Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/0FjKiy6GnO5uBcIOEPm4ylQMudA.roa
File: 0FjKiy6GnO5uBcIOEPm4ylQMudA.roa (raw, json)
Hash identifier: 2qz8MD3WN0mY3a90dkv/MUPUrJoCBT/TFj5FqPDgu1c=
Subject key identifier: D0:58:CA:8B:2E:86:9C:EE:6E:05:C2:0E:10:F9:B8:CA:54:0C:B9:D0
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A0AA2B9A95202A01B9CD30C0986A65B698
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/0FjKiy6GnO5uBcIOEPm4ylQMudA.roa
Signing time: Wed 16 Sep 2026 12:22:59 +0000
ROA not before: Wed 16 Sep 2026 12:22:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218652
IP address blocks: 2a06:9801:1561::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:aa:2b:9a:95:20:2a:01:b9:cd:30:c0:98:6a:65:b6:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Sep 16 12:22:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d058ca8b2e869cee6e05c20e10f9b8ca540cb9d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e1:f8:ac:ee:83:3f:19:c3:32:35:a6:33:a6:
c4:49:87:44:10:51:95:cd:cc:c2:e1:1e:67:78:33:
b6:b4:8d:93:e7:fe:a3:58:c2:27:de:26:ed:50:24:
82:4f:ab:2f:8b:c1:40:9c:61:3d:fd:27:a9:b2:b6:
2a:47:9e:25:81:a6:28:9c:a6:5e:4f:45:8d:72:8d:
35:31:5a:b1:c4:87:99:b3:9d:92:af:be:0a:d8:11:
e5:3a:4a:9e:a7:03:db:f3:ee:b7:98:81:90:30:e9:
9a:66:c4:02:be:a2:ea:20:9f:93:4a:16:0a:34:58:
2c:e1:98:a0:4a:fd:91:df:a0:20:3e:3c:91:42:c9:
82:7b:14:5a:9e:48:f2:9e:bd:a8:1d:49:70:0a:92:
19:0b:2a:0b:83:99:cf:cf:aa:ed:a9:7e:62:66:68:
b8:41:2a:fa:78:8b:73:e0:d0:e2:5b:66:ce:cb:20:
0e:7d:53:83:e1:29:2e:fe:91:ba:8a:a0:80:00:da:
50:2b:90:9b:4d:d0:f1:97:83:83:f7:27:e3:db:df:
10:55:20:7a:7f:05:75:25:d6:c6:91:de:0f:82:83:
cd:50:cc:44:b7:73:a2:8b:57:65:ee:6d:ae:dd:f7:
0b:44:27:eb:76:2c:b2:d3:a9:04:b0:09:b6:6a:29:
09:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:58:CA:8B:2E:86:9C:EE:6E:05:C2:0E:10:F9:B8:CA:54:0C:B9:D0
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/0FjKiy6GnO5uBcIOEPm4ylQMudA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:1561::/48
Signature Algorithm: sha256WithRSAEncryption
99:14:fd:75:2f:ab:6c:98:c0:a3:c7:d7:37:d1:44:a4:00:32:
c1:a7:1c:69:56:81:01:f0:72:ed:b4:6a:6e:8b:dc:d9:99:52:
47:0f:fc:c1:0a:28:97:b2:b8:e1:d1:54:14:17:c8:64:b3:7f:
73:52:a2:99:7f:21:e9:57:6d:01:31:b1:ed:e9:33:2e:4b:82:
1d:14:65:36:5f:c3:29:8a:c1:1a:51:38:42:53:29:dc:f7:23:
44:7e:79:f8:ea:52:c8:f4:10:19:8b:c5:5a:37:12:fe:9a:ec:
db:4b:00:c9:84:da:4b:84:60:1d:9c:02:fe:04:22:a4:b9:5b:
ba:54:9e:19:c6:1c:65:82:18:cc:9a:bc:78:52:a3:c6:f4:c9:
7a:5b:3e:88:2c:62:ae:ed:de:57:8e:db:8d:ad:eb:60:aa:11:
37:ad:af:8d:77:e1:a7:09:82:9b:02:8f:f1:d1:55:3d:6e:a5:
81:d2:8e:37:37:37:44:80:e2:b1:0a:9e:dc:b3:95:86:16:e6:
cd:d2:a9:5a:60:9f:f4:c1:f8:f1:f6:ef:38:54:63:ee:85:3c:
30:a2:64:6b:a4:82:17:18:ae:1b:61:4d:94:7f:d9:92:37:f0:
e4:78:c8:97:bb:2b:ee:77:2f:34:7e:e5:37:7b:57:37:29:0d:
4b:80:78:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:07:54 2026 by rpki-client