Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/1-Ce6mUoSNG040NyDY7hKPb3y2g4.roa
File: 1-Ce6mUoSNG040NyDY7hKPb3y2g4.roa (raw, json)
Hash identifier: eEDo4C7WprkWReQppF4WJkysxxZG/iBE88n9lrYpMXs=
Subject key identifier: F8:27:BA:99:4A:12:34:6D:38:D0:DC:83:63:B8:4A:3D:BD:F2:DA:0E
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019C8CCCF0BD56CEB620B425385A89502921
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/1-Ce6mUoSNG040NyDY7hKPb3y2g4.roa
Signing time: Mon 23 Feb 2026 23:19:26 +0000
ROA not before: Mon 23 Feb 2026 23:19:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201164
IP address blocks: 2a06:9801:5b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8c:cc:f0:bd:56:ce:b6:20:b4:25:38:5a:89:50:29:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Feb 23 23:19:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f827ba994a12346d38d0dc8363b84a3dbdf2da0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:49:16:92:84:d9:1e:07:a8:da:c5:c1:53:d8:
4b:be:e5:e1:9a:46:83:43:8c:1d:88:67:2f:ed:0f:
fa:d3:1b:2b:c2:4d:94:6e:7b:a9:76:34:c1:77:8e:
a3:85:4e:7a:1b:67:e0:e4:ca:26:d3:14:27:e9:67:
b9:8f:0e:4b:49:29:6e:2e:d4:7d:c1:4a:e6:56:07:
e1:b5:1f:13:59:36:e2:18:eb:c1:86:53:48:0a:78:
5e:60:2f:f2:a1:da:9f:4e:02:b9:31:08:68:44:80:
1a:28:ef:63:0e:ae:48:f3:d7:53:e5:40:1d:31:5f:
63:de:d9:8c:ff:d8:be:22:4c:8f:ae:06:3f:ba:21:
50:6f:52:31:2c:0a:3b:d7:53:1c:7f:e5:00:88:87:
e0:df:18:4a:9a:2a:8c:41:9e:b4:07:b7:59:50:ce:
2b:be:3a:38:5d:3b:35:09:b6:82:12:d3:93:3d:ab:
8b:d4:61:84:08:6d:60:ac:2b:14:f2:93:63:c0:15:
59:e0:50:40:15:70:86:45:c3:4f:a1:42:ce:e1:7b:
b6:39:6d:23:78:f0:3c:05:1f:d6:e2:51:04:8a:de:
45:2d:c5:81:7f:dd:6a:f1:ef:d5:96:23:1d:ce:18:
c1:6b:cf:b1:4e:03:fa:bf:07:b0:a0:cd:d3:02:6c:
33:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:27:BA:99:4A:12:34:6D:38:D0:DC:83:63:B8:4A:3D:BD:F2:DA:0E
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/1-Ce6mUoSNG040NyDY7hKPb3y2g4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:5b::/48
Signature Algorithm: sha256WithRSAEncryption
a0:40:44:be:1e:cd:f0:01:10:28:b5:1c:b6:a7:ad:1d:52:ab:
f4:62:ed:62:ce:08:2c:1d:2d:d2:eb:d6:c7:4e:df:71:2f:2b:
d2:59:0b:da:5c:6e:e0:46:44:59:f9:c3:66:18:8c:3c:67:1d:
ca:8a:c9:a1:44:c4:f8:7c:66:70:db:e1:72:15:c4:9b:48:84:
bc:c8:5f:b1:f1:70:7b:e9:bc:ad:ce:7c:d7:3e:84:ed:ce:de:
d7:6c:7a:b1:e6:29:af:9f:ab:32:ae:54:77:3e:ba:70:48:9b:
91:5b:17:19:fb:b6:ba:8c:2f:7e:50:41:74:14:f7:a8:da:56:
51:3c:c5:0f:73:47:57:be:2c:38:48:11:8b:88:11:b8:3a:65:
47:5b:f2:b4:c5:d1:42:c8:86:85:00:ff:ba:97:1d:92:dd:b2:
b1:15:f1:bc:9d:31:9d:66:b3:91:3a:0b:88:6c:c8:55:49:aa:
26:15:f3:bb:c3:7a:84:00:f3:d7:04:d5:ab:e5:f2:01:09:84:
13:7f:f2:ba:60:84:9b:60:a2:08:10:60:23:f6:93:21:20:ba:
e2:5c:c0:6d:23:70:d4:bb:14:88:ac:20:94:92:91:24:89:cd:
81:7a:26:28:33:92:50:79:2f:5d:47:ea:af:89:06:29:1a:2d:
29:f3:a9:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:08:52 2026 by rpki-client