Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/Acoq4jitf_5fEDQYiexOovKC2Mc.roa
File: Acoq4jitf_5fEDQYiexOovKC2Mc.roa (raw, json)
Hash identifier: Yl1CFzc7wL+2Wt59DLeOupL6Di9Uaiq7xD6LZGEQEHQ=
Subject key identifier: 01:CA:2A:E2:38:AD:7F:FE:5F:10:34:18:89:EC:4E:A2:F2:82:D8:C7
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 019FB286F0F45DE12E0E2712F2C53E9A9BE4
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/Acoq4jitf_5fEDQYiexOovKC2Mc.roa
Signing time: Thu 30 Jul 2026 10:16:55 +0000
ROA not before: Thu 30 Jul 2026 10:16:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 144.56.20.0/24 maxlen: 24
144.56.23.0/24 maxlen: 24
144.56.28.0/24 maxlen: 24
144.56.33.0/24 maxlen: 24
144.56.40.0/24 maxlen: 24
144.56.90.0/24 maxlen: 24
144.56.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b2:86:f0:f4:5d:e1:2e:0e:27:12:f2:c5:3e:9a:9b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Jul 30 10:16:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=01ca2ae238ad7ffe5f10341889ec4ea2f282d8c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6e:08:7b:04:60:52:fe:c2:df:86:93:ff:75:
0e:85:29:c5:fc:5f:85:62:1c:7b:6b:61:86:5b:8f:
ce:7e:5a:f9:86:f3:f2:b7:1a:a9:b2:1b:73:8e:9c:
f2:78:d5:86:8f:0d:4c:fb:34:a3:af:bd:62:73:b5:
ca:f9:36:d5:7b:6a:8f:4b:d1:ce:86:10:cf:c7:70:
4c:ec:9f:29:a7:65:2a:7f:10:0b:f5:24:26:6f:23:
9c:cb:3f:56:ec:9f:af:0a:ad:9c:16:c2:b4:17:b1:
80:c0:a0:e7:a9:14:60:5b:82:b3:7d:81:dc:1f:7d:
1c:eb:68:ee:d0:c6:57:62:28:5f:69:7b:0b:25:57:
af:cc:1a:7b:b0:c2:0e:5e:fe:d6:80:39:fd:b8:49:
53:a8:07:dc:e3:3f:51:bc:06:d4:26:ee:c5:ca:e2:
75:57:87:de:26:80:5e:5a:20:bb:8f:95:ca:94:82:
5d:2f:f5:61:15:36:02:bf:e1:cd:9b:5f:41:ea:54:
5a:46:f5:47:3f:05:1c:f9:9a:db:0b:e4:98:27:4a:
46:93:bd:16:63:6e:d6:cf:48:11:29:38:f2:53:5d:
2d:d3:99:cc:ff:64:12:9d:12:c6:ac:b6:9f:24:e6:
7a:2f:a8:35:f5:7f:df:7b:30:ab:ca:e6:c8:45:aa:
b8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:CA:2A:E2:38:AD:7F:FE:5F:10:34:18:89:EC:4E:A2:F2:82:D8:C7
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/Acoq4jitf_5fEDQYiexOovKC2Mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.20.0/24
144.56.23.0/24
144.56.28.0/24
144.56.33.0/24
144.56.40.0/24
144.56.90.0/24
144.56.110.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:2e:b9:3f:7d:3f:25:02:e6:78:c5:60:64:0d:4b:f3:7b:7f:
d5:ff:89:19:10:26:39:47:a7:14:7a:53:cd:5a:aa:57:a0:c5:
76:9c:f6:f4:7c:d0:3f:9d:0b:f1:64:a7:4c:53:6b:d0:8d:aa:
fc:aa:e0:ec:34:7d:57:89:31:3c:6b:bb:4d:42:6b:84:17:cc:
83:a8:87:dd:87:15:9d:5b:2a:59:17:9c:f0:07:7a:92:65:7d:
eb:18:b6:4f:41:cb:bf:d7:2c:60:bd:9e:34:e7:56:54:61:cf:
53:c9:08:eb:0b:25:82:e7:89:95:47:1f:f5:8e:63:34:c5:a4:
d2:1e:a8:2a:ee:47:d7:dc:de:9f:2a:5d:43:bc:a0:c2:d7:65:
92:a3:1d:72:88:a9:28:57:f4:b7:a3:f0:2b:40:ba:b3:6c:55:
c7:65:42:a1:31:18:8e:90:95:74:54:15:1e:86:1c:86:70:d3:
a3:8e:00:1c:fd:fc:c4:05:37:43:9c:ea:7a:1f:f9:b0:3e:38:
ac:16:b4:13:fa:c8:72:15:a0:0d:bf:bc:8b:fe:cb:42:16:27:
da:ab:f8:4f:e6:30:32:ab:04:3c:46:10:96:6a:de:59:ee:b3:
f8:cf:2f:41:8e:8c:7a:dc:6c:1f:ff:68:1d:2b:6a:d9:52:d8:
e2:4e:1e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 14:19:22 2026 by rpki-client