Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/VrA43_lENWCEq5e-EJkTnsrrads.roa
File: VrA43_lENWCEq5e-EJkTnsrrads.roa (raw, json)
Hash identifier: 7iv9/Y9JLmuanA9gvQkMgB5xXNxOffJsR8spN772f4Q=
Subject key identifier: 56:B0:38:DF:F9:44:35:60:84:AB:97:BE:10:99:13:9E:CA:EB:69:DB
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 0199CE88D5EB86FC77A544BF406F562420F1
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/VrA43_lENWCEq5e-EJkTnsrrads.roa
Signing time: Fri 10 Oct 2025 14:31:38 +0000
ROA not before: Fri 10 Oct 2025 14:31:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 984
IP address blocks: 144.56.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ce:88:d5:eb:86:fc:77:a5:44:bf:40:6f:56:24:20:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Oct 10 14:31:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56b038dff944356084ab97be1099139ecaeb69db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fb:0a:96:19:7d:54:0b:8a:d3:a2:79:0b:27:
70:29:67:08:10:15:82:a2:44:60:73:59:a2:1c:a6:
0f:98:c1:59:b3:48:05:db:e7:0e:84:5a:6c:28:7d:
09:2d:49:7c:84:d9:75:81:1d:0f:e3:74:45:d5:1d:
af:33:fc:a9:bb:73:49:e7:88:e1:ee:f1:fb:e1:7e:
29:aa:82:fe:1d:18:5d:17:84:65:bf:49:2e:7a:e9:
5c:95:4c:cd:1a:02:59:40:cd:82:b6:b5:65:b6:da:
28:f4:81:54:1f:7d:43:e8:bb:a0:c5:e9:22:0f:f0:
b8:38:95:b6:a7:3b:86:e7:8a:b4:35:96:be:0a:85:
a8:36:63:20:77:cd:14:3a:cb:5d:33:af:39:5c:ed:
ef:91:5d:95:2a:8a:3f:91:07:67:9c:15:2b:41:d6:
06:e1:82:81:7f:8b:b6:33:51:56:32:a2:4a:5c:63:
8a:d0:a6:c5:b3:0b:1c:a1:1a:4d:83:f1:95:d6:ba:
35:54:5a:70:59:f5:b8:33:76:aa:e2:45:a3:e8:f8:
e8:2e:c7:0c:5b:ae:a2:ae:4b:96:71:36:fc:4c:f6:
d3:7a:3e:c1:49:1e:95:e3:7c:d5:36:6b:11:9c:ee:
c5:75:05:19:25:84:08:a3:7a:41:4b:fd:15:78:ad:
ed:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B0:38:DF:F9:44:35:60:84:AB:97:BE:10:99:13:9E:CA:EB:69:DB
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/VrA43_lENWCEq5e-EJkTnsrrads.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.20.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:f8:ec:bf:e4:5d:fc:0b:0b:c0:c0:d8:0b:53:c3:3b:76:b5:
04:67:61:5b:0a:18:5b:4d:51:e0:9b:83:e0:04:b0:00:7b:de:
1e:a7:af:57:f9:21:5a:a9:ae:9b:e5:54:a9:2a:a2:6a:97:5b:
ce:93:b0:d6:e4:f2:95:5f:01:e1:ad:80:e2:3e:32:45:c9:a3:
fc:44:21:70:98:ca:aa:0e:8c:c1:9f:dd:17:66:e6:41:a2:20:
3c:59:2a:7a:5d:fb:8f:cf:e6:75:d7:2d:d8:24:fe:14:0f:56:
86:a8:5a:a4:62:a0:05:c7:21:39:b3:c5:c2:ee:cc:75:40:31:
ce:24:79:dd:89:5b:46:30:46:d2:1e:5d:3b:3e:3c:bd:99:ce:
14:c6:ea:82:d5:65:1a:a5:b1:fe:a5:f9:c9:45:ee:a1:52:56:
e9:cf:91:2f:9f:6f:dc:a5:08:8d:1e:dd:3a:32:55:78:6e:fc:
3e:92:95:2c:08:a7:cd:dd:1c:76:d7:ce:f2:b1:3b:e4:25:fe:
96:6e:bf:96:db:16:64:7a:07:b0:d7:13:9b:4b:2f:a0:4b:f2:
e4:94:cd:19:ab:f9:0e:6d:19:82:a6:17:17:21:90:02:ae:a2:
00:59:26:7b:9a:a5:1c:90:66:17:82:e0:5f:ac:7f:f9:19:f8:
22:0c:a3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 16:05:33 2025 by rpki-client