Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/TVciBvbG1XVG5ssHlr4AadQK2fk.roa
File: TVciBvbG1XVG5ssHlr4AadQK2fk.roa (raw, json)
Hash identifier: QwF4SWXY6yBXWUo8zo5vTIE9qB3GoAOkQodC/dlqVwc=
Subject key identifier: 4D:57:22:06:F6:C6:D5:75:46:E6:CB:07:96:BE:00:69:D4:0A:D9:F9
Certificate issuer: /CN=519d802caf9aa8f427f1dd08556c89995f0478d1
Certificate serial: 019F869190CB6AF0070AD1912AEDBBB74C6B
Authority key identifier: 51:9D:80:2C:AF:9A:A8:F4:27:F1:DD:08:55:6C:89:99:5F:04:78:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/TVciBvbG1XVG5ssHlr4AadQK2fk.roa
Signing time: Tue 21 Jul 2026 21:25:14 +0000
ROA not before: Tue 21 Jul 2026 21:25:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202662
IP address blocks: 143.246.48.0/20 maxlen: 24
143.246.50.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:91:90:cb:6a:f0:07:0a:d1:91:2a:ed:bb:b7:4c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=519d802caf9aa8f427f1dd08556c89995f0478d1
Validity
Not Before: Jul 21 21:25:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d572206f6c6d57546e6cb0796be0069d40ad9f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:43:b8:12:62:72:ae:5d:4a:dd:30:bf:d9:aa:
50:99:97:87:ef:6a:7c:33:23:9f:8d:0f:74:9e:99:
0c:ca:ba:1b:16:e1:a2:63:f9:c8:af:7c:c9:a4:69:
cf:34:74:53:64:e5:b1:8f:6f:e1:23:8c:9b:e2:d6:
58:a5:64:18:12:78:7f:c5:33:00:a4:f4:ce:0c:bd:
79:d2:b5:66:f9:66:12:27:03:e4:ca:d1:d4:15:a0:
03:16:06:47:23:14:ab:12:45:75:1e:db:c7:dd:58:
2b:9a:d7:f6:22:5e:60:81:ae:bb:f2:ce:bf:6f:84:
a5:fc:da:23:45:7c:94:c2:32:2c:05:33:a6:bc:59:
6a:e3:1b:a8:c2:24:1c:66:e2:62:2a:ed:27:4c:0c:
90:4e:25:26:4c:ea:61:27:66:a3:22:d6:ef:4e:fd:
da:1f:eb:0c:db:4a:fc:50:3c:8c:56:c6:ab:18:8f:
d7:03:e7:4e:1e:8e:f7:1c:f8:e8:f5:25:eb:e8:97:
fb:2c:32:f9:a5:ce:00:bd:d7:43:21:3f:a9:c7:ee:
b6:91:db:db:77:56:f8:c6:93:67:26:d4:ec:1d:d9:
74:de:84:7c:f8:e4:34:4a:1c:b2:76:6c:83:67:3c:
71:3e:4c:ab:9b:b0:0a:28:ed:3d:c7:d1:ff:a4:3b:
d9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:57:22:06:F6:C6:D5:75:46:E6:CB:07:96:BE:00:69:D4:0A:D9:F9
X509v3 Authority Key Identifier:
keyid:51:9D:80:2C:AF:9A:A8:F4:27:F1:DD:08:55:6C:89:99:5F:04:78:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/TVciBvbG1XVG5ssHlr4AadQK2fk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.246.48.0/20
Signature Algorithm: sha256WithRSAEncryption
62:8b:47:36:94:c5:14:96:b5:65:67:c2:6d:88:53:0f:a9:01:
2f:c0:b6:32:e5:f4:36:36:7d:57:7a:e2:60:bc:9e:d5:89:33:
09:a7:62:54:49:f2:51:c9:a0:c1:17:d7:d2:90:f9:59:dc:af:
e2:9c:94:7d:ec:55:9e:c0:5b:d4:5e:17:14:c8:95:da:71:a7:
15:0a:78:de:30:f7:02:5f:34:4d:63:60:f4:f3:d7:80:8c:f2:
28:28:08:95:7f:4e:22:bf:4d:7a:b4:2e:eb:c9:ef:7b:31:bf:
80:2f:09:a7:8d:7c:cb:e8:16:2e:e4:ee:15:3b:ca:d2:40:f8:
75:ee:5c:71:6f:6d:b3:70:e1:5c:32:03:a7:33:f0:4f:9b:9a:
a4:7d:6b:3b:4f:f2:46:d4:a8:ea:ec:13:01:6e:f5:78:46:ce:
d3:6b:61:a9:6f:dc:8a:50:df:3f:1e:2c:04:7e:2a:59:2a:48:
cc:31:5d:6c:d5:e7:4f:38:03:c4:14:3c:85:1b:b0:03:e8:09:
1d:c9:95:9d:c4:ca:ab:09:90:78:cd:0b:5c:a6:45:46:c9:4f:
50:f3:b4:78:a6:c9:47:d1:76:bd:00:34:3a:0f:e9:67:da:c7:
63:8d:60:25:0e:a4:15:62:df:b8:e9:11:e3:d0:ac:bc:eb:c7:
90:ee:f5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:25:15 2026 by rpki-client