Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/QnubMT8LlGCKqDGLx2msA8oQFZE.roa
File: QnubMT8LlGCKqDGLx2msA8oQFZE.roa (raw, json)
Hash identifier: F29CsKJrPeic4M/8FQtLYPOvQ2ukLb2sF2KJke9Fycg=
Subject key identifier: 42:7B:9B:31:3F:0B:94:60:8A:A8:31:8B:C7:69:AC:03:CA:10:15:91
Certificate issuer: /CN=519d802caf9aa8f427f1dd08556c89995f0478d1
Certificate serial: 01A0204F5EEA7B596C644A833FD6D5BF3178
Authority key identifier: 51:9D:80:2C:AF:9A:A8:F4:27:F1:DD:08:55:6C:89:99:5F:04:78:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/QnubMT8LlGCKqDGLx2msA8oQFZE.roa
Signing time: Thu 20 Aug 2026 17:54:27 +0000
ROA not before: Thu 20 Aug 2026 17:54:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211759
IP address blocks: 143.246.48.0/23 maxlen: 24
143.246.48.0/24 maxlen: 24
143.246.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:4f:5e:ea:7b:59:6c:64:4a:83:3f:d6:d5:bf:31:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=519d802caf9aa8f427f1dd08556c89995f0478d1
Validity
Not Before: Aug 20 17:54:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=427b9b313f0b94608aa8318bc769ac03ca101591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:de:ae:65:ac:f0:35:08:6d:0e:48:11:16:19:
d5:8c:f1:6c:68:b1:3f:ff:ee:df:89:ca:08:2f:97:
f9:8c:84:e1:e6:67:c5:5d:4a:f6:d4:3e:ee:29:93:
08:de:e9:0c:ef:96:19:14:ea:c0:c7:f1:d9:6f:13:
09:38:37:b9:9d:37:b6:7a:65:b1:7c:b7:da:ca:09:
40:d7:cb:9a:ca:a3:03:17:a0:f2:e2:d6:0b:f2:37:
45:61:b2:94:06:34:c6:c2:f7:04:a4:04:70:ed:62:
98:8a:25:e2:6c:73:cf:c6:53:94:22:62:fd:23:e4:
16:56:74:06:4c:bc:0b:72:32:26:82:d3:66:a4:00:
a8:56:d2:59:bf:9b:86:1b:5e:3e:c7:c3:72:ae:e5:
e4:e2:0b:7b:cb:67:72:14:d0:1f:70:33:cb:b4:3b:
ca:bc:24:6e:60:d9:77:73:6f:01:cc:69:42:64:a6:
9f:56:ba:bc:e7:db:75:ce:99:cd:e0:88:62:8a:35:
51:88:a9:7e:6d:f2:1a:9e:72:e7:43:fb:93:32:1f:
a0:5b:5b:13:59:f1:04:4a:03:c1:e1:b7:7f:a0:b4:
b4:9d:9c:8c:b6:f8:e8:04:1d:60:d0:74:a9:98:9d:
d6:7b:3e:a3:c7:06:50:ea:7e:d0:59:b6:ea:21:8d:
90:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:7B:9B:31:3F:0B:94:60:8A:A8:31:8B:C7:69:AC:03:CA:10:15:91
X509v3 Authority Key Identifier:
keyid:51:9D:80:2C:AF:9A:A8:F4:27:F1:DD:08:55:6C:89:99:5F:04:78:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/QnubMT8LlGCKqDGLx2msA8oQFZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.246.48.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:51:0d:8b:cb:9f:46:b2:49:05:09:db:9a:16:11:ff:fa:16:
4f:77:76:56:53:e2:9a:47:cb:5d:3d:2b:ab:88:9a:3d:90:67:
aa:19:0e:82:df:d7:9d:d3:0c:b6:d6:8e:49:2b:87:3b:46:ce:
e5:27:f0:af:f3:a5:5c:8e:ce:cf:56:fc:44:f8:39:ea:a4:4d:
5d:4d:82:bc:7d:ed:b2:14:05:fe:27:c9:7c:d4:97:46:43:4a:
a2:29:1e:cc:ee:04:d8:c2:f8:48:ca:43:6a:99:d6:38:3e:88:
92:a4:f9:87:ae:7b:96:3b:09:d9:f5:f3:e6:f7:d4:77:bb:b3:
67:ef:c3:cb:b9:f2:a6:5a:1c:2b:3c:f0:3f:cd:15:e0:f1:f5:
58:6c:58:1f:c9:1c:a1:24:57:bc:f1:d9:b9:ad:77:6d:a8:23:
e1:99:4d:2a:05:02:34:5b:f8:35:1a:3a:68:e5:da:d2:94:95:
6d:c5:b2:39:07:9b:4b:27:3f:05:22:41:25:ab:cd:ea:b8:f5:
61:c3:d7:9a:9a:2a:4c:52:5e:25:c7:68:44:a6:d3:c5:c1:41:
b7:6f:e2:9e:ed:37:5d:42:e6:36:fe:f7:b0:1a:b5:0c:af:b1:
41:9e:bb:7e:84:f8:9b:ba:bd:ff:00:72:4b:5c:db:10:08:d3:
82:fa:64:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:18:50 2026 by rpki-client