Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/YT9wjytAT5xPrOJL8NePaRpFhtA.roa
File: YT9wjytAT5xPrOJL8NePaRpFhtA.roa (raw, json)
Hash identifier: gUaJHgcMSRYWjqhF6K0pHVyX6mcCIJDcHqHD1PkGi9Y=
Subject key identifier: 61:3F:70:8F:2B:40:4F:9C:4F:AC:E2:4B:F0:D7:8F:69:1A:45:86:D0
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 01A0479F8BAE1896055B103B45DC350A6099
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/YT9wjytAT5xPrOJL8NePaRpFhtA.roa
Signing time: Fri 28 Aug 2026 09:07:13 +0000
ROA not before: Fri 28 Aug 2026 09:07:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212477
IP address blocks: 144.56.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 13:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:47:9f:8b:ae:18:96:05:5b:10:3b:45:dc:35:0a:60:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Aug 28 09:07:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=613f708f2b404f9c4face24bf0d78f691a4586d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:89:b5:69:e6:41:61:b9:95:3a:91:ba:e7:93:
6c:34:b3:af:d7:1e:1c:b3:62:08:34:2a:eb:74:35:
ba:19:e5:62:6e:aa:20:31:62:70:67:f3:1c:c6:fb:
87:a0:ae:cc:d9:17:b4:07:5b:c7:54:18:47:45:43:
45:1d:8f:43:1e:1e:dd:8d:b4:af:f7:50:0e:c8:0c:
21:31:8e:59:e2:de:40:ed:09:07:26:42:16:ea:a7:
2c:58:13:73:0d:62:e3:3d:fc:cd:d1:71:93:35:3f:
da:81:e5:48:13:75:33:2d:6c:9c:f6:1b:d8:ab:6f:
c7:33:7c:33:96:5d:7e:85:32:ff:68:11:7f:6c:55:
2c:5a:b5:35:14:23:30:88:d0:c1:99:38:55:ac:51:
82:2b:bf:8f:29:c6:b2:6f:01:80:50:c8:e8:8b:d0:
50:f7:5d:c9:aa:fa:08:41:eb:11:00:7e:f4:74:59:
b2:77:a6:9f:1a:a0:68:bc:18:d8:1c:bd:ac:75:be:
fd:52:5d:dc:1b:e2:f3:80:80:25:4b:51:83:ad:cc:
98:b1:31:52:19:b0:02:b9:f0:72:f0:cb:cd:ed:26:
5a:fe:1d:4e:98:42:01:ac:85:b5:bb:20:85:62:2f:
0e:d4:ab:35:46:c6:cc:cb:68:c9:24:32:46:19:b0:
3f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:3F:70:8F:2B:40:4F:9C:4F:AC:E2:4B:F0:D7:8F:69:1A:45:86:D0
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/YT9wjytAT5xPrOJL8NePaRpFhtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.105.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:93:9e:e9:8a:11:ee:02:2f:0c:8f:da:8d:10:47:b0:60:ec:
2a:ed:1c:98:4e:90:b8:d9:a9:d4:08:32:b3:01:73:ed:1b:07:
a1:c3:13:c6:df:0c:b4:43:5f:7d:af:1b:5e:8a:35:f3:80:aa:
e8:59:56:fb:68:f5:21:7d:cf:b9:d9:9d:82:26:59:06:db:bd:
eb:e9:95:d6:1b:a7:03:9f:8f:9b:70:34:67:ee:ee:53:e9:16:
b5:ab:e0:ce:a7:49:15:d0:a6:8d:2f:3c:55:da:e9:d4:d1:92:
f5:8a:2f:43:fb:1a:99:4d:6e:29:db:bd:9d:10:c3:50:43:2f:
30:dc:ec:b8:ea:31:60:a3:ea:f2:ae:ee:ff:46:c2:72:92:c4:
1c:ed:89:8c:fe:d8:8e:d7:55:4e:20:57:33:98:92:19:e8:d7:
92:cc:f4:08:11:dd:44:2f:b5:aa:d6:0c:91:77:c9:97:90:c0:
f0:74:4f:5d:25:c9:87:a7:84:d3:8f:95:0a:24:b1:7d:6d:2a:
c5:95:dc:17:52:17:d8:72:39:32:e3:4e:80:5a:3e:b2:ab:29:
d9:9c:50:fb:44:7b:4c:21:7d:28:2e:32:32:bb:a6:c6:c8:77:
21:06:03:4f:df:f8:72:98:c2:16:b7:8a:3d:b7:52:a4:05:71:
9a:a7:56:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:58:47 2026 by rpki-client