Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/slPI9aN-JbfbvX_GY814pCJ8UFA.roa
File: slPI9aN-JbfbvX_GY814pCJ8UFA.roa (raw, json)
Hash identifier: EeGAyjsGw6lAKae9brKTE8ngKeD+Md25/vDKFnzwqig=
Subject key identifier: B2:53:C8:F5:A3:7E:25:B7:DB:BD:7F:C6:63:CD:78:A4:22:7C:50:50
Certificate issuer: /CN=519d802caf9aa8f427f1dd08556c89995f0478d1
Certificate serial: 019F8696235CF07C0588406283E06589DEF1
Authority key identifier: 51:9D:80:2C:AF:9A:A8:F4:27:F1:DD:08:55:6C:89:99:5F:04:78:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/slPI9aN-JbfbvX_GY814pCJ8UFA.roa
Signing time: Tue 21 Jul 2026 21:30:14 +0000
ROA not before: Tue 21 Jul 2026 21:30:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 17433
IP address blocks: 143.246.48.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:96:23:5c:f0:7c:05:88:40:62:83:e0:65:89:de:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=519d802caf9aa8f427f1dd08556c89995f0478d1
Validity
Not Before: Jul 21 21:30:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b253c8f5a37e25b7dbbd7fc663cd78a4227c5050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:18:20:59:e6:bf:e4:c3:46:f7:f5:95:a1:84:
ca:42:29:e4:db:a0:b0:18:b6:c8:19:1b:25:9d:be:
15:ff:58:ac:7e:ba:aa:85:5f:5a:65:e6:08:7e:5e:
c2:95:f4:55:40:5d:53:e3:30:e8:d0:e5:48:16:36:
c0:18:71:7c:2f:a7:91:6d:67:33:d3:39:88:25:eb:
72:c1:7b:a1:16:29:9a:03:22:98:3f:43:c8:15:b9:
58:7d:12:c0:84:4a:3b:aa:49:30:8c:9a:ad:36:4a:
39:24:b1:81:d6:77:11:23:e9:c0:5e:29:39:0a:7c:
9b:c2:72:d3:7d:be:af:c3:e2:bc:be:fb:db:04:1c:
52:59:f8:4d:f7:f3:d5:98:d1:65:1b:25:31:ce:62:
0d:0f:6a:e9:6c:28:1d:44:96:06:11:64:bb:94:2e:
6f:86:d9:83:d9:1c:38:c0:7e:c2:dd:78:b5:da:a5:
6a:ef:8e:16:83:db:b6:f0:79:e9:b9:43:cc:c2:ac:
df:77:6d:33:fe:5e:c3:8f:ad:39:3b:42:1f:d1:ae:
35:bd:db:4f:c0:2f:1e:5a:88:a0:c2:a4:0a:41:32:
0c:ec:4f:3e:30:65:01:bf:92:df:77:53:a7:dc:21:
e4:82:24:e6:35:9f:d3:d2:b3:56:96:fd:9e:65:4e:
29:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:53:C8:F5:A3:7E:25:B7:DB:BD:7F:C6:63:CD:78:A4:22:7C:50:50
X509v3 Authority Key Identifier:
keyid:51:9D:80:2C:AF:9A:A8:F4:27:F1:DD:08:55:6C:89:99:5F:04:78:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/slPI9aN-JbfbvX_GY814pCJ8UFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.246.48.0/20
Signature Algorithm: sha256WithRSAEncryption
43:e5:c1:3d:7b:cd:3c:54:cd:ef:04:73:ce:f4:13:20:ad:99:
17:77:02:3a:26:0f:98:1f:af:8c:51:05:00:67:b7:17:65:66:
