Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/76jBSZXqoCLYuDx37Tg4k-XUZVs.roa
File: 76jBSZXqoCLYuDx37Tg4k-XUZVs.roa (raw, json)
Hash identifier: MscmAcdESi3fGqr0XkNp+WZ2R9GaWQ30ttgidFzjvE8=
Subject key identifier: EF:A8:C1:49:95:EA:A0:22:D8:B8:3C:77:ED:38:38:93:E5:D4:65:5B
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 0199390E3293070124D66E6A10675743FA6B
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/76jBSZXqoCLYuDx37Tg4k-XUZVs.roa
Signing time: Thu 11 Sep 2025 13:54:15 +0000
ROA not before: Thu 11 Sep 2025 13:54:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53356
IP address blocks: 144.56.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 08:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:39:0e:32:93:07:01:24:d6:6e:6a:10:67:57:43:fa:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Sep 11 13:54:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efa8c14995eaa022d8b83c77ed383893e5d4655b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a5:b4:7a:41:fe:88:47:a8:0f:09:8f:00:cd:
01:07:bc:86:fe:97:42:24:45:75:49:48:13:63:5e:
4b:fb:70:9c:be:a2:31:b2:d5:b9:c9:7b:a6:f4:4c:
46:19:79:5e:cc:5e:89:2a:a9:2d:af:89:f2:2e:4b:
32:ed:5c:c4:d3:4d:9c:cc:d4:1b:8e:86:ac:f1:5a:
16:fc:ee:90:50:d9:78:ad:e1:5f:be:42:a6:c4:e0:
fd:a1:84:e4:ab:8e:bc:a8:3a:0a:cb:33:e9:85:64:
da:5b:8d:94:55:bf:32:d1:7c:2a:db:98:56:84:06:
aa:a1:4e:f8:1b:f3:ed:76:aa:2d:10:47:3c:dd:c8:
22:da:c4:ee:54:41:1d:bb:23:9b:39:d2:67:27:61:
e0:c6:31:1e:cc:9d:95:50:44:28:98:a1:45:cd:f2:
a9:24:2d:07:c5:14:5f:e7:c9:e3:9c:43:92:65:b3:
64:70:ac:6a:e5:e3:62:5b:ad:83:cc:70:ab:f2:4f:
6c:cf:86:6b:5a:44:6e:83:f8:d8:59:fa:1e:d0:34:
c3:c6:97:fb:64:14:06:fc:ef:95:73:4a:2a:83:2b:
6f:c9:95:18:98:ce:30:5b:2b:21:62:0d:00:ce:29:
d0:dc:94:b1:d8:98:d6:68:38:58:7b:b7:e4:8c:8a:
24:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A8:C1:49:95:EA:A0:22:D8:B8:3C:77:ED:38:38:93:E5:D4:65:5B
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/76jBSZXqoCLYuDx37Tg4k-XUZVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.31.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:db:fb:48:5d:c7:6e:4a:be:1e:e8:d6:ee:46:73:da:02:ff:
83:27:4c:af:d7:ec:42:d8:26:d2:5e:53:72:7e:9d:99:8b:67:
47:01:13:a2:b8:e1:a4:0e:e4:a1:6e:2c:e2:1b:27:d1:82:e4:
6a:34:18:89:94:2c:d0:2c:01:ef:c6:f9:28:55:10:e9:e1:38:
1a:8d:fc:49:b9:08:b2:31:80:60:bf:83:75:ac:82:0d:60:47:
c3:ed:f7:1c:f3:75:f6:b0:0c:e8:35:8d:1e:86:21:76:6c:e1:
32:b1:01:86:57:e3:05:c9:14:f6:7f:30:8f:5f:56:30:69:a0:
4d:3a:22:81:d8:e5:12:66:1f:f9:e5:02:14:ef:73:50:35:34:
e7:dd:6b:c2:d1:39:cc:d6:9f:65:21:4c:bc:9d:43:02:3e:db:
75:a6:b0:e7:60:92:be:ef:a5:59:be:23:9b:e5:3f:e5:b1:d3:
7d:c8:43:06:f0:c1:ad:f7:a4:dc:e1:c7:f0:61:62:fd:6f:f3:
39:8e:a4:a2:3a:27:da:ce:f4:6e:0d:5f:39:6e:fc:ab:3d:52:
a3:f3:08:9a:b7:38:8b:45:8e:27:58:fe:44:9f:30:f9:96:a2:
27:c3:cd:3d:7e:8d:09:29:3c:29:28:78:bb:d9:2f:08:9e:20:
09:b3:e2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 15:13:47 2025 by rpki-client