Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/aqiBrEg-iKFR9AZa1xcJa27xMh8.roa
File: aqiBrEg-iKFR9AZa1xcJa27xMh8.roa (raw, json)
Hash identifier: dBYZHrjqoynYw+4Tgz+CPKzSHIlth9jMY838qtkzwqI=
Subject key identifier: 6A:A8:81:AC:48:3E:88:A1:51:F4:06:5A:D7:17:09:6B:6E:F1:32:1F
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 019F24C342EA1DE728D86427E7AD38F5CFDB
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/aqiBrEg-iKFR9AZa1xcJa27xMh8.roa
Signing time: Thu 02 Jul 2026 21:36:44 +0000
ROA not before: Thu 02 Jul 2026 21:36:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 144.56.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:24:c3:42:ea:1d:e7:28:d8:64:27:e7:ad:38:f5:cf:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Jul 2 21:36:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6aa881ac483e88a151f4065ad717096b6ef1321f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:74:6f:bd:e2:59:33:32:e4:2c:ed:27:b6:13:
9f:e4:ce:bd:d5:12:a4:e8:34:d5:13:79:68:0f:b7:
fa:b1:7e:88:7e:ff:c3:1f:39:0b:3c:3d:ba:01:48:
b0:60:c4:4b:29:7a:2c:ef:f5:2b:ca:34:c4:5e:03:
19:d1:3a:ee:a8:b8:59:83:93:e5:4a:d6:9f:3a:b5:
6d:ae:64:d2:37:58:44:87:7d:9c:e1:ff:a1:ae:50:
07:9b:bd:7f:ed:8b:71:44:59:0c:1b:35:2c:3f:21:
20:f8:21:ca:00:f7:13:5b:18:14:cb:76:65:ed:5d:
44:5c:f8:b9:e5:3c:73:2a:4b:60:c5:bb:29:e9:86:
2e:6d:e0:80:a9:18:a5:29:48:49:ae:43:b6:07:42:
e1:db:d1:a5:54:37:b9:39:33:36:b5:5b:db:25:d9:
83:59:58:8f:58:8d:98:48:a8:36:33:14:59:83:a5:
5c:88:d4:92:c4:8c:33:16:19:0e:0e:1c:4f:f0:f2:
44:4c:8a:c6:25:17:33:72:aa:02:e2:2d:03:e2:3c:
2d:e6:7d:d5:b2:ae:c4:f6:22:be:96:1d:db:17:d0:
ae:bf:a8:fa:de:e3:22:10:14:d0:1d:26:82:98:c3:
57:81:ff:54:34:12:fc:fe:b9:8b:ab:4e:25:23:10:
fb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A8:81:AC:48:3E:88:A1:51:F4:06:5A:D7:17:09:6B:6E:F1:32:1F
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/aqiBrEg-iKFR9AZa1xcJa27xMh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.84.0/24
Signature Algorithm: sha256WithRSAEncryption
91:82:e6:92:b6:5e:a2:21:f3:63:c0:90:2d:67:f7:f4:b9:6c:
80:eb:c4:c9:6d:5f:03:a4:25:bc:65:a8:6f:c7:f6:43:6e:5c:
24:8e:e4:8c:36:cc:66:5b:27:ef:8e:e1:bd:51:94:f4:87:62:
4b:c9:db:5e:28:6e:5e:c0:43:c8:da:6e:9e:61:4f:71:1c:4e:
88:64:98:7b:c1:c7:1c:b2:b0:b8:04:89:ee:92:88:0e:25:74:
af:43:14:cf:c8:d7:3b:a0:b7:c1:5d:45:b1:24:34:a8:90:9a:
d0:4a:6a:02:f5:10:63:fa:8b:72:f1:d1:eb:c3:ae:15:ae:3c:
ab:33:56:47:19:a0:e7:4e:3a:0f:2a:8b:c4:39:b5:80:ad:d9:
6e:78:c1:39:4c:11:4c:c5:71:66:b6:73:ff:f4:3d:9d:73:ca:
77:cc:c3:d2:6d:d8:64:a2:a6:bb:54:b8:f6:05:b1:2c:cc:59:
4d:81:d3:fe:79:0e:f4:76:af:e4:33:46:a2:9d:32:9d:30:4e:
35:df:4d:7f:ed:86:f2:ed:f8:51:b4:a4:cb:88:cd:0b:a6:5c:
e7:83:51:21:63:56:9a:fc:63:99:0a:72:cf:de:76:48:18:c0:
32:96:e6:bb:c3:f8:f4:59:cf:73:c7:17:06:e2:01:c9:dd:94:
a0:54:e3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:45:16 2026 by rpki-client