Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/2k2CRIU9sl2OnhQy9QWhyP6qwqU.roa
File: 2k2CRIU9sl2OnhQy9QWhyP6qwqU.roa (raw, json)
Hash identifier: WW3RLHscFsXOzU4ZcuOg1+Icd8xHi6eeArqgrFBdzhs=
Subject key identifier: DA:4D:82:44:85:3D:B2:5D:8E:9E:14:32:F5:05:A1:C8:FE:AA:C2:A5
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 01A172A210BF7FCEA82EE48A4F41275648FA
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/2k2CRIU9sl2OnhQy9QWhyP6qwqU.roa
Signing time: Sun 25 Oct 2026 10:36:26 +0000
ROA not before: Sun 25 Oct 2026 10:36:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218797
IP address blocks: 144.56.38.0/24 maxlen: 24
144.56.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 14:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:a2:10:bf:7f:ce:a8:2e:e4:8a:4f:41:27:56:48:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Oct 25 10:36:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da4d8244853db25d8e9e1432f505a1c8feaac2a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:94:77:7b:1a:25:cc:66:8f:8f:82:1b:28:66:
90:9c:21:7f:6d:98:a1:29:2e:51:02:56:6d:4c:f7:
b7:02:91:05:1a:12:29:cd:bd:97:2c:07:f5:fc:9b:
d2:94:02:be:db:1b:bc:10:50:a7:4c:c1:9b:f8:4e:
de:f7:3d:fe:c8:01:ff:aa:39:de:f5:4e:37:ed:ef:
cd:0c:8e:4c:c6:7b:33:7c:13:69:c2:34:2d:14:a2:
88:80:70:1c:4d:75:90:05:33:25:94:63:7d:42:40:
74:6e:32:c9:b7:49:b1:54:48:91:7e:67:a3:62:4f:
01:16:2f:0f:7d:76:24:b9:d8:8b:1a:8c:8e:ad:b7:
f3:06:24:d9:75:58:16:ca:46:78:21:32:a1:1d:ca:
99:56:1f:0c:bf:78:e5:ec:5b:cf:8b:e0:8e:9e:4e:
3c:79:32:cf:6b:6d:40:24:c6:e6:7e:57:3a:e9:7b:
84:32:df:8e:cf:35:ac:28:1a:60:9b:51:15:f0:2e:
04:9c:98:bd:a2:b9:61:d7:b4:f2:77:4e:d5:31:f7:
ca:aa:41:17:9d:a7:18:f1:62:1c:eb:de:b5:0c:8c:
d0:4e:b5:bd:c1:86:03:cb:9e:ce:6d:f1:b1:45:99:
f6:5c:40:b2:0f:f2:de:42:4a:20:a5:d8:c4:19:d1:
19:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4D:82:44:85:3D:B2:5D:8E:9E:14:32:F5:05:A1:C8:FE:AA:C2:A5
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/2k2CRIU9sl2OnhQy9QWhyP6qwqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.38.0/24
144.56.100.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:53:43:1b:66:e4:4f:81:8a:64:ad:61:26:59:f4:3b:6b:80:
bb:5c:cd:41:12:82:fc:5c:41:c1:a8:1b:d5:a0:e1:65:70:74:
0e:ff:60:c8:b8:1a:39:06:e9:23:51:71:34:8f:d1:6d:51:86:
57:6d:36:6e:2a:fb:a2:f2:8d:0a:4f:5e:63:0d:5a:00:41:40:
47:f9:46:dc:b3:ee:a0:95:f9:69:67:bd:f0:36:de:fb:17:bd:
ce:cf:16:f6:d8:10:5d:e3:50:0e:a4:ed:07:ad:60:61:6c:cc:
35:9f:b2:e4:30:7b:29:c7:0d:c4:fc:c5:a4:17:ca:3f:77:35:
b9:0c:59:32:71:90:e4:34:07:19:a4:50:a8:9e:d2:94:f2:23:
83:b1:62:7c:5f:8e:43:37:f1:c2:57:f4:f9:4d:fa:f8:77:6f:
3e:3d:35:8f:fe:49:14:a3:92:33:de:f7:a8:6f:66:af:19:60:
69:75:af:ec:ac:e2:f5:dc:9b:09:48:3c:86:0e:9f:2d:7f:c8:
bb:0a:47:8b:51:b0:1a:0d:79:cf:dd:91:2e:95:da:c0:7c:f0:
0e:4a:c2:e6:a6:d7:d7:9b:62:f0:32:8d:cc:54:5a:cc:66:74:
c6:d9:32:ce:bd:e0:a4:3d:4f:03:4b:5d:bf:18:42:97:cc:75:
f5:1a:c0:6f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaFyohC/f86oLuSKT0EnVkj6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MDU1ODAxYjc3NWU3NzQzMDYzMjE0NTVmZDQ2M2ZiZDky
NzNjNGMwHhcNMjYxMDI1MTAzNjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTRkODI0NDg1M2RiMjVkOGU5ZTE0MzJmNTA1YTFjOGZlYWFjMmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5R3exolzGaPj4IbKGaQnCF/bZih
KS5RAlZtTPe3ApEFGhIpzb2XLAf1/JvSlAK+2xu8EFCnTMGb+E7e9z3+yAH/qjne
9U437e/NDI5MxnszfBNpwjQtFKKIgHAcTXWQBTMllGN9QkB0bjLJt0mxVEiRfmej
Yk8BFi8PfXYkudiLGoyOrbfzBiTZdVgWykZ4ITKhHcqZVh8Mv3jl7FvPi+COnk48
eTLPa21AJMbmflc66XuEMt+OzzWsKBpgm1EV8C4EnJi9orlh17Tyd07VMffKqkEX
nacY8WIc6961DIzQTrW9wYYDy57ObfGxRZn2XECyD/LeQkogpdjEGdEZMwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNpNgkSFPbJdjp4UMvUFocj+qsKlMB8GA1UdIwQY
MBaAFBYFWAG3ded0MGMhRV/UY/vZJzxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgt
MTM1NzE3ZWYzODhhLzEvMmsyQ1JJVTlzbDJPbmhReTlRV2h5UDZxd3FVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgtMTM1NzE3ZWYzODhh
LzEvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAkDgmAwQA
kDhkMA0GCSqGSIb3DQEBCwUAA4IBAQDXU0MbZuRPgYpkrWEmWfQ7a4C7XM1BEoL8
XEHBqBvVoOFlcHQO/2DIuBo5BukjUXE0j9FtUYZXbTZuKvui8o0KT15jDVoAQUBH
+Ubcs+6glflpZ73wNt77F73Ozxb22BBd41AOpO0HrWBhbMw1n7LkMHspxw3E/MWk
F8o/dzW5DFkycZDkNAcZpFContKU8iODsWJ8X45DN/HCV/T5Tfr4d28+PTWP/kkU
o5Iz3veob2avGWBpda/srOL13JsJSDyGDp8tf8i7CkeLUbAaDXnP3ZEuldrAfPAO
SsLmptfXm2LwMo3MVFrMZnTG2TLOveCkPU8DS12/GEKXzHX1GsBv
-----END CERTIFICATE-----
Generated at Thu Nov 5 01:49:29 2026 by rpki-client