Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/iZ1IBZHMOSVPY1cP2YQ2mxDWXSA.roa
File: iZ1IBZHMOSVPY1cP2YQ2mxDWXSA.roa (raw, json)
Hash identifier: /iUGvduptZ/JP8lKXh14YGIQgG7bREfF9xL+2QGrNB0=
Subject key identifier: 89:9D:48:05:91:CC:39:25:4F:63:57:0F:D9:84:36:9B:10:D6:5D:20
Certificate issuer: /CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd
Certificate serial: 019FB7A970BE4A159F50C169CAE72937F1C2
Authority key identifier: 55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/iZ1IBZHMOSVPY1cP2YQ2mxDWXSA.roa
Signing time: Fri 31 Jul 2026 10:12:42 +0000
ROA not before: Fri 31 Jul 2026 10:12:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219095
IP address blocks: 143.246.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 03:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b7:a9:70:be:4a:15:9f:50:c1:69:ca:e7:29:37:f1:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd
Validity
Not Before: Jul 31 10:12:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=899d480591cc39254f63570fd984369b10d65d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9a:00:e4:1b:7a:04:51:3d:bc:55:37:80:ed:
75:53:60:f4:58:3a:fb:b4:5f:5f:74:88:c3:e6:56:
45:95:d1:25:15:01:91:fb:6d:20:8d:d1:f3:5f:87:
27:57:36:d2:84:f9:b0:ef:ac:d0:5a:a2:02:73:e4:
d3:50:0d:98:ce:83:f4:01:5e:c4:de:89:7a:68:6d:
9f:57:82:35:ea:4a:6d:85:d6:88:80:1f:a9:a2:e8:
92:a6:27:50:d8:c2:d2:a2:39:fe:92:ee:08:b1:d4:
23:c7:26:83:56:e4:b8:3d:d4:9c:a4:98:4b:eb:a8:
95:99:66:cb:90:19:6d:8e:9d:e4:27:d6:2a:f1:a2:
a9:cc:b1:b6:04:24:28:2b:58:f0:51:3f:8b:7c:47:
46:f8:bd:cd:eb:f3:ba:fe:f6:d6:85:96:97:0f:7d:
48:37:6a:8a:d4:9d:d2:af:57:18:8d:c6:41:6a:13:
ac:e2:57:93:d9:ef:0f:4e:99:bc:3b:9c:e0:59:f1:
f6:75:40:c9:4b:8f:f2:51:8d:68:6b:f4:a4:52:30:
67:69:3d:5e:31:53:31:84:94:47:e7:ab:b3:8d:f7:
76:62:92:22:f3:3c:2d:78:93:86:84:f9:a8:c7:93:
03:f9:bb:54:e9:a6:9b:90:4a:96:b5:c1:5c:78:98:
d9:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:9D:48:05:91:CC:39:25:4F:63:57:0F:D9:84:36:9B:10:D6:5D:20
X509v3 Authority Key Identifier:
keyid:55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/iZ1IBZHMOSVPY1cP2YQ2mxDWXSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.246.41.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:07:72:92:75:64:02:fa:ff:d6:56:1f:dc:da:4f:34:44:07:
14:94:91:51:43:06:54:11:b2:43:09:39:8f:4a:62:0e:01:e2:
d6:2e:62:f5:7c:b6:24:d7:b6:70:fe:cc:73:d0:ca:5a:42:18:
ab:1a:78:b9:47:7a:a8:ac:5a:47:13:81:c7:b9:5b:33:24:c0:
ae:0b:af:7e:ad:b7:20:f0:f4:33:9d:d6:32:57:44:1e:e9:2e:
14:fe:04:01:64:3c:9f:cc:6e:d5:ec:0b:2a:fa:f9:5a:53:be:
04:3b:cb:0f:6e:dd:c0:8e:52:ca:86:a7:dc:ee:09:a9:cd:ad:
f1:2c:b2:0f:97:43:e4:66:a1:3e:6e:8b:f2:60:ae:2e:ef:f5:
5b:72:33:96:38:9b:8a:69:e9:77:6f:d5:9c:5f:08:80:02:f8:
e7:51:c8:93:66:c6:b4:0e:31:cd:af:d6:20:9e:52:1b:88:3f:
0f:c5:cf:9b:06:c7:e9:92:d1:6b:e4:b3:23:90:bb:7e:f0:2e:
24:a0:23:ca:62:f3:18:73:23:24:86:2c:95:f6:4c:42:03:99:
36:04:1f:df:47:1a:a8:b4:69:aa:63:23:15:50:4c:24:cb:5c:
08:31:cf:45:f4:57:a3:72:d2:d9:0d:c6:81:9d:2d:86:a6:f0:
a4:1c:4d:d3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+3qXC+ShWfUMFpyucpN/HCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1YzliMjAyNWUwZTY5NTgwOGY2YjYxZWUyNzZhZWQ0ZmI1
NjgwY2QwHhcNMjYwNzMxMTAxMjQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTlkNDgwNTkxY2MzOTI1NGY2MzU3MGZkOTg0MzY5YjEwZDY1ZDIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZoA5Bt6BFE9vFU3gO11U2D0WDr7
tF9fdIjD5lZFldElFQGR+20gjdHzX4cnVzbShPmw76zQWqICc+TTUA2YzoP0AV7E
3ol6aG2fV4I16kpthdaIgB+pouiSpidQ2MLSojn+ku4IsdQjxyaDVuS4PdScpJhL
66iVmWbLkBltjp3kJ9Yq8aKpzLG2BCQoK1jwUT+LfEdG+L3N6/O6/vbWhZaXD31I
N2qK1J3Sr1cYjcZBahOs4leT2e8PTpm8O5zgWfH2dUDJS4/yUY1oa/SkUjBnaT1e
MVMxhJRH56uzjfd2YpIi8zwteJOGhPmox5MD+btU6aabkEqWtcFceJjZRwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFImdSAWRzDklT2NXD9mENpsQ1l0gMB8GA1UdIwQY
MBaAFFXJsgJeDmlYCPa2HuJ2rtT7VoDNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmNteUFsNE9hVmdJOXJZZTRuYXUxUHRXZ00wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82MzY2YjQtZGQ2Zi00MDQwLTg4OTUt
NzFiZTBkNTE5MTlkLzEvaVoxSUJaSE1PU1ZQWTFjUDJZUTJteERXWFNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS82MzY2YjQtZGQ2Zi00MDQwLTg4OTUtNzFiZTBkNTE5MTlk
LzEvVmNteUFsNE9hVmdJOXJZZTRuYXUxUHRXZ00wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj/YpMA0G
CSqGSIb3DQEBCwUAA4IBAQDMB3KSdWQC+v/WVh/c2k80RAcUlJFRQwZUEbJDCTmP
SmIOAeLWLmL1fLYk17Zw/sxz0MpaQhirGni5R3qorFpHE4HHuVszJMCuC69+rbcg
8PQzndYyV0Qe6S4U/gQBZDyfzG7V7Asq+vlaU74EO8sPbt3AjlLKhqfc7gmpza3x
LLIPl0PkZqE+bovyYK4u7/VbcjOWOJuKael3b9WcXwiAAvjnUciTZsa0DjHNr9Yg
nlIbiD8Pxc+bBsfpktFr5LMjkLt+8C4koCPKYvMYcyMkhiyV9kxCA5k2BB/fRxqo
tGmqYyMVUEwky1wIMc9F9FejctLZDcaBnS2GpvCkHE3T
-----END CERTIFICATE-----
Generated at Tue Aug 4 12:18:30 2026 by rpki-client