Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/tu3hGRkBbSBQ--nqT5wdg-lVn3Y.roa
File: tu3hGRkBbSBQ--nqT5wdg-lVn3Y.roa (raw, json)
Hash identifier: GOHAj03XK7r6uHKyuAW9rpoOeyK5T9KDx1ewuKony44=
Subject key identifier: B6:ED:E1:19:19:01:6D:20:50:FB:E9:EA:4F:9C:1D:83:E9:55:9F:76
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 0197C25950709808842BA87D0BF694E34CB8
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/tu3hGRkBbSBQ--nqT5wdg-lVn3Y.roa
Signing time: Mon 30 Jun 2025 19:38:42 +0000
ROA not before: Mon 30 Jun 2025 19:38:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212609
IP address blocks: 144.56.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:59:50:70:98:08:84:2b:a8:7d:0b:f6:94:e3:4c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Jun 30 19:38:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6ede11919016d2050fbe9ea4f9c1d83e9559f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:26:cf:ed:a7:88:df:87:54:d2:92:4c:54:09:
08:27:f6:97:ee:a2:6e:c2:52:28:2b:91:82:6f:20:
94:21:f2:a0:56:ad:73:23:d4:96:7f:74:a9:1c:ec:
55:ee:a7:b1:a9:97:1f:75:d9:af:59:81:d7:f8:91:
ee:f5:47:11:f6:de:6d:ca:d8:ac:91:b5:c5:23:16:
66:0e:37:eb:44:73:28:f2:e7:09:f5:c2:63:4d:08:
a8:39:20:cd:d0:e7:6a:ce:4f:ab:65:e2:79:4c:74:
14:2c:7d:51:5e:f9:77:c1:77:fb:f6:02:71:67:eb:
7c:66:cf:bc:17:fb:f3:33:1e:0e:7c:91:53:48:2d:
2d:72:42:9f:4f:d2:3d:27:cf:0e:15:42:9a:aa:d1:
08:b6:71:68:ea:7e:6f:c8:98:46:8b:c2:0a:3d:3e:
b4:b3:89:92:58:46:29:52:12:fa:76:c0:c5:5e:8c:
ec:22:04:24:bd:ab:56:24:ef:5b:b7:8f:43:e3:4b:
88:ab:d0:e6:2b:9a:17:29:97:9c:51:d2:74:98:7f:
a4:45:fb:32:08:54:58:9a:c6:8d:f2:40:2f:16:e3:
3e:0a:48:60:f5:63:64:02:f8:44:cc:97:49:98:cf:
86:1f:35:26:10:0f:fb:bf:09:f2:e2:e3:75:90:c1:
24:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:ED:E1:19:19:01:6D:20:50:FB:E9:EA:4F:9C:1D:83:E9:55:9F:76
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/tu3hGRkBbSBQ--nqT5wdg-lVn3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.49.0/24
Signature Algorithm: sha256WithRSAEncryption
66:cd:0d:3a:04:d9:2a:32:0c:ce:68:c4:c6:72:57:42:e3:5b:
25:5d:0a:86:67:76:2d:c3:db:81:9e:6c:8f:ef:50:58:14:db:
40:d5:4e:d1:93:22:f9:e7:59:34:0a:78:73:9b:95:a0:89:84:
88:50:cf:9d:36:97:9d:48:e1:ee:c2:98:af:9d:d6:02:46:13:
52:d5:4c:62:d7:89:4e:21:af:37:4d:10:b5:14:81:6a:b5:8c:
53:dc:d4:ed:a7:cf:8e:ed:21:0c:11:ef:a5:af:5e:b8:f4:b0:
d5:43:04:90:66:d9:41:9b:de:51:24:6c:17:09:29:19:b5:78:
c2:91:33:1e:b2:11:b9:2c:aa:81:45:94:aa:9c:e6:03:6b:29:
bf:df:b9:61:bd:30:81:35:e2:02:a3:c7:a4:62:65:e7:d3:bc:
0a:cc:c6:fc:78:95:05:61:a9:45:66:d0:15:0d:a7:b2:3e:69:
c6:86:66:41:0f:e2:75:7e:23:aa:7e:48:00:1c:a5:20:dc:c5:
e2:8a:d7:37:c8:9c:fa:e9:b2:a4:3d:7c:ff:a0:7c:f2:d1:e6:
89:de:bb:4a:d4:ac:8e:c4:71:56:bd:37:ec:f4:df:e2:6a:53:
98:b4:30:fd:bc:34:41:80:2c:21:94:a6:62:a7:8b:2d:32:1e:
10:69:a8:f6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZfCWVBwmAiEK6h9C/aU40y4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MDU1ODAxYjc3NWU3NzQzMDYzMjE0NTVmZDQ2M2ZiZDky
NzNjNGMwHhcNMjUwNjMwMTkzODQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNmVkZTExOTE5MDE2ZDIwNTBmYmU5ZWE0ZjljMWQ4M2U5NTU5Zjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSbP7aeI34dU0pJMVAkIJ/aX7qJu
wlIoK5GCbyCUIfKgVq1zI9SWf3SpHOxV7qexqZcfddmvWYHX+JHu9UcR9t5tytis
kbXFIxZmDjfrRHMo8ucJ9cJjTQioOSDN0Odqzk+rZeJ5THQULH1RXvl3wXf79gJx
Z+t8Zs+8F/vzMx4OfJFTSC0tckKfT9I9J88OFUKaqtEItnFo6n5vyJhGi8IKPT60
s4mSWEYpUhL6dsDFXozsIgQkvatWJO9bt49D40uIq9DmK5oXKZecUdJ0mH+kRfsy
CFRYmsaN8kAvFuM+Ckhg9WNkAvhEzJdJmM+GHzUmEA/7vwny4uN1kMEkdQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLbt4RkZAW0gUPvp6k+cHYPpVZ92MB8GA1UdIwQY
MBaAFBYFWAG3ded0MGMhRV/UY/vZJzxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgt
MTM1NzE3ZWYzODhhLzEvdHUzaEdSa0JiU0JRLS1ucVQ1d2RnLWxWbjNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgtMTM1NzE3ZWYzODhh
LzEvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkDgxMA0G
CSqGSIb3DQEBCwUAA4IBAQBmzQ06BNkqMgzOaMTGcldC41slXQqGZ3Ytw9uBnmyP
71BYFNtA1U7RkyL551k0Cnhzm5WgiYSIUM+dNpedSOHuwpivndYCRhNS1Uxi14lO
Ia83TRC1FIFqtYxT3NTtp8+O7SEMEe+lr1649LDVQwSQZtlBm95RJGwXCSkZtXjC
kTMeshG5LKqBRZSqnOYDaym/37lhvTCBNeICo8ekYmXn07wKzMb8eJUFYalFZtAV
DaeyPmnGhmZBD+J1fiOqfkgAHKUg3MXiitc3yJz66bKkPXz/oHzy0eaJ3rtK1KyO
xHFWvTfs9N/ialOYtDD9vDRBgCwhlKZip4stMh4Qaaj2
-----END CERTIFICATE-----
Generated at Mon Jul 21 08:05:11 2025 by rpki-client