Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/d2KfiOCFI_CHiAtNAM6oRrogzts.roa
File: d2KfiOCFI_CHiAtNAM6oRrogzts.roa (raw, json)
Hash identifier: aGnK5W2VWJxKvb8pA/bvp+T8gfh4IxqlBIoaRp1QR/M=
Subject key identifier: 77:62:9F:88:E0:85:23:F0:87:88:0B:4D:00:CE:A8:46:BA:20:CE:DB
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 019F24C34295190947F094DEB47D2A0EB488
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/d2KfiOCFI_CHiAtNAM6oRrogzts.roa
Signing time: Thu 02 Jul 2026 21:36:44 +0000
ROA not before: Thu 02 Jul 2026 21:36:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 144.56.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:24:c3:42:95:19:09:47:f0:94:de:b4:7d:2a:0e:b4:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Jul 2 21:36:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=77629f88e08523f087880b4d00cea846ba20cedb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d9:16:31:83:49:34:08:c4:2b:e4:b6:29:48:
74:69:93:8b:51:ca:2b:9e:08:cc:04:e0:8a:c7:f2:
c8:66:14:76:3d:6c:ea:5a:14:e3:b3:9a:cb:ae:16:
8e:06:71:e5:d6:d7:1b:90:5c:fe:15:25:a5:e4:33:
b0:f2:9e:26:13:31:98:86:c9:a3:b9:7c:69:9d:04:
a6:5c:86:e3:7c:ac:d6:69:12:94:00:c7:15:47:66:
7c:d5:39:a9:cf:81:04:2a:13:e6:09:6b:31:8e:eb:
06:3f:a6:dc:cb:6b:da:ba:fe:eb:10:4d:67:e1:1e:
f8:2d:71:13:a3:1b:45:d9:ab:4d:8a:8e:f3:0d:19:
1e:40:b9:db:35:67:0a:93:01:83:b1:59:e8:9f:bf:
f0:52:05:0e:48:c8:67:ce:1f:11:6b:c7:db:16:ea:
d9:0e:dd:f7:c3:79:5a:6a:78:af:23:5f:53:05:74:
26:38:fa:4b:a4:81:c3:f1:5d:36:d0:e5:5d:cc:e6:
9d:f9:0f:eb:64:c3:ad:1f:b0:f1:d3:32:a3:81:dc:
c6:80:7c:8c:3f:0c:60:c5:79:e5:15:e3:11:b1:69:
64:0e:8d:e5:9d:7f:56:05:5d:33:08:44:b7:b9:76:
3e:13:65:f6:11:47:2c:57:5c:26:d9:26:81:b8:69:
87:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:62:9F:88:E0:85:23:F0:87:88:0B:4D:00:CE:A8:46:BA:20:CE:DB
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/d2KfiOCFI_CHiAtNAM6oRrogzts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.114.0/24
Signature Algorithm: sha256WithRSAEncryption
14:6f:ec:dc:04:7b:fb:e3:7b:03:d4:d9:6b:27:e8:97:de:cf:
ae:73:f6:ee:b0:12:8a:43:66:f4:8c:bf:5d:89:99:be:d8:e9:
ab:c8:22:89:61:39:69:e5:e0:17:3b:9e:d8:40:52:75:1c:67:
39:a1:7e:fc:7f:10:ec:8c:42:c0:2f:5c:64:8d:16:bf:9a:32:
97:09:6f:31:1e:f5:eb:16:f6:5d:81:10:ec:66:6c:f4:60:58:
63:ed:dc:99:23:39:a1:11:d9:ac:ee:df:91:31:35:14:c9:37:
f5:eb:5b:c8:16:30:ba:e8:ad:f4:8f:a9:5c:61:90:02:5c:86:
68:2e:17:a8:71:b2:5d:87:6c:46:7c:46:c7:46:a4:c4:3b:b1:
02:9b:97:06:e5:de:c3:90:01:3b:df:d7:38:e7:2e:fb:56:22:
ec:54:19:94:a8:41:b2:ea:fd:40:ad:45:f3:96:13:be:25:77:
a3:7b:23:98:b8:05:cb:6e:bc:02:5a:02:19:0c:7f:dd:87:45:
ef:05:b0:9f:7c:af:87:9e:10:aa:2c:6c:25:e6:90:c8:94:a2:
14:21:87:f8:7f:06:50:ba:03:52:2b:50:5f:e1:87:30:41:95:
22:55:18:0a:b3:8f:50:f7:ed:0b:56:ea:40:71:fd:1a:e0:4e:
d8:aa:7e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:45:52 2026 by rpki-client