Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/NVG3gQx-M4fHtifzv7Gyok8fpcc.roa
File: NVG3gQx-M4fHtifzv7Gyok8fpcc.roa (raw, json)
Hash identifier: /yXcKa69rk23MJXdzFX1OFbHvmWVWxkOlwFrDG248nc=
Subject key identifier: 35:51:B7:81:0C:7E:33:87:C7:B6:27:F3:BF:B1:B2:A2:4F:1F:A5:C7
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 019F24C25849E9416090822A4DE3C347690A
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/NVG3gQx-M4fHtifzv7Gyok8fpcc.roa
Signing time: Thu 02 Jul 2026 21:35:44 +0000
ROA not before: Thu 02 Jul 2026 21:35:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214143
IP address blocks: 144.56.8.0/24 maxlen: 24
144.56.10.0/24 maxlen: 24
144.56.11.0/24 maxlen: 24
144.56.19.0/24 maxlen: 24
144.56.25.0/24 maxlen: 24
144.56.26.0/24 maxlen: 24
144.56.30.0/24 maxlen: 24
144.56.32.0/24 maxlen: 24
144.56.42.0/24 maxlen: 24
144.56.43.0/24 maxlen: 24
144.56.45.0/24 maxlen: 24
144.56.46.0/24 maxlen: 24
144.56.47.0/24 maxlen: 24
144.56.48.0/24 maxlen: 24
144.56.52.0/24 maxlen: 24
144.56.53.0/24 maxlen: 24
144.56.54.0/24 maxlen: 24
144.56.73.0/24 maxlen: 24
144.56.74.0/24 maxlen: 24
144.56.75.0/24 maxlen: 24
144.56.77.0/24 maxlen: 24
144.56.82.0/24 maxlen: 24
144.56.87.0/24 maxlen: 24
144.56.91.0/24 maxlen: 24
144.56.92.0/24 maxlen: 24
144.56.95.0/24 maxlen: 24
144.56.96.0/24 maxlen: 24
144.56.104.0/24 maxlen: 24
144.56.109.0/24 maxlen: 24
144.56.112.0/24 maxlen: 24
144.56.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 12:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:24:c2:58:49:e9:41:60:90:82:2a:4d:e3:c3:47:69:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Jul 2 21:35:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3551b7810c7e3387c7b627f3bfb1b2a24f1fa5c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b1:cf:c2:07:d5:01:c6:e0:1b:fa:46:ae:93:
41:a7:eb:23:2e:ae:a1:45:4f:f2:f7:08:09:6d:c0:
08:12:f7:26:a5:f4:55:97:eb:81:05:e0:46:62:b6:
a9:15:0b:bf:42:0f:90:81:a5:24:a4:b1:92:50:c3:
d0:d6:6a:9d:4e:04:cd:78:94:83:c7:99:70:28:f8:
ae:ac:80:e3:be:1c:b3:fe:73:7e:72:a8:d2:e6:32:
58:47:f7:b4:e3:6f:30:e7:bb:82:17:2d:53:50:98:
79:31:1b:26:75:5f:d8:1d:36:62:df:a0:a6:62:e3:
2b:54:93:a7:c6:32:a6:df:0b:79:81:17:c1:46:99:
27:aa:01:28:64:61:1a:65:bb:2d:63:63:86:ae:e0:
50:a5:d7:c2:a6:55:3c:8a:b9:8d:03:b1:2e:90:6a:
33:f2:5e:cb:59:98:e1:69:46:94:2c:b8:29:03:47:
0e:22:72:82:84:ce:0a:cc:ba:51:55:97:15:ba:7d:
43:1a:93:c4:b9:89:c8:df:bc:f4:fa:5b:6e:44:00:
ef:0f:e2:d7:55:2b:7a:14:bc:4d:b9:19:dc:46:c7:
28:3b:b6:e1:09:98:d4:68:13:69:fb:14:cf:8c:bb:
77:f9:92:29:8f:06:b8:2f:a6:98:d9:2b:e8:4a:30:
91:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:51:B7:81:0C:7E:33:87:C7:B6:27:F3:BF:B1:B2:A2:4F:1F:A5:C7
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/NVG3gQx-M4fHtifzv7Gyok8fpcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.8.0/24
144.56.10.0/23
144.56.19.0/24
144.56.25.0-144.56.26.255
144.56.30.0/24
144.56.32.0/24
144.56.42.0/23
144.56.45.0-144.56.48.255
144.56.52.0-144.56.54.255
144.56.73.0-144.56.75.255
144.56.77.0/24
144.56.82.0/24
144.56.87.0/24
144.56.91.0-144.56.92.255
144.56.95.0-144.56.96.255
144.56.104.0/24
144.56.109.0/24
144.56.112.0/24
144.56.123.0/24
Signature Algorithm: sha256WithRSAEncryption
54:ba:e6:42:4a:5c:7b:78:b1:af:b4:08:9d:63:03:dd:85:1f:
28:b2:15:02:57:06:22:5d:63:4f:27:9e:fc:41:ef:11:b0:7d:
3f:f8:23:f1:d5:c9:96:3f:ea:43:01:66:c4:5e:0d:f7:c5:ef:
1b:17:de:97:97:79:cb:56:59:ef:65:94:21:47:0d:fa:a4:90:
b0:de:4b:1c:1c:76:e8:0a:aa:ae:a5:28:18:e8:59:c7:d0:0f:
67:35:6a:2d:91:d4:ee:e0:78:dc:20:95:27:9f:e9:71:43:e0:
d7:bf:08:ad:d2:18:1a:31:21:52:63:e0:8c:fa:ac:fb:62:24:
a5:b5:28:f2:a1:8e:78:ce:69:f9:28:70:76:ac:0f:ed:93:b9:
76:00:a7:aa:6d:d7:6a:97:8e:7f:6d:37:42:90:61:eb:f8:82:
57:b0:07:0c:31:54:a6:be:75:4e:79:35:4c:b5:b8:35:72:b8:
23:92:8d:69:80:7a:71:c9:65:4a:81:2c:3b:a8:f9:41:93:99:
22:65:ed:bb:1b:2e:f0:64:5e:76:5e:18:f1:1f:38:0e:de:8c:
06:e6:df:04:17:14:2f:a6:74:a9:9c:79:3f:0f:ba:46:ce:3f:
a5:61:d7:f0:f4:11:c6:b8:77:04:a2:1b:83:86:9c:fd:fb:0f:
1b:3a:cc:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 19:14:53 2026 by rpki-client