Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/q8Tmc6EzFqnUmMxMTIt9c3dEYxI.roa
File: q8Tmc6EzFqnUmMxMTIt9c3dEYxI.roa (raw, json)
Hash identifier: v/Ru9OVe1/q99gN31o9CAbNDujPce0SS4XxW2atJ/R0=
Subject key identifier: AB:C4:E6:73:A1:33:16:A9:D4:98:CC:4C:4C:8B:7D:73:77:44:63:12
Certificate issuer: /CN=519d802caf9aa8f427f1dd08556c89995f0478d1
Certificate serial: 01A0107C2994ADD6AC1AE0FF3DE90D5E1121
Authority key identifier: 51:9D:80:2C:AF:9A:A8:F4:27:F1:DD:08:55:6C:89:99:5F:04:78:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/q8Tmc6EzFqnUmMxMTIt9c3dEYxI.roa
Signing time: Mon 17 Aug 2026 16:09:27 +0000
ROA not before: Mon 17 Aug 2026 16:09:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58062
IP address blocks: 143.246.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:10:7c:29:94:ad:d6:ac:1a:e0:ff:3d:e9:0d:5e:11:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=519d802caf9aa8f427f1dd08556c89995f0478d1
Validity
Not Before: Aug 17 16:09:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=abc4e673a13316a9d498cc4c4c8b7d7377446312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:03:ec:b4:5c:bf:f9:b1:4d:56:b4:23:24:23:
53:be:45:05:59:b3:08:9d:3a:6f:66:21:08:a5:98:
d1:6f:9b:11:bc:c6:d9:38:9e:5c:d5:67:59:93:07:
2b:95:01:70:10:e1:6f:7d:03:d5:f4:e1:fb:37:2b:
a6:d0:2f:51:b9:8a:ea:82:1f:88:65:f5:17:70:5b:
e2:53:13:ee:a0:18:59:dc:df:8e:09:76:8f:a2:fb:
c6:0f:c5:5b:b2:a5:2b:2b:87:10:cc:46:81:aa:8c:
29:5c:13:36:6a:02:f8:cd:5f:59:8f:82:84:ff:6e:
ca:86:10:51:a1:ba:81:a4:80:d8:de:ef:38:c5:57:
6c:18:d9:cf:ad:88:9d:36:61:ed:be:e5:62:0e:d1:
f4:1e:1c:78:72:21:d8:88:d0:e8:3c:86:a1:61:70:
49:4e:8b:95:81:c6:22:4e:98:d2:24:c3:89:04:4f:
07:ed:28:56:76:91:56:53:75:50:cd:2f:c2:31:7c:
7e:d5:50:5e:b5:22:a5:15:ff:03:f5:01:51:b3:b1:
bb:e2:dd:a1:7e:a3:2a:8e:29:b7:5b:98:39:a7:50:
af:04:f7:a1:2e:00:60:62:81:73:b6:af:9c:2f:a6:
2a:15:f1:66:99:c7:27:07:58:cf:6e:fa:78:d7:21:
a5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C4:E6:73:A1:33:16:A9:D4:98:CC:4C:4C:8B:7D:73:77:44:63:12
X509v3 Authority Key Identifier:
keyid:51:9D:80:2C:AF:9A:A8:F4:27:F1:DD:08:55:6C:89:99:5F:04:78:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/q8Tmc6EzFqnUmMxMTIt9c3dEYxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cd379c-c951-4633-bb56-071764690ecf/1/UZ2ALK-aqPQn8d0IVWyJmV8EeNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.246.54.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:46:e2:1a:04:c4:73:30:9c:c6:b4:e9:c5:bc:e9:13:c5:76:
c1:27:a7:48:a3:c4:19:5e:82:fa:5f:18:00:73:79:3c:50:1a:
78:1e:bd:3b:d3:66:bd:74:f4:f6:c9:ff:5c:3b:34:72:ba:51:
21:ff:1d:6e:cf:a9:6e:fa:58:78:35:26:5f:0d:47:9d:cc:73:
c0:c7:4b:05:0b:aa:13:b7:63:dc:9c:46:8f:fe:d1:97:4c:a9:
59:e4:ce:4d:1c:e3:d4:70:28:31:e7:d6:7e:6f:c4:1c:68:e4:
68:1d:bd:b9:d7:77:13:e8:0c:c5:3f:fa:d1:c0:af:b5:22:89:
bb:02:7a:08:57:01:d9:16:82:c0:c5:3e:dc:0c:67:3d:e6:9d:
54:a7:02:cd:25:f8:98:c5:d6:22:55:f8:82:87:ce:7b:16:91:
8e:1f:74:a3:83:9c:82:24:d7:5e:2b:0b:8c:73:e2:91:2c:a1:
e5:ec:0a:cb:a6:26:01:d2:69:7d:00:8e:b3:d4:dc:8b:fd:46:
0f:8e:45:f4:44:4f:ef:c0:49:c4:7d:d5:ff:ec:cd:46:8b:b4:
c3:89:d3:26:2b:8a:f3:14:df:5c:40:b9:fc:86:5e:fe:9c:8b:
8d:13:dd:cc:c0:dc:f4:97:b2:68:4d:fe:7d:5f:45:1f:2e:12:
89:8a:66:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:33:15 2026 by rpki-client