Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/Sd9Inu8fRPZCviAypagCQcKKkmw.roa
File: Sd9Inu8fRPZCviAypagCQcKKkmw.roa (raw, json)
Hash identifier: 0ZUMOh3JNBttpQEEjg9e7KJhBDQfVabAIV5ANe3h4Ng=
Subject key identifier: 49:DF:48:9E:EF:1F:44:F6:42:BE:20:32:A5:A8:02:41:C2:8A:92:6C
Certificate issuer: /CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Certificate serial: 01A0397DD4FD4CB074F65A17C50C749C6999
Authority key identifier: A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/Sd9Inu8fRPZCviAypagCQcKKkmw.roa
Signing time: Tue 25 Aug 2026 15:15:42 +0000
ROA not before: Tue 25 Aug 2026 15:15:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48753
IP address blocks: 143.246.213.0/24 maxlen: 24
143.246.214.0/24 maxlen: 24
143.246.223.0/24 maxlen: 24
2a0f:5f44::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 17:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:7d:d4:fd:4c:b0:74:f6:5a:17:c5:0c:74:9c:69:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Validity
Not Before: Aug 25 15:15:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=49df489eef1f44f642be2032a5a80241c28a926c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:97:29:7d:f5:b8:79:bb:b7:8f:09:ea:ff:d2:
07:56:28:e3:d5:5a:6b:6a:ef:82:06:63:c4:80:80:
09:18:59:a3:d2:ea:4b:bc:e5:b7:b6:a2:3d:5f:b7:
60:f0:04:0e:5b:d3:a8:14:93:e1:6c:59:7a:a0:21:
bf:84:e5:c2:ef:c2:59:6f:1a:fd:d2:8a:e9:5d:35:
06:a7:36:00:ae:23:f7:e0:ef:2a:5a:38:53:20:34:
2e:12:8f:78:c3:c2:de:e4:97:53:2f:38:dd:5c:1b:
22:a1:2f:57:0a:29:c2:12:5b:3e:43:02:67:6a:a2:
21:11:33:91:86:07:7e:e8:0e:16:3c:56:62:16:67:
e1:b8:74:55:5c:9e:6f:3d:0a:c2:0a:de:e5:b2:da:
b2:af:98:53:cf:af:ee:a3:d4:0d:71:82:16:ff:ad:
99:f1:66:41:fa:4f:64:88:62:3b:8e:7f:ff:0a:26:
ef:20:32:fd:19:7c:91:c0:e5:65:79:a0:d7:19:f1:
85:a1:19:65:0c:b6:c4:c3:a9:4e:fb:7d:ec:f0:a9:
07:0c:c1:14:a9:fd:22:99:78:5e:11:d4:c7:66:89:
55:04:51:78:5b:b8:2c:74:f4:3f:11:94:79:9d:f7:
73:21:15:d3:ad:08:c8:e6:e6:5e:22:d2:08:03:a9:
ca:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DF:48:9E:EF:1F:44:F6:42:BE:20:32:A5:A8:02:41:C2:8A:92:6C
X509v3 Authority Key Identifier:
keyid:A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/Sd9Inu8fRPZCviAypagCQcKKkmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.246.213.0-143.246.214.255
143.246.223.0/24
IPv6:
2a0f:5f44::/48
Signature Algorithm: sha256WithRSAEncryption
b8:c4:5d:fc:d4:74:89:3b:3d:9a:8f:c0:69:f0:f5:6d:1a:03:
b9:1e:cc:e7:89:a6:fd:c6:c0:27:11:cc:b2:b7:86:a6:0a:13:
