Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/0d-1i6twk1qz0gkL5guvmnlDtlM.roa
File: 0d-1i6twk1qz0gkL5guvmnlDtlM.roa (raw, json)
Hash identifier: WGpHUAy8T75DxlZ/Q5gVkhJZ2C75TB8Lbo9xdq+2ESk=
Subject key identifier: D1:DF:B5:8B:AB:70:93:5A:B3:D2:09:0B:E6:0B:AF:9A:79:43:B6:53
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019C54013C6514891786C349DE2FC91361D2
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/0d-1i6twk1qz0gkL5guvmnlDtlM.roa
Signing time: Thu 12 Feb 2026 22:38:13 +0000
ROA not before: Thu 12 Feb 2026 22:38:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211708
IP address blocks: 2a06:9801:19::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:54:01:3c:65:14:89:17:86:c3:49:de:2f:c9:13:61:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Feb 12 22:38:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d1dfb58bab70935ab3d2090be60baf9a7943b653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e2:3a:9d:3c:bd:13:4b:50:d3:98:36:8c:e4:
d0:44:76:5b:4f:68:72:0f:34:6a:68:a9:52:f3:62:
86:5a:ee:50:f1:53:1c:23:06:da:ef:87:29:97:21:
09:fb:e9:d5:bd:43:7d:10:b2:fc:bc:a1:83:56:db:
36:4a:cb:34:a3:0d:10:db:7a:29:e3:8e:09:57:65:
ef:39:d7:20:77:c2:15:9b:8c:a3:27:7d:6b:18:f4:
9a:96:88:27:bd:aa:fc:93:5c:45:75:50:2a:60:32:
2a:9c:74:7e:4e:8b:26:52:be:1e:8f:d9:64:6a:7b:
a7:ec:8e:e8:26:58:a1:dd:40:d4:8e:ad:d5:28:bb:
b3:21:cf:b8:11:11:b5:e3:55:30:63:78:ff:cb:d8:
f9:65:f8:ac:0b:c2:e7:74:0a:8d:4d:8c:d5:97:76:
e6:75:c9:f0:f3:c8:12:3f:f9:7b:53:51:8b:68:1b:
5c:75:37:97:e7:f4:7a:0a:10:9e:b6:6f:5b:08:4c:
c1:76:19:53:1e:b7:2d:54:41:13:77:52:94:d2:a6:
79:87:b1:4e:2d:d5:a8:6d:f5:35:bf:79:79:35:96:
fb:29:b3:d6:09:93:2d:fa:be:c4:02:7f:b7:91:6b:
bd:b8:47:2c:a5:d6:bc:ee:32:e4:9e:9e:9d:08:27:
d6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DF:B5:8B:AB:70:93:5A:B3:D2:09:0B:E6:0B:AF:9A:79:43:B6:53
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/0d-1i6twk1qz0gkL5guvmnlDtlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:19::/48
Signature Algorithm: sha256WithRSAEncryption
1b:61:f2:1f:60:4d:5b:ef:94:fa:f6:8a:a2:7d:49:c9:2e:73:
86:e7:20:b8:d3:85:2a:90:d3:2c:48:bd:cf:99:1e:b0:3e:23:
12:bd:62:42:c9:75:0d:10:ec:8a:17:86:be:05:a7:b4:47:16:
7e:66:c2:e8:9c:12:76:01:a4:18:5e:dc:94:70:af:9d:70:2d:
89:14:ab:0e:6b:85:f7:f7:c6:21:16:78:5b:39:32:d5:10:2f:
aa:00:f5:8f:e8:1f:a6:5d:22:56:ca:4a:d5:c3:49:66:d7:1f:
2b:3b:db:9c:f1:28:03:29:45:fd:74:67:11:33:eb:ec:fe:a2:
c0:3a:71:be:f1:3f:07:b3:e0:55:06:62:39:ae:87:60:6e:72:
10:59:77:a3:94:18:10:6e:fc:26:f0:3f:22:f2:ec:50:aa:1e:
89:69:5d:c1:37:a1:34:48:9c:2a:9e:43:b8:a9:a5:5b:83:b3:
a1:0b:16:43:b6:17:e0:f0:ae:92:b4:4a:6b:da:df:da:1e:ca:
b1:e9:c8:0c:bd:ad:a6:77:b1:46:0d:1c:38:f4:aa:75:3b:69:
13:33:f4:57:66:13:25:ca:fc:b0:73:cb:0b:6f:b0:13:7b:94:
ac:c6:2a:f6:1e:80:81:b3:4a:5f:56:8b:0f:b9:19:df:c9:f4:
36:c5:18:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:32:33 2026 by rpki-client