Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/plJYxIK0uTSpo5nZGzrS9dTvMjs.roa
File: plJYxIK0uTSpo5nZGzrS9dTvMjs.roa (raw, json)
Hash identifier: mXzNxEKcjNdbVuEa3wi+IEpVoTR2mdx8i3sCA1w+QxI=
Subject key identifier: A6:52:58:C4:82:B4:B9:34:A9:A3:99:D9:1B:3A:D2:F5:D4:EF:32:3B
Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c
Certificate serial: 01A0F69D9AD2EB3BED2BCEF05E77E7A1C0DF
Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/plJYxIK0uTSpo5nZGzrS9dTvMjs.roa
Signing time: Thu 01 Oct 2026 08:38:38 +0000
ROA not before: Thu 01 Oct 2026 08:38:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 144.56.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:9d:9a:d2:eb:3b:ed:2b:ce:f0:5e:77:e7:a1:c0:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16055801b775e774306321455fd463fbd9273c4c
Validity
Not Before: Oct 1 08:38:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a65258c482b4b934a9a399d91b3ad2f5d4ef323b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:08:28:06:33:32:1f:f6:57:e2:60:18:85:d1:
48:4c:67:74:28:58:d6:f6:4f:f1:03:a4:0a:3e:c1:
84:e0:19:58:5f:09:b7:80:c2:3d:02:74:5f:4b:13:
55:84:b3:cb:fc:6b:7c:81:b0:88:22:e0:55:9d:04:
79:d0:da:94:d4:3c:ce:b2:8f:1d:0a:bb:28:c7:77:
0f:4d:55:7a:23:01:02:47:f5:77:11:d4:6d:1c:40:
ee:ee:3e:a5:96:a0:c0:2d:72:80:74:12:84:61:9f:
3c:d0:8f:a9:8d:16:8c:a1:b4:b0:c0:23:30:59:d7:
8b:b4:ef:03:b3:45:b2:38:32:1e:74:a4:05:34:9b:
68:a6:92:8c:ff:d3:a4:0e:de:4b:3f:a4:32:0d:5e:
ac:82:6a:bf:a7:9b:71:f6:e0:30:05:0d:8d:51:1f:
ad:9f:e5:6f:da:3d:59:38:b3:a1:86:ba:24:38:5b:
27:84:45:df:8b:fb:44:19:6b:96:4f:f7:5f:6b:fe:
2c:5c:3e:15:4b:30:56:25:8c:52:c0:0f:37:a0:ae:
77:99:1e:e8:f4:0c:6c:95:88:d8:73:5c:22:cd:a9:
4d:f7:11:78:b7:a1:76:31:ce:75:fb:08:18:9c:2a:
55:4e:6b:6a:7b:d9:14:66:0f:bf:99:86:48:d4:8f:
08:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:52:58:C4:82:B4:B9:34:A9:A3:99:D9:1B:3A:D2:F5:D4:EF:32:3B
X509v3 Authority Key Identifier:
keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/plJYxIK0uTSpo5nZGzrS9dTvMjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.56.115.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:55:c9:f0:1a:fe:95:31:ef:d6:d2:b0:28:dd:98:8d:cb:ba:
f7:96:e6:54:7a:ee:38:22:7b:b2:ef:fa:1a:c0:c3:7a:c3:f3:
9b:b4:d4:33:6d:4f:2c:4d:91:3f:a8:71:31:3b:43:90:d3:3d:
6b:98:f6:14:37:2a:1f:a1:a8:fb:fe:b4:9a:08:2d:5b:30:5a:
25:60:2d:ae:a8:32:7e:87:a7:32:51:b0:03:ba:29:a0:8c:5f:
09:d0:9b:25:a7:22:4c:ad:95:e9:2d:24:11:dd:b6:46:d0:06:
0b:38:eb:72:a4:58:2e:b8:68:28:4f:5d:2b:2e:e4:b2:c8:20:
7e:0f:24:84:75:d9:f0:e7:5b:22:75:86:c5:93:06:1b:ef:a1:
dc:49:4d:45:bc:18:e6:be:05:b5:69:ae:7b:72:8d:27:3a:20:
b7:67:6b:23:82:de:7b:39:78:2d:ec:62:95:a2:18:eb:68:6e:
20:1b:c0:1e:47:98:9f:25:47:c9:66:85:f6:6d:12:6d:04:d7:
a0:de:c9:ee:9b:32:d6:80:5d:64:67:fb:d5:d4:3e:69:b3:58:
f9:54:cb:cd:23:03:86:3e:04:b7:9d:52:da:82:e6:40:bf:ce:
20:cd:26:74:c2:bb:c4:b3:5b:94:71:a4:3d:97:cc:ca:bf:32:
8e:08:c0:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:23:54 2026 by rpki-client