Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Ro0IgGOTyg5pBhBIKbL30t4oGng.roa
File: Ro0IgGOTyg5pBhBIKbL30t4oGng.roa (raw, json)
Hash identifier: MNwPfYk5dlbrBUedwknbj+C4KJvXHawzhApBBA/Lm34=
Subject key identifier: 46:8D:08:80:63:93:CA:0E:69:06:10:48:29:B2:F7:D2:DE:28:1A:78
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01A0C8B82C8DDE713599179A21C84D253FFB
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Ro0IgGOTyg5pBhBIKbL30t4oGng.roa
Signing time: Tue 22 Sep 2026 10:45:08 +0000
ROA not before: Tue 22 Sep 2026 10:45:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218766
IP address blocks: 143.246.142.0/24 maxlen: 24
2a0c:9a40:9400::/40 maxlen: 48
2a0c:9a40:e120::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 10:45:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:b8:2c:8d:de:71:35:99:17:9a:21:c8:4d:25:3f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Sep 22 10:45:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=468d08806393ca0e6906104829b2f7d2de281a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b2:bb:d6:d0:94:44:07:fe:77:36:63:a0:23:
05:1e:3a:3d:49:9a:41:e2:a8:d9:fa:21:ab:24:0e:
11:a0:9b:48:ca:90:94:45:3a:86:6e:df:7b:5f:3a:
18:33:b1:fc:3e:3f:b4:11:f1:c4:23:88:91:ed:ba:
83:2a:73:97:7d:d6:2f:d9:00:af:49:c6:28:fe:ce:
4b:94:0a:cd:d5:75:de:de:06:ba:7f:d1:ec:12:f7:
65:17:9f:4d:0c:97:41:48:bc:cd:ba:54:01:ec:2b:
1e:c9:83:71:f3:7c:f6:6b:6c:f8:80:35:98:9d:c6:
d8:f4:7d:77:7f:eb:d3:b7:3e:5c:37:63:95:c4:85:
fa:2c:76:a0:8d:41:e4:e5:52:67:01:13:87:3d:83:
39:ca:97:53:1f:9b:af:9f:f8:b3:3c:89:e6:12:7d:
31:3b:a5:57:e7:42:77:a2:38:14:18:d7:bd:b7:e1:
4b:1b:0c:3a:0c:99:de:5b:df:f3:fb:98:3d:ff:65:
19:ee:50:82:02:97:f7:13:05:d2:61:aa:52:37:bb:
ae:ae:43:c8:9b:e9:b6:cd:54:a2:95:ec:00:b4:c3:
ad:c8:89:7f:38:cf:e5:7d:26:46:be:b6:4a:6f:af:
34:94:66:c5:06:ad:92:ce:70:cd:a2:8a:a4:30:1b:
c7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:8D:08:80:63:93:CA:0E:69:06:10:48:29:B2:F7:D2:DE:28:1A:78
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/Ro0IgGOTyg5pBhBIKbL30t4oGng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.246.142.0/24
IPv6:
2a0c:9a40:9400::/40
2a0c:9a40:e120::/48
Signature Algorithm: sha256WithRSAEncryption
67:b8:41:7d:43:5b:23:90:27:be:3a:eb:8f:25:7d:dd:44:41:
62:c9:f5:ea:26:48:cd:4f:53:7c:af:d2:7b:41:1c:7f:16:5e:
e8:50:7b:71:0b:97:0e:16:63:5e:79:36:4d:b6:b1:4f:fd:dc:
5e:d3:62:f3:f2:75:90:ff:db:ba:96:ac:49:c5:6e:40:62:82:
33:21:33:5d:f4:5d:50:7c:15:b0:89:66:e5:ba:4d:98:07:87:
0a:b9:c8:ab:0c:a9:84:f3:63:77:15:10:26:0a:26:04:69:90:
67:cb:55:b4:f2:89:58:c4:0e:ae:ae:e5:0f:8e:86:e4:65:c8:
8e:d5:06:b2:63:18:dc:4d:87:a8:b8:26:ea:f5:04:78:19:17:
8e:e2:d2:13:a2:46:d8:fa:91:07:41:57:e3:27:41:29:73:71:
54:d9:6b:ac:55:eb:4b:d2:11:17:77:16:f3:5d:1b:e0:c3:9e:
06:1b:f9:11:fb:f3:5c:7e:bd:68:0a:83:e5:7a:87:1e:b1:c4:
3b:d8:ad:f5:ba:f9:e7:85:95:e5:06:80:1e:a6:bc:1b:98:84:
7d:42:58:b7:d2:f0:2a:39:de:f5:e5:24:13:f2:80:f0:d9:38:
76:f6:d4:51:e1:56:36:29:98:41:c5:f1:e8:de:52:35:19:71:
6d:0c:2c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:22:18 2026 by rpki-client