Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/tm-LFqSPmanwgI1syFmGkI6nKdc.roa
File: tm-LFqSPmanwgI1syFmGkI6nKdc.roa (raw, json)
Hash identifier: lIW2bmaFFTJOzvB2HW/qgxs6vnJmoBOrm3elLnIZeZI=
Subject key identifier: B6:6F:8B:16:A4:8F:99:A9:F0:80:8D:6C:C8:59:86:90:8E:A7:29:D7
Certificate issuer: /CN=519d802caf9aa8f427f1dd08556c89995f0478d1
Certificate serial: 019F86918F93B55E0940F21074BFED9A09EA
Authority key identifier: 51:9D:80:2C:AF:9A:A8:F4:27:F1:DD:08:55:6C:89:99:5F:04:78:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/tm-LFqSPmanwgI1syFmGkI6nKdc.roa
Signing time: Tue 21 Jul 2026 21:25:14 +0000
ROA not before: Tue 21 Jul 2026 21:25:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151407
IP address blocks: 143.246.50.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:91:8f:93:b5:5e:09:40:f2:10:74:bf:ed:9a:09:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=519d802caf9aa8f427f1dd08556c89995f0478d1
Validity
Not Before: Jul 21 21:25:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b66f8b16a48f99a9f0808d6cc85986908ea729d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:df:d5:5d:5f:65:ee:07:4f:93:25:3e:fb:2f:
8c:3b:27:e7:ea:26:cf:22:e7:8e:37:df:7c:30:fe:
e9:2b:19:63:4f:c5:61:07:6b:99:e1:4c:a4:4a:72:
15:6e:af:1e:ca:46:05:16:93:02:1e:3e:82:35:f4:
3a:b1:e3:14:1f:c6:0c:c8:83:83:08:d0:e7:5c:fb:
87:6c:5d:6b:9c:3f:a1:af:fa:1d:0f:2a:c6:72:fb:
42:bb:c1:74:8a:32:09:50:98:02:77:79:c4:1e:cd:
50:6f:44:cb:ea:fa:35:da:4f:40:59:e6:97:5c:f7:
88:f1:15:dc:ee:2c:39:8d:f9:11:1c:22:4a:66:58:
30:3a:0c:3b:24:85:1e:c0:40:99:06:42:f1:1b:35:
11:15:c4:fc:9a:63:86:89:8d:16:5c:f4:2c:a6:74:
a1:eb:2a:26:95:ed:cc:2c:af:08:e5:bd:4e:ee:01:
5f:48:51:45:65:72:da:3e:1f:16:4d:96:ba:e1:6b:
95:0b:9c:1d:14:de:55:f8:48:d6:af:aa:14:63:1b:
88:a5:ae:d4:5d:78:2e:95:7f:2d:7d:b6:df:a8:55:
cd:c9:bb:17:19:07:0b:ab:6b:e9:7b:8b:23:a0:23:
d0:bf:7b:2e:54:1f:04:0c:30:9d:26:3a:3d:a3:ad:
93:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:6F:8B:16:A4:8F:99:A9:F0:80:8D:6C:C8:59:86:90:8E:A7:29:D7
X509v3 Authority Key Identifier:
keyid:51:9D:80:2C:AF:9A:A8:F4:27:F1:DD:08:55:6C:89:99:5F:04:78:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/tm-LFqSPmanwgI1syFmGkI6nKdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.246.50.0/23
Signature Algorithm: sha256WithRSAEncryption
60:4f:13:f7:a0:83:88:84:62:79:b0:60:f7:b3:0d:9a:fe:df:
cd:b3:8d:20:83:a5:7a:19:bb:25:0b:ae:9b:99:e7:f9:92:18:
b0:34:b6:cf:58:03:1c:c5:f4:18:fa:96:55:6d:7d:2c:54:8c:
9b:3c:9b:54:00:c8:68:cd:48:36:71:2f:d7:62:ed:1a:48:84:
96:de:f4:a6:64:26:e4:03:90:3a:c1:f1:07:b8:34:7f:a1:fa:
c1:d5:cb:5b:0d:f7:5f:f9:5a:f7:68:7d:d8:02:d8:86:52:09:
c2:74:a4:67:2c:3b:80:8e:c8:a1:f0:a2:8e:e5:bc:90:06:4c:
3c:c8:73:c3:04:dd:d8:11:06:76:7c:f1:f5:a5:ac:53:04:85:
32:ee:01:5a:38:d0:2d:84:1b:31:ef:80:d8:79:df:b3:2b:82:
ad:04:bf:2b:73:1d:b6:76:29:f4:69:c8:0f:e5:26:a4:7b:e4:
a2:30:79:18:9b:97:3f:54:86:50:80:d3:67:61:b9:d2:33:6d:
6f:91:72:0c:92:66:0d:9d:d5:94:d0:18:6e:97:28:3b:47:7f:
79:03:35:71:b6:68:bb:8c:e4:e1:85:a8:7f:6f:66:0b:c1:ad:
ff:c3:c6:ee:7b:9b:5e:03:a0:f7:8a:3c:3c:81:db:dd:5d:66:
36:e9:43:98
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+GkY+TtV4JQPIQdL/tmgnqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxOWQ4MDJjYWY5YWE4ZjQyN2YxZGQwODU1NmM4OTk5NWYw
NDc4ZDEwHhcNMjYwNzIxMjEyNTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjZmOGIxNmE0OGY5OWE5ZjA4MDhkNmNjODU5ODY5MDhlYTcyOWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9/VXV9l7gdPkyU++y+MOyfn6ibP
IueON998MP7pKxljT8VhB2uZ4UykSnIVbq8eykYFFpMCHj6CNfQ6seMUH8YMyIOD
CNDnXPuHbF1rnD+hr/odDyrGcvtCu8F0ijIJUJgCd3nEHs1Qb0TL6vo12k9AWeaX
XPeI8RXc7iw5jfkRHCJKZlgwOgw7JIUewECZBkLxGzURFcT8mmOGiY0WXPQspnSh
6yomle3MLK8I5b1O7gFfSFFFZXLaPh8WTZa64WuVC5wdFN5V+EjWr6oUYxuIpa7U
XXgulX8tfbbfqFXNybsXGQcLq2vpe4sjoCPQv3suVB8EDDCdJjo9o62TcwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLZvixakj5mp8ICNbMhZhpCOpynXMB8GA1UdIwQY
MBaAFFGdgCyvmqj0J/HdCFVsiZlfBHjRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVoyQUxLLWFxUFFuOGQwSVZXeUptVjhFZU5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9jZDM3OWMtYzk1MS00NjMzLWJiNTYt
MDcxNzY0NjkwZWNmLzEvdG0tTEZxU1BtYW53Z0kxc3lGbUdrSTZuS2RjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9jZDM3OWMtYzk1MS00NjMzLWJiNTYtMDcxNzY0NjkwZWNm
LzEvVVoyQUxLLWFxUFFuOGQwSVZXeUptVjhFZU5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBj/YyMA0G
CSqGSIb3DQEBCwUAA4IBAQBgTxP3oIOIhGJ5sGD3sw2a/t/Ns40gg6V6GbslC66b
mef5khiwNLbPWAMcxfQY+pZVbX0sVIybPJtUAMhozUg2cS/XYu0aSISW3vSmZCbk
A5A6wfEHuDR/ofrB1ctbDfdf+Vr3aH3YAtiGUgnCdKRnLDuAjsih8KKO5byQBkw8
yHPDBN3YEQZ2fPH1paxTBIUy7gFaONAthBsx74DYed+zK4KtBL8rcx22din0acgP
5Sake+SiMHkYm5c/VIZQgNNnYbnSM21vkXIMkmYNndWU0Bhulyg7R395AzVxtmi7
jOThhah/b2YLwa3/w8bue5teA6D3ijw8gdvdXWY26UOY
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:27:49 2026 by rpki-client