Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/ESAyRf8eCSEm_rFd5qFR1fvBQ1I.roa
File: ESAyRf8eCSEm_rFd5qFR1fvBQ1I.roa (raw, json)
Hash identifier: 5D2JPM6YCo3RHKFvC/AUDCqTZOXgPitNu0n/ZesB9ag=
Subject key identifier: 11:20:32:45:FF:1E:09:21:26:FE:B1:5D:E6:A1:51:D5:FB:C1:43:52
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 0199F028F161E0CF900F0B6D56F6856AB0E1
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/ESAyRf8eCSEm_rFd5qFR1fvBQ1I.roa
Signing time: Fri 17 Oct 2025 03:13:59 +0000
ROA not before: Fri 17 Oct 2025 03:13:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9304
IP address blocks: 144.56.13.0/24 maxlen: 24
144.56.23.0/24 maxlen: 24
144.56.36.0/24 maxlen: 24
144.56.38.0/24 maxlen: 24
144.56.40.0/24 maxlen: 24
144.56.76.0/24 maxlen: 24
144.56.94.0/24 maxlen: 24
144.56.95.0/24 maxlen: 24
144.56.97.0/24 maxlen: 24
144.56.98.0/24 maxlen: 24
144.56.106.0/24 maxlen: 24
144.56.108.0/24 maxlen: 24
144.56.117.0/24 maxlen: 24
144.56.118.0/24 maxlen: 24
144.56.119.0/24 maxlen: 24
144.56.125.0/24 maxlen: 24
144.56.126.0/24 maxlen: 24
144.56.127.0/24 maxlen: 24
144.56.128.0/24 maxlen: 24
144.56.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 09:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f0:28:f1:61:e0:cf:90:0f:0b:6d:56:f6:85:6a:b0:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Oct 17 03:13:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11203245ff1e092126feb15de6a151d5fbc14352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:56:96:89:ce:c4:7c:cc:fb:e4:64:ec:25:42:
7c:3f:e2:f6:54:9d:ad:5e:ba:d8:cb:e5:ed:c6:b0:
88:b7:78:b0:cc:02:7d:59:a3:d0:ca:28:27:2f:a4:
7e:a2:cc:2e:9d:4b:b1:b8:c1:f6:0d:6c:40:1e:1a:
c0:e6:df:22:48:99:fc:0e:9c:7e:02:3a:df:df:ab:
da:68:b2:87:f1:e1:a6:88:9b:e6:22:80:ad:ac:8d:
b9:aa:56:60:eb:be:71:b8:c6:20:87:39:32:de:50:
a1:32:51:0b:59:ca:60:57:fe:66:08:27:5f:3f:01:
4f:29:40:8d:b1:37:79:03:3a:9c:4b:d2:f1:b2:bf:
83:d4:27:3d:5a:55:a3:e0:f7:4c:31:56:c1:87:f5:
10:e7:f4:3b:1f:ef:49:cc:6b:08:98:55:9e:6e:9f:
de:83:6f:cf:88:7a:29:6a:5c:93:b9:28:a1:99:cc:
d0:6b:f4:f2:b8:cc:bb:69:79:e6:87:50:fb:b1:32:
a5:c8:90:d5:8a:08:d0:60:75:31:4a:72:b1:82:0f:
1e:23:09:04:58:92:c5:1f:a4:ff:9a:70:7c:ed:0f:
38:8f:9d:65:a8:a1:f6:98:1e:d1:4d:ec:5b:05:d9:
44:e4:56:af:0f:cb:ea:43:4c:d2:58:fd:f6:01:01:
25:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:20:32:45:FF:1E:09:21:26:FE:B1:5D:E6:A1:51:D5:FB:C1:43:52
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/ESAyRf8eCSEm_rFd5qFR1fvBQ1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.13.0/24
144.56.23.0/24
144.56.36.0/24
144.56.38.0/24
144.56.40.0/24
144.56.76.0/24
144.56.94.0/23
144.56.97.0-144.56.98.255
144.56.106.0/24
144.56.108.0/24
144.56.117.0-144.56.119.255
144.56.125.0-144.56.129.255
Signature Algorithm: sha256WithRSAEncryption
7c:72:55:d6:2c:b7:30:bf:8a:43:b6:9d:fd:85:4e:a6:c3:12:
0e:05:d7:21:8c:df:d0:b2:8a:03:35:f8:11:ba:56:5d:59:c0:
e7:12:de:8a:84:50:e6:a5:f2:85:e0:90:54:c8:43:47:e4:fb:
eb:b1:08:14:2c:e8:26:02:15:e6:65:05:8e:5e:2e:0b:c1:d3:
10:9a:01:e0:c0:54:fc:01:c7:fc:e1:eb:70:df:53:6c:28:d7:
07:51:c5:20:30:2b:b8:6a:63:b5:82:87:cf:b6:04:0f:4a:cd:
5d:a8:c5:f7:44:03:58:73:3b:74:f5:a7:05:32:12:66:24:9c:
14:9a:27:28:17:9b:4b:7b:47:a2:e9:0a:7d:eb:5b:de:3e:99:
9f:a0:31:17:07:6e:4c:02:cd:a9:88:d7:0f:f4:60:aa:56:cd:
44:f2:aa:39:54:e2:53:7e:c0:81:49:7d:69:dd:35:88:5f:6a:
d0:a4:17:3f:5d:f6:8a:4f:16:0b:45:0c:9a:ac:5a:d0:c6:72:
6b:b7:0a:f0:25:e2:65:89:1e:27:66:fb:24:f6:23:68:49:74:
77:d2:34:ea:0a:0c:cb:14:87:5e:69:29:08:f7:af:25:df:f6:
d0:cf:c1:fe:e6:b8:29:8c:f1:35:fc:ec:9f:3b:cd:c8:04:71:
62:41:3f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:34:29 2025 by rpki-client