Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/jxrjdm-h63xIjMHa3FGlkmExi5Q.roa
File: jxrjdm-h63xIjMHa3FGlkmExi5Q.roa (raw, json)
Hash identifier: QfbjjP0vtTt/tsuWMHXRNCzoIklVIlWSgjk/oiVX/Q4=
Subject key identifier: 8F:1A:E3:76:6F:A1:EB:7C:48:8C:C1:DA:DC:51:A5:92:61:31:8B:94
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 019916641E5DC401A72396F6909960243A6C
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/jxrjdm-h63xIjMHa3FGlkmExi5Q.roa
Signing time: Thu 04 Sep 2025 20:21:23 +0000
ROA not before: Thu 04 Sep 2025 20:21:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214143
IP address blocks: 144.56.43.0/24 maxlen: 24
144.56.45.0/24 maxlen: 24
144.56.46.0/24 maxlen: 24
144.56.47.0/24 maxlen: 24
144.56.48.0/24 maxlen: 24
144.56.52.0/24 maxlen: 24
144.56.53.0/24 maxlen: 24
144.56.73.0/24 maxlen: 24
144.56.75.0/24 maxlen: 24
144.56.77.0/24 maxlen: 24
144.56.82.0/24 maxlen: 24
144.56.87.0/24 maxlen: 24
144.56.92.0/24 maxlen: 24
144.56.96.0/24 maxlen: 24
144.56.104.0/24 maxlen: 24
144.56.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:64:1e:5d:c4:01:a7:23:96:f6:90:99:60:24:3a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Sep 4 20:21:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f1ae3766fa1eb7c488cc1dadc51a59261318b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:93:3a:57:f7:1e:89:59:63:05:82:f3:0d:2a:
fb:19:9b:88:0d:b3:4f:66:e1:e2:e7:0f:1f:c1:33:
cf:f6:57:1b:8a:24:b9:41:cc:d8:e5:44:10:cd:6a:
51:68:1b:3b:1b:55:8c:31:be:19:64:b2:51:15:18:
f3:29:42:5a:c6:2e:79:2d:24:06:fd:a8:0c:f6:a9:
00:99:39:f5:d8:3f:48:55:09:ed:df:b0:68:57:8a:
4f:4d:8d:5a:a1:9b:c6:c5:46:6b:61:12:7a:d5:76:
e6:cf:73:ab:5d:47:91:73:13:8c:b3:d6:50:00:b5:
d0:9f:69:a6:4e:73:95:da:bb:1a:cc:e4:63:f5:df:
52:57:4c:f9:30:c8:63:b5:65:da:0a:34:72:8b:da:
97:bd:ed:c9:3c:38:e0:33:bf:6a:f5:24:ee:18:85:
6a:73:2b:2f:b8:38:7e:7a:1f:b2:6e:b0:16:d1:ef:
af:3b:1f:37:ca:96:d1:1e:6e:f1:a4:fc:67:a2:21:
31:96:79:43:59:1e:9c:23:ce:06:bc:f4:4f:02:6b:
4b:b2:17:c7:23:06:fa:f5:0e:03:74:77:44:26:16:
a1:df:61:10:f8:70:f3:16:cb:30:48:09:0d:ab:e3:
fa:c2:68:ab:e3:c3:26:5b:41:52:c4:29:69:7e:82:
4f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:1A:E3:76:6F:A1:EB:7C:48:8C:C1:DA:DC:51:A5:92:61:31:8B:94
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/jxrjdm-h63xIjMHa3FGlkmExi5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.43.0/24
144.56.45.0-144.56.48.255
144.56.52.0/23
144.56.73.0/24
144.56.75.0/24
144.56.77.0/24
144.56.82.0/24
144.56.87.0/24
144.56.92.0/24
144.56.96.0/24
