Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/351arMODSIyd3CJc9fgPAtsmlNI.roa
File: 351arMODSIyd3CJc9fgPAtsmlNI.roa (raw, json)
Hash identifier: Yo2IiguJDajHZ2abX/Lenjc2Oi/XsPFxr+IXj+TfOw0=
Subject key identifier: DF:9D:5A:AC:C3:83:48:8C:9D:DC:22:5C:F5:F8:0F:02:DB:26:94:D2
Certificate issuer: /CN=519d802caf9aa8f427f1dd08556c89995f0478d1
Certificate serial: 019FA7995FE13EC254C42AB75E74CA15DFAA
Authority key identifier: 51:9D:80:2C:AF:9A:A8:F4:27:F1:DD:08:55:6C:89:99:5F:04:78:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/351arMODSIyd3CJc9fgPAtsmlNI.roa
Signing time: Tue 28 Jul 2026 07:21:14 +0000
ROA not before: Tue 28 Jul 2026 07:21:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213169
IP address blocks: 143.246.56.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:99:5f:e1:3e:c2:54:c4:2a:b7:5e:74:ca:15:df:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=519d802caf9aa8f427f1dd08556c89995f0478d1
Validity
Not Before: Jul 28 07:21:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df9d5aacc383488c9ddc225cf5f80f02db2694d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e8:e3:26:26:45:2e:e2:8c:50:d5:bb:a3:2e:
9f:10:3d:ee:df:94:c2:56:44:17:6c:a5:d8:7d:2d:
8e:dd:be:54:d2:b1:38:27:2e:10:66:8b:dc:15:08:
54:e5:6b:14:d2:16:e5:7d:9d:54:16:9f:8d:72:66:
da:81:5c:64:b9:31:8f:08:85:8d:17:c9:34:d9:3b:
64:4a:58:67:e8:3c:3e:f2:7a:91:00:e7:1a:18:aa:
e6:20:8d:e5:22:f7:35:5e:ae:1e:12:9b:cb:1f:74:
f9:02:9b:03:96:b0:4d:ad:9d:83:a5:2a:f7:c1:88:
2f:b7:ad:e1:33:39:88:77:45:3b:2a:78:2d:6d:16:
b9:bb:58:4a:82:99:c2:ce:ab:ed:c2:22:bb:54:bc:
73:5a:82:2d:f1:de:a4:34:b1:1e:06:55:02:55:b2:
92:98:a5:66:ce:f3:69:4d:f5:d9:40:3f:79:b8:c0:
32:39:20:74:cb:dd:3f:33:8a:c8:17:e7:28:a9:67:
71:26:ad:c8:c1:1f:7b:6c:c8:91:46:e6:53:27:5f:
58:e1:d3:04:ad:e5:1b:db:c3:5b:d5:87:c7:c7:99:
55:9f:a5:02:af:dc:9d:3a:2a:6f:91:ea:3b:05:26:
3a:c5:2a:96:d8:00:05:54:5f:5a:7f:4d:6e:43:af:
d7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:9D:5A:AC:C3:83:48:8C:9D:DC:22:5C:F5:F8:0F:02:DB:26:94:D2
X509v3 Authority Key Identifier:
keyid:51:9D:80:2C:AF:9A:A8:F4:27:F1:DD:08:55:6C:89:99:5F:04:78:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/351arMODSIyd3CJc9fgPAtsmlNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.246.56.0/21
Signature Algorithm: sha256WithRSAEncryption
a5:01:bb:c2:55:f3:e8:fd:db:92:2f:13:cd:b9:50:6d:98:60:
e7:0e:12:15:84:d3:cd:ff:7c:d2:e7:2c:5c:5b:e6:6d:dc:f8:
c8:00:e2:4f:68:0e:7a:f0:1d:d2:6f:98:68:b1:d7:8e:12:02:
55:8d:99:82:0a:7a:11:30:a2:bd:47:13:85:31:e8:d7:d4:65:
9f:96:5f:fa:c9:54:ba:29:6f:0d:6a:94:58:c4:7b:fa:5c:e8:
d8:c2:67:a4:d1:d6:e6:6b:e8:e7:58:63:99:77:bc:31:ae:81:
ac:c5:60:7a:b9:65:96:e3:99:f7:66:90:97:e6:52:64:35:81:
7c:48:13:89:39:b4:f1:c9:8d:8e:e2:9b:76:8f:58:2d:17:13:
29:74:3f:13:b7:01:ef:97:3f:06:27:60:e0:02:9f:91:78:c2:
11:41:64:38:99:df:66:b4:e1:3f:b8:d4:26:5d:aa:1b:9b:ef:
2c:f0:c5:63:4a:21:37:30:95:47:d2:c2:39:ac:25:82:41:ef:
b0:91:2f:33:88:0d:80:31:2e:f3:d5:94:79:43:ed:a1:2e:8a:
8b:19:4d:7d:db:06:20:18:c5:3a:43:78:2c:18:d7:d0:24:f6:
69:e8:54:7d:34:a0:98:79:a7:65:36:60:9a:ed:25:b0:db:6a:
7e:9f:ff:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:55:27 2026 by rpki-client