Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/oIQSTPuHbbYGlcgLa4wIObpfB0Y.roa
File: oIQSTPuHbbYGlcgLa4wIObpfB0Y.roa (raw, json)
Hash identifier: T3/R9exHSgP0k2kmjvxBvwzSyy0v3tasEbkkEODMBfE=
Subject key identifier: A0:84:12:4C:FB:87:6D:B6:06:95:C8:0B:6B:8C:08:39:BA:5F:07:46
Certificate issuer: /CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd
Certificate serial: 019FAC953753F5E30579A420F2B09DAD5F0F
Authority key identifier: 55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/oIQSTPuHbbYGlcgLa4wIObpfB0Y.roa
Signing time: Wed 29 Jul 2026 06:34:47 +0000
ROA not before: Wed 29 Jul 2026 06:34:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198180
IP address blocks: 143.246.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:95:37:53:f5:e3:05:79:a4:20:f2:b0:9d:ad:5f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd
Validity
Not Before: Jul 29 06:34:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a084124cfb876db60695c80b6b8c0839ba5f0746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:87:9f:df:9a:5f:e7:10:75:e8:01:55:4a:b0:
12:67:85:5b:61:e3:7d:da:1b:84:2b:43:a7:4b:72:
5e:17:0a:02:c6:8c:1f:50:90:65:82:64:8b:e5:b0:
0d:e4:0d:e7:6f:a6:c1:9e:f4:84:64:d7:25:40:97:
46:1d:ac:e5:45:71:01:b0:32:5b:b5:69:1b:2a:8e:
fa:86:0b:2d:35:09:41:4d:3f:10:2c:f1:af:90:bc:
5f:e7:d3:f7:d8:7a:cb:48:cd:3b:c1:6a:8b:9c:da:
2d:a1:ed:0c:98:56:87:d7:b7:58:51:71:38:0e:6d:
91:0a:47:42:24:ad:85:07:05:b1:6b:2c:46:2b:29:
ee:51:16:e0:86:93:d8:34:09:eb:e7:84:fe:a2:05:
21:9e:0d:55:c9:5c:7e:29:2a:96:8d:0a:d9:b3:4b:
c6:56:1f:63:d7:99:b0:1d:93:3a:18:6f:c3:e5:2c:
7c:f9:c1:7d:c7:05:50:cc:4a:35:7c:0a:75:5e:c4:
a0:e4:51:3a:3a:6e:eb:ba:3b:71:3c:c6:ae:59:29:
f7:c4:5b:d7:74:83:b6:53:dd:ae:23:81:6c:ad:92:
05:5f:cb:07:1f:52:1d:cf:a8:7e:e4:4d:2b:2f:dc:
6a:c5:94:35:fc:03:e4:ea:1d:c6:33:62:ef:bb:bb:
5e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:84:12:4C:FB:87:6D:B6:06:95:C8:0B:6B:8C:08:39:BA:5F:07:46
X509v3 Authority Key Identifier:
keyid:55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/oIQSTPuHbbYGlcgLa4wIObpfB0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.246.40.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:68:46:f9:c8:60:89:bc:4d:72:67:c4:9f:f4:69:c6:c5:7e:
43:5b:2f:e6:64:7a:e4:ef:f9:72:56:3d:3f:38:a9:99:c2:a8:
bb:3e:5f:6a:2e:8f:a6:0b:30:11:b4:5b:f3:c4:a1:c1:8b:62:
fd:85:06:36:7a:f5:a2:fe:61:cd:dd:d5:2d:29:ac:0d:8b:7f:
e0:73:20:f3:95:4e:c4:f4:be:7e:98:1a:4d:07:d9:b8:ac:ba:
99:22:a1:9a:5e:03:15:29:6a:81:36:05:8d:67:b5:8e:33:3f:
4d:96:32:f7:80:f8:5a:58:2c:c8:22:61:c7:07:d0:bb:32:63:
19:15:f1:9e:7d:8e:c0:22:f5:72:bb:6a:d5:0d:13:fc:70:82:
83:19:cb:a5:89:7d:9d:13:04:96:2a:32:87:73:2a:64:df:a2:
54:ea:74:75:02:95:f3:96:48:ee:30:ae:c9:ba:2d:34:af:83:
a0:97:a7:9f:da:0a:3b:1c:ea:19:e9:92:1d:d7:95:bd:d8:1e:
5d:ac:61:b4:2d:d7:54:45:ff:c6:b6:66:39:3f:5b:29:2c:c8:
7e:7e:58:8f:12:2c:b1:f7:9e:60:88:bf:78:1d:65:cd:06:60:
94:87:e4:b1:c9:2c:84:6e:7c:d2:a8:5b:4c:91:59:3b:a6:12:
6d:89:b3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:41:52 2026 by rpki-client