59:e9:9e:06:53:18:18:a0:77:73:50:d2:55:63:78:c0:cb:7f:
d5:43:a2:77:64:37:3d:96:80:dd:82:5e:47:b2:ee:76:92:cf:
64:ac:cc:f4:42:4a:df:23:ef:0e:1a:77:92:68:e5:e1:24:c6:
7b:eb:4c:77:ac:31:74:37:c0:a4:de:85:44:e0:fd:bc:5b:61:
f6:39:d5:d6:30:87:33:a7:e8:72:06:a8:89:12:eb:be:ca:00:
8c:92:3f:40:13:f7:4f:81:ba:57:09:cd:82:fc:c2:27:83:d7:
60:b3:b8:fc:e1:b2:d8:8b:19:49:e7:3e:31:c7:22:24:1a:5b:
ad:b1:6a:35:51:0a:a0:51:b0:f4:7c:44:65:75:32:4e:dd:be:
92:b2:f0:3c:69:0c:cb:2d:6f:55:18:cf:f3:d9:dd:0f:77:fa:
a8:ae:67:d3:fe:62:e0:e8:22:f9:07:9e:aa:0c:ac:87:c8:ac:
87:5e:f4:ed:40:4b:06:42:7f:0a:69:a6:cb:5c:76:87:db:5d:
56:40:af:3c:60:f6:f3:57:fb:39:7e:75:26:56:cf:14:92:ff:
c2:34:3e:8e
-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgISAaA5fdT9TLB09loXxQx0nGmZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2ZWQ0NDJiOTFkNGU4M2E2ZGUzOWZiNjc5NzFhMWU3OWM2
YjFlZDUwHhcNMjYwODI1MTUxNTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OWRmNDg5ZWVmMWY0NGY2NDJiZTIwMzJhNWE4MDI0MWMyOGE5MjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJcpffW4ebu3jwnq/9IHVijj1Vpr
au+CBmPEgIAJGFmj0upLvOW3tqI9X7dg8AQOW9OoFJPhbFl6oCG/hOXC78JZbxr9
0orpXTUGpzYAriP34O8qWjhTIDQuEo94w8Le5JdTLzjdXBsioS9XCinCEls+QwJn
aqIhETORhgd+6A4WPFZiFmfhuHRVXJ5vPQrCCt7lstqyr5hTz6/uo9QNcYIW/62Z
8WZB+k9kiGI7jn//CibvIDL9GXyRwOVleaDXGfGFoRllDLbEw6lO+33s8KkHDMEU
qf0imXheEdTHZolVBFF4W7gsdPQ/EZR5nfdzIRXTrQjI5uZeItIIA6nKLQIDAQAB
o4ICKDCCAiQwHQYDVR0OBBYEFEnfSJ7vH0T2Qr4gMqWoAkHCipJsMB8GA1UdIwQY
MBaAFKbtRCuR1Og6beOftnlxoeecax7VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHUxRUs1SFU2RHB0NDUtMmVYR2g1NXhySHRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS81NTNkYzYtMTJkMC00ZDRhLWEyOTQt
OTdjNWQ1OWIwYmJmLzEvU2Q5SW51OGZSUFpDdmlBeXBhZ0NRY0tLa213LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS81NTNkYzYtMTJkMC00ZDRhLWEyOTQtOTdjNWQ1OWIwYmJm
LzEvcHUxRUs1SFU2RHB0NDUtMmVYR2g1NXhySHRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTAaBAIAATAUMAwDBACP9tUD
BACP9tYDBACP9t8wDwQCAAIwCQMHACoPX0QAADANBgkqhkiG9w0BAQsFAAOCAQEA
uMRd/NR0iTs9mo/AafD1bRoDuR7M54mm/cbAJxHMsreGpgoTWemeBlMYGKB3c1DS
VWN4wMt/1UOid2Q3PZaA3YJeR7LudpLPZKzM9EJK3yPvDhp3kmjl4STGe+tMd6wx
dDfApN6FROD9vFth9jnV1jCHM6focgaoiRLrvsoAjJI/QBP3T4G6VwnNgvzCJ4PX
YLO4/OGy2IsZSec+McciJBpbrbFqNVEKoFGw9HxEZXUyTt2+krLwPGkMyy1vVRjP
89ndD3f6qK5n0/5i4Ogi+Qeeqgysh8ish1707UBLBkJ/Cmmmy1x2h9tdVkCvPGD2
81f7OX51JlbPFJL/wjQ+jg==
-----END CERTIFICATE-----
Generated at Sat Sep 5 03:52:26 2026 by rpki-client