Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/SuLXneYIPkghMCoIxsUXoiBvFa8.roa
File: SuLXneYIPkghMCoIxsUXoiBvFa8.roa (raw, json)
Hash identifier: 25jWeD+eZch4Ref00EwiEEWWCFNt6+qriQs8m0tU1j0=
Subject key identifier: 4A:E2:D7:9D:E6:08:3E:48:21:30:2A:08:C6:C5:17:A2:20:6F:15:AF
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019EEEE6AB587D27EDA2035DCF31D4280932
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/SuLXneYIPkghMCoIxsUXoiBvFa8.roa
Signing time: Mon 22 Jun 2026 10:35:54 +0000
ROA not before: Mon 22 Jun 2026 10:35:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209022
IP address blocks: 143.246.143.0/24 maxlen: 24
2a0c:9a40:8c40::/48 maxlen: 48
2a0c:9a40:c000::/36 maxlen: 48
2a0c:9a40:c000::/48 maxlen: 48
2a0c:9a40:c001::/48 maxlen: 48
2a0c:9a40:c002::/48 maxlen: 48
2a0c:9a40:c003::/48 maxlen: 48
2a0c:9a40:c004::/48 maxlen: 48
2a0c:9a44:beef::/48 maxlen: 48
2a10:a500:b00b::/48 maxlen: 48
2a10:a501:b00b::/48 maxlen: 48
2a10:a502:b00b::/48 maxlen: 48
2a10:a503:b00b::/48 maxlen: 48
2a10:a504:b00b::/48 maxlen: 48
2a10:a505:b00b::/48 maxlen: 48
2a10:a506:b00b::/48 maxlen: 48
2a10:a507:b00b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ee:e6:ab:58:7d:27:ed:a2:03:5d:cf:31:d4:28:09:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jun 22 10:35:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ae2d79de6083e4821302a08c6c517a2206f15af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5f:2f:78:95:ce:d1:79:f2:66:86:01:4c:48:
7a:bd:14:d1:5c:60:e8:5d:ce:8b:c8:84:6f:9e:fa:
ad:5c:9c:60:20:be:f7:e1:21:9c:c3:8a:ea:72:a2:
dd:70:d5:d2:76:fe:0d:2f:6a:19:27:d2:83:ae:ad:
0d:c2:de:9a:cc:da:d2:3a:81:b1:f8:54:4d:8b:84:
c5:c6:af:0e:93:0a:c8:4f:8e:dc:7e:bf:94:77:66:
dc:c9:36:98:17:0c:31:01:12:a0:15:0e:7b:ae:ee:
22:75:9e:28:76:16:9a:c2:0e:ec:c3:d3:4f:f2:94:
e4:5f:bc:af:59:a2:76:9b:0d:f2:ad:18:fd:8e:cd:
e4:f0:ed:ba:84:6e:76:02:8f:9f:7f:9f:4d:8e:c5:
ef:15:3f:cf:50:b4:89:48:3f:50:61:9a:e7:c1:d5:
5d:c6:be:23:20:0f:1a:5c:f9:44:c9:02:ed:c5:aa:
0d:b2:5c:38:52:34:e7:03:4f:2b:1d:dc:41:be:8f:
0a:f1:34:c2:4e:68:9b:20:16:9b:da:be:f8:f3:0f:
08:72:f2:aa:79:18:44:e3:25:68:c0:3f:59:7b:cb:
ff:c9:fd:46:a3:91:2d:57:ff:23:e8:ba:41:60:d7:
5c:34:4d:cb:66:aa:ea:fb:4e:2c:02:29:71:ed:0f:
3f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E2:D7:9D:E6:08:3E:48:21:30:2A:08:C6:C5:17:A2:20:6F:15:AF
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/SuLXneYIPkghMCoIxsUXoiBvFa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.246.143.0/24
IPv6:
2a0c:9a40:8c40::/48
2a0c:9a40:c000::/36
2a0c:9a44:beef::/48
2a10:a500:b00b::/48
2a10:a501:b00b::/48
2a10:a502:b00b::/48
2a10:a503:b00b::/48
2a10:a504:b00b::/48
2a10:a505:b00b::/48
2a10:a506:b00b::/48
2a10:a507:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
af:2b:c4:90:1b:84:91:84:f0:f1:14:12:50:5e:11:84:27:49:
be:4e:c8:a5:a2:47:86:39:04:b7:38:f0:39:30:76:75:45:20:
6f:d1:f7:ff:70:0f:5a:d1:00:da:d6:db:db:cd:ec:c3:26:bd:
3b:a2:32:9f:5c:d5:6c:84:86:15:f1:1e:40:72:65:7c:a2:af:
0d:db:f2:93:9f:a3:3b:78:a1:a0:86:05:47:cb:54:86:a8:a3:
40:45:04:69:23:10:79:2c:67:32:75:8e:e9:ed:e3:bd:46:6c:
c8:cb:7f:ea:b1:bb:de:af:d9:f5:37:15:45:9b:13:24:52:0b:
b6:67:da:3a:48:9c:d0:cb:96:a5:34:ed:94:c6:e9:a1:0b:2e:
00:f8:43:c2:00:17:8d:c2:e4:68:49:b7:30:39:f3:53:00:7b:
1b:04:54:38:89:86:b8:cb:ba:83:55:cc:9b:79:85:d7:e5:07:
7c:ff:ee:ed:f7:09:54:0e:ae:54:a8:9d:aa:0f:07:9a:e3:36:
90:9d:83:96:7b:06:a5:de:cc:36:40:8b:91:14:0f:c6:ff:9f:
a8:4a:cf:d4:75:88:50:fa:ac:58:0a:f7:9d:57:98:0b:0b:2e:
60:c7:30:31:7a:44:54:50:f0:ea:07:25:72:93:c4:98:7f:66:
2a:25:6d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:44:20 2026 by rpki-client