Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/gZ-mUbCwApNdt7tnoqwGQWZwkZE.roa
File: gZ-mUbCwApNdt7tnoqwGQWZwkZE.roa (raw, json)
Hash identifier: evh1xcoQ1ScvRnJVeo7BjEu3BUJTe0wb8Kn/pOm8gHg=
Subject key identifier: 81:9F:A6:51:B0:B0:02:93:5D:B7:BB:67:A2:AC:06:41:66:70:91:91
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01A0A75432D49D40DE4AEEAFE99E656A3ACC
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/gZ-mUbCwApNdt7tnoqwGQWZwkZE.roa
Signing time: Tue 15 Sep 2026 23:08:28 +0000
ROA not before: Tue 15 Sep 2026 23:08:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218810
IP address blocks: 143.246.141.0/24 maxlen: 24
2a0c:9a40:e040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a7:54:32:d4:9d:40:de:4a:ee:af:e9:9e:65:6a:3a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Sep 15 23:08:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=819fa651b0b002935db7bb67a2ac064166709191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:59:22:de:b2:12:9c:ff:c7:09:ce:7c:7c:c5:
e4:62:bd:86:23:52:f6:8e:06:43:df:51:04:28:c6:
55:eb:90:ad:44:3f:2f:94:48:25:ae:1b:6b:4d:f9:
36:e5:df:52:24:c3:5d:71:46:f5:4a:de:c6:43:6c:
5b:12:6b:54:66:31:27:25:75:bc:ca:d5:2c:af:60:
23:7a:74:17:3b:eb:cf:6d:b0:2e:61:27:c3:a1:07:
18:af:c9:d0:21:5e:c1:5f:e2:52:5f:18:0c:0a:ce:
bb:45:e8:73:f6:ca:ae:3b:4d:0e:0d:6a:1d:22:67:
e8:ea:70:63:d8:8c:6a:68:02:3d:96:52:22:1b:d6:
4a:63:4e:2b:2c:2b:e0:8c:28:32:a8:e4:aa:52:48:
a1:d6:59:57:ca:22:ee:ce:e9:96:11:b1:7b:a3:3b:
7c:ce:17:71:ba:2b:65:e8:85:08:1c:48:cd:48:68:
76:44:17:43:a5:6a:07:e7:08:bb:59:63:4d:8d:b0:
eb:4d:10:03:4e:e2:a2:e0:7a:40:8a:4a:12:68:a4:
c2:e0:a0:99:27:81:84:60:1a:dd:49:ce:07:32:80:
8f:9b:45:c2:02:a3:16:9a:99:b7:51:08:dc:b0:ae:
cb:78:0f:45:d1:db:2b:ff:10:ba:6c:5d:24:4e:46:
cc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:9F:A6:51:B0:B0:02:93:5D:B7:BB:67:A2:AC:06:41:66:70:91:91
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/gZ-mUbCwApNdt7tnoqwGQWZwkZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.246.141.0/24
IPv6:
2a0c:9a40:e040::/48
Signature Algorithm: sha256WithRSAEncryption
97:60:7f:8c:1b:3a:bb:44:77:e8:1e:05:cd:0b:9c:3e:bc:49:
df:01:f2:35:ea:78:e8:35:bf:59:dc:ae:bd:c6:01:d4:e8:43:
11:7a:96:7e:82:29:f6:19:3a:df:d6:5b:69:67:d2:fa:17:ab:
29:26:c8:ea:7d:f3:0d:1f:d5:5b:04:f9:da:de:fb:7b:ba:22:
ba:8c:0b:b3:1e:d2:84:d1:c7:1d:df:d2:a1:ec:0f:fe:5f:5c:
47:ea:d2:f2:02:77:05:cf:9b:04:75:8f:6c:52:f2:f3:04:69:
f9:a7:55:e2:d3:30:06:f6:e5:31:db:76:58:9e:89:bb:7a:f0:
02:15:f6:f8:86:4c:ae:45:31:b6:96:8a:0e:09:fe:2c:22:f4:
ae:2e:e7:10:08:5f:63:19:48:0e:9f:e9:0f:b7:40:2b:37:b8:
1a:4d:a1:05:30:29:e9:b7:27:72:40:6c:84:88:52:d8:ed:77:
a3:c9:1a:aa:4a:4b:b7:65:a7:47:ed:7f:71:87:26:44:9c:94:
bd:67:2e:a1:12:7e:2f:bd:f8:7d:c1:3f:3a:5c:4e:53:77:94:
2f:de:6f:43:1b:a0:5d:da:72:92:ee:29:b2:e7:52:0e:41:7f:
3d:78:cf:35:ce:6f:e6:f3:05:cf:50:b3:4f:ac:90:7d:1e:45:
c9:d0:c0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:08:31 2026 by rpki-client