:36:75:7e:c4:40:4c:a0:50:
41:0a:f1:c2:81:79:8e:15:3a:94:a7:4a:71:89:d4:
12:80:08:c9:76:95:5f:79:82:d1:83:0b:30:21:2a:
02:fd:2d:d7:b5:5c:95:0d:84:d5:0d:4b:7e:80:ec:
ce:8f:53:c7:a5:ec:8a:c5:b9:b6:d8:d5:35:cb:aa:
d0:fd:d9:0e:47:14:62:87:b3:30:dd:31:8b:d8:54:
f8:43:98:f7:ce:a7:e3:63:e6:31:5a:06:58:d7:19:
5d:c9:72:d1:7e:ab:14:d0:2d:cb:3d:3e:d9:01:ec:
7b:b0:60:9e:94:e6:02:ad:c9:55:52:4e:6a:ce:91:
96:55:28:86:04:aa:3b:d3:66:21:ed:d4:ad:d9:57:
22:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:AB:74:AD:B7:D5:F2:99:4A:5F:0C:C7:C0:59:0B:0A:44:7C:BA:25
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/vqt0rbfV8plKXwzHwFkLCkR8uiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.7.0/24
144.56.9.0/24
144.56.13.0/24
144.56.17.0/24
144.56.20.0/24
144.56.23.0-144.56.24.255
144.56.27.0/24
144.56.29.0/24
144.56.31.0/24
144.56.33.0-144.56.34.255
144.56.40.0/23
144.56.51.0/24
144.56.71.0-144.56.72.255
144.56.76.0/24
144.56.80.0/23
144.56.85.0-144.56.86.255
144.56.88.0/24
144.56.91.0/24
144.56.93.0-144.56.95.255
144.56.97.0-144.56.103.255
144.56.105.0-144.56.108.255
144.56.112.0/24
144.56.117.0-144.56.119.255
144.56.121.0-144.56.122.255
144.56.124.0-144.56.129.255
Signature Algorithm: sha256WithRSAEncryption
cf:74:92:e9:6c:c5:fc:1e:e9:f9:ac:c7:c3:9e:5c:ec:02:4f:
52:f7:f8:51:6e:1e:52:bd:36:cf:1b:52:3b:12:2a:87:5d:19:
7c:55:bf:55:a5:46:5d:51:55:a4:5e:f7:a8:d6:8d:d7:65:e0:
97:4c:be:2d:f1:8f:97:94:ea:c4:2d:76:e0:ff:49:ab:d0:4a:
da:de:e6:04:50:6d:f2:1a:b7:f4:a2:cc:27:5f:58:01:f2:3f:
0a:2c:0f:36:58:53:ae:34:b3:2e:bd:5c:06:0e:06:81:8e:c0:
30:98:2e:a8:89:4d:6e:f8:0d:51:e0:ce:49:81:f0:a7:89:15:
ef:49:15:2b:a0:d5:6a:c5:cf:f3:10:c8:a9:e5:ed:47:c1:01:
3d:9f:0f:e6:f4:b9:4e:28:7b:c9:44:0f:46:20:f7:72:ae:72:
1c:58:62:ec:f2:93:57:8b:f1:bf:df:cf:4c:59:7d:e0:12:f2:
8c:73:0d:b5:62:54:96:3c:56:bd:1a:d9:49:a1:89:74:07:9d:
ea:2a:0e:33:53:5f:8d:32:03:e5:b9:3f:b5:13:42:b5:35:b5:
38:81:c6:1d:90:c5:db:fc:23:ec:4d:bd:67:5c:8c:5c:40:9f:
7b:b2:46:78:84:e9:68:8b:22:dd:ff:9f:77:80:d6:b8:1b:a2:
8c:74:d9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:37:43 2026 by rpki-client