144.56.104.0/24
144.56.123.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:5c:02:a6:08:d5:de:0f:af:c3:db:dd:8d:bb:ac:2a:70:1a:
cb:b9:99:b3:d8:43:6a:9a:38:be:20:11:89:c6:a8:f6:8d:75:
cf:e7:b2:47:2c:6a:68:bc:a8:dc:95:7f:bd:36:3f:5b:7c:b6:
e3:c0:a4:61:11:aa:50:a5:25:f9:65:ae:f8:e9:e5:95:e8:c5:
80:6c:57:ad:9c:dc:13:c6:87:2a:aa:02:2b:8d:4f:39:2e:ed:
81:bd:75:2a:9c:63:8c:98:c7:f6:1e:05:ea:0a:4e:df:3d:24:
50:f0:ea:e5:16:d0:6d:ac:29:d2:2b:77:c9:c2:d2:99:58:3d:
e1:ed:a6:c3:72:25:c1:f0:9d:98:09:b6:6a:6d:91:a3:12:9a:
67:4a:8d:b7:d9:81:18:7e:e6:6c:2d:a5:dc:bf:41:62:90:82:
ba:a4:45:c7:d6:08:c1:c1:fa:4e:c4:d0:b2:19:d4:d8:3a:e6:
ab:e4:1c:7b:cb:b2:0f:b7:3e:91:29:58:e5:7f:4f:f7:d8:3d:
35:fa:aa:7d:30:16:85:a0:8d:9e:75:1f:a3:f3:6b:57:d5:e6:
9e:df:34:08:62:bd:72:f9:4f:f8:81:01:da:a2:28:9b:9e:c8:
bc:3f:16:c2:ec:11:f5:02:f4:52:41:cc:eb:53:9f:4f:56:19:
3f:4d:05:9d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgISAZkWZB5dxAGnI5b2kJlgJDpsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MDU1ODAxYjc3NWU3NzQzMDYzMjE0NTVmZDQ2M2ZiZDky
NzNjNGMwHhcNMjUwOTA0MjAyMTIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjFhZTM3NjZmYTFlYjdjNDg4Y2MxZGFkYzUxYTU5MjYxMzE4Yjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpM6V/ceiVljBYLzDSr7GZuIDbNP
ZuHi5w8fwTPP9lcbiiS5QczY5UQQzWpRaBs7G1WMMb4ZZLJRFRjzKUJaxi55LSQG
/agM9qkAmTn12D9IVQnt37BoV4pPTY1aoZvGxUZrYRJ61Xbmz3OrXUeRcxOMs9ZQ
ALXQn2mmTnOV2rsazORj9d9SV0z5MMhjtWXaCjRyi9qXve3JPDjgM79q9STuGIVq
cysvuDh+eh+ybrAW0e+vOx83ypbRHm7xpPxnoiExlnlDWR6cI84GvPRPAmtLshfH
Iwb69Q4DdHdEJhah32EQ+HDzFsswSAkNq+P6wmir48MmW0FSxClpfoJPDwIDAQAB
o4ICUzCCAk8wHQYDVR0OBBYEFI8a43Zvoet8SIzB2txRpZJhMYuUMB8GA1UdIwQY
MBaAFBYFWAG3ded0MGMhRV/UY/vZJzxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgt
MTM1NzE3ZWYzODhhLzEvanhyamRtLWg2M3hJak1IYTNGR2xrbUV4aTVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgtMTM1NzE3ZWYzODhh
LzEvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGkGCCsGAQUFBwEHAQH/BFowWDBWBAIAATBQAwQAkDgrMAwD
BACQOC0DBACQODADBAGQODQDBACQOEkDBACQOEsDBACQOE0DBACQOFIDBACQOFcD
BACQOFwDBACQOGADBACQOGgDBACQOHswDQYJKoZIhvcNAQELBQADggEBAMhcAqYI
1d4Pr8Pb3Y27rCpwGsu5mbPYQ2qaOL4gEYnGqPaNdc/nskcsami8qNyVf702P1t8
tuPApGERqlClJfllrvjp5ZXoxYBsV62c3BPGhyqqAiuNTzku7YG9dSqcY4yYx/Ye
BeoKTt89JFDw6uUW0G2sKdIrd8nC0plYPeHtpsNyJcHwnZgJtmptkaMSmmdKjbfZ
gRh+5mwtpdy/QWKQgrqkRcfWCMHB+k7E0LIZ1Ng65qvkHHvLsg+3PpEpWOV/T/fY
PTX6qn0wFoWgjZ51H6Pza1fV5p7fNAhivXL5T/iBAdqiKJueyLw/FsLsEfUC9FJB
zOtTn09WGT9NBZ0=
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:41:51 2025 by rpki-client