e2:0d:83:cb:19:8b:f6:08:dc:24:c7:99:3b:a0:59:ed:21:ab:
cb:43:31:0d:30:28:e1:51:33:80:2c:4e:93:af:12:04:69:24:
18:90:95:3c:d0:a6:29:76:4d:83:5f:06:fc:4e:20:34:cd:3f:
90:12:fe:c2:6d:4e:13:0c:0a:97:36:5b:d7:dc:96:59:d4:68:
9b:58:8d:09:22:42:6a:53:37:bf:ec:07:51:cf:fe:9f:c1:47:
69:de:d2:a2:5a:24:4b:89:70:2d:6c:67:ec:ae:78:9d:c1:11:
d9:3b:ec:cb:41:4a:ea:92:aa:79:49:7d:3c:6e:e7:27:82:c1:
8a:a2:e0:c5:b6:b5:df:fc:5e:4a:a5:8f:c1:17:ea:67:c7:b2:
d1:e4:e3:08:f8:56:13:ff:7d:16:8a:51:a2:56:20:66:63:10:
83:15:4d:e9:3b:7b:6c:2e:57:9c:36:4e:a4:0e:95:e9:fd:82:
7a:f0:c2:19:f3:2b:cc:a1:24:dc:5d:54:73:dc:66:74:f0:55:
b3:5c:39:1d:c4:9d:81:00:db:d4:a6:e4:91:e7:20:c3:f3:93:
ba:9d:06:5b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+GliNc8HwFiEBig+Blid7xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxOWQ4MDJjYWY5YWE4ZjQyN2YxZGQwODU1NmM4OTk5NWYw
NDc4ZDEwHhcNMjYwNzIxMjEzMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjUzYzhmNWEzN2UyNWI3ZGJiZDdmYzY2M2NkNzhhNDIyN2M1MDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBggWea/5MNG9/WVoYTKQink26Cw
GLbIGRslnb4V/1isfrqqhV9aZeYIfl7ClfRVQF1T4zDo0OVIFjbAGHF8L6eRbWcz
0zmIJetywXuhFimaAyKYP0PIFblYfRLAhEo7qkkwjJqtNko5JLGB1ncRI+nAXik5
CnybwnLTfb6vw+K8vvvbBBxSWfhN9/PVmNFlGyUxzmIND2rpbCgdRJYGEWS7lC5v
htmD2Rw4wH7C3Xi12qVq744Wg9u28HnpuUPMwqzfd20z/l7Dj605O0If0a41vdtP
wC8eWoigwqQKQTIM7E8+MGUBv5Lfd1On3CHkgiTmNZ/T0rNWlv2eZU4pNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLJTyPWjfiW3271/xmPNeKQifFBQMB8GA1UdIwQY
MBaAFFGdgCyvmqj0J/HdCFVsiZlfBHjRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVoyQUxLLWFxUFFuOGQwSVZXeUptVjhFZU5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9jZDM3OWMtYzk1MS00NjMzLWJiNTYt
MDcxNzY0NjkwZWNmLzEvc2xQSTlhTi1KYmZidlhfR1k4MTRwQ0o4VUZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9jZDM3OWMtYzk1MS00NjMzLWJiNTYtMDcxNzY0NjkwZWNm
LzEvVVoyQUxLLWFxUFFuOGQwSVZXeUptVjhFZU5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEj/YwMA0G
CSqGSIb3DQEBCwUAA4IBAQBD5cE9e808VM3vBHPO9BMgrZkXdwI6Jg+YH6+MUQUA
Z7cXZWbiDYPLGYv2CNwkx5k7oFntIavLQzENMCjhUTOALE6TrxIEaSQYkJU80KYp
dk2DXwb8TiA0zT+QEv7CbU4TDAqXNlvX3JZZ1GibWI0JIkJqUze/7AdRz/6fwUdp
3tKiWiRLiXAtbGfsrnidwRHZO+zLQUrqkqp5SX08bucngsGKouDFtrXf/F5KpY/B
F+pnx7LR5OMI+FYT/30WilGiViBmYxCDFU3pO3tsLlecNk6kDpXp/YJ68MIZ8yvM
oSTcXVRz3GZ08FWzXDkdxJ2BANvUpuSR5yDD85O6nQZb
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:41:22 2026 by rpki-client