Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/hs3fngFJt1NiocNCIA7qGPYWsTU.roa
File: hs3fngFJt1NiocNCIA7qGPYWsTU.roa (raw, json)
Hash identifier: ToEvpANK+Yu0KXslqAyftUZpThJvK58TLmLx0aI2m1A=
Subject key identifier: 86:CD:DF:9E:01:49:B7:53:62:A1:C3:42:20:0E:EA:18:F6:16:B1:35
Certificate issuer: /CN=519d802caf9aa8f427f1dd08556c89995f0478d1
Certificate serial: 019F86919145B2CA7B812299A7E51A503D2B
Authority key identifier: 51:9D:80:2C:AF:9A:A8:F4:27:F1:DD:08:55:6C:89:99:5F:04:78:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/hs3fngFJt1NiocNCIA7qGPYWsTU.roa
Signing time: Tue 21 Jul 2026 21:25:14 +0000
ROA not before: Tue 21 Jul 2026 21:25:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401434
IP address blocks: 143.246.50.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 18:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:91:91:45:b2:ca:7b:81:22:99:a7:e5:1a:50:3d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=519d802caf9aa8f427f1dd08556c89995f0478d1
Validity
Not Before: Jul 21 21:25:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=86cddf9e0149b75362a1c342200eea18f616b135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3d:57:47:61:ff:48:46:53:2c:53:26:fb:d6:
ed:72:f6:eb:c4:c5:b3:13:73:2d:0f:cd:99:76:e5:
f1:ad:61:aa:07:70:10:ba:a9:3c:6d:ae:85:df:38:
11:37:23:cf:a3:0d:d2:10:77:d5:7d:1f:dc:9f:90:
82:4a:07:ed:84:84:e4:89:5b:a8:71:21:a4:7a:72:
95:db:19:0d:d6:91:a7:74:d8:fe:a8:24:cb:6f:6f:
d0:aa:86:ab:fa:97:51:13:2f:43:b5:22:72:8c:24:
86:07:3e:76:82:b9:5f:4d:99:45:27:d5:23:2d:09:
4e:6d:a6:1e:6d:45:58:df:e8:ae:75:03:d5:e9:a2:
40:d6:51:a2:fd:b9:1e:d6:1b:7a:61:e5:21:ed:a3:
ca:4b:cf:28:74:de:8e:1a:ca:81:72:5b:17:aa:e3:
1a:bb:90:d4:de:af:bb:0e:2c:0e:9a:17:62:78:ef:
a3:4d:e5:73:1e:5d:2c:10:db:e8:01:15:0e:ff:36:
69:b4:f6:8f:b1:cd:5c:6e:bf:3f:d4:55:8e:51:4a:
a4:f7:67:40:2f:96:a5:88:ba:61:2e:3f:5d:06:56:
a8:cf:8f:42:fc:0a:bd:fc:10:00:75:6d:59:22:58:
5b:c7:c2:59:22:d2:2e:fb:4c:a9:be:8c:2f:57:85:
4a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CD:DF:9E:01:49:B7:53:62:A1:C3:42:20:0E:EA:18:F6:16:B1:35
X509v3 Authority Key Identifier:
keyid:51:9D:80:2C:AF:9A:A8:F4:27:F1:DD:08:55:6C:89:99:5F:04:78:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/hs3fngFJt1NiocNCIA7qGPYWsTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.246.50.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:53:77:3f:ba:24:31:b8:d1:76:10:f9:c3:c3:62:65:95:37:
e5:03:02:e6:16:04:c3:34:a5:8b:02:9f:3b:52:a3:2d:15:6a:
be:52:e5:be:74:79:c1:12:97:fe:f9:c6:68:77:b4:2f:53:38:
23:8a:96:8f:52:f2:28:e3:d0:ee:cd:94:97:06:12:86:f0:c9:
bf:8a:ba:c0:2d:65:da:aa:4d:fe:0f:72:6b:4d:58:03:fc:e1:
cc:34:a2:ab:55:29:f1:f4:a6:cb:7f:93:24:1e:8a:d5:d0:40:
9a:c9:a2:9a:6b:7e:79:95:b0:4d:f2:01:12:4a:45:8f:62:56:
64:64:4e:85:46:b6:d7:c9:ab:07:da:79:bd:74:a9:c7:40:58:
18:3d:0c:7b:e5:2f:98:7f:f1:9c:9d:cb:37:b8:d6:aa:18:5b:
7f:7f:31:f4:2d:da:9b:b4:83:95:1f:1d:ef:0b:b8:d5:2d:ee:
b8:cd:85:14:93:b6:13:35:f1:6c:ea:d6:84:76:e6:c1:24:43:
06:9e:19:3e:df:40:29:f3:e1:1c:a3:b9:fc:6f:80:98:2d:87:
e6:6d:13:9b:64:42:f3:79:51:83:2b:8f:79:c5:54:5e:21:62:
7b:03:2a:07:be:f7:d3:9d:9e:e0:98:04:cc:e9:e9:a7:67:32:
7a:8f:cd:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:23:23 2026 by rpki-client