Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/1DUcKkQLZvVV5D_fVevUvZD7T14.roa
File: 1DUcKkQLZvVV5D_fVevUvZD7T14.roa (raw, json)
Hash identifier: 8vcN7UTYo1H6Z6hqaZ8sCLWk+eKQH1iinZYN6spWx24=
Subject key identifier: D4:35:1C:2A:44:0B:66:F5:55:E4:3F:DF:55:EB:D4:BD:90:FB:4F:5E
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019C690C34871D3157385C3007DC4B8AACF3
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/1DUcKkQLZvVV5D_fVevUvZD7T14.roa
Signing time: Tue 17 Feb 2026 00:42:13 +0000
ROA not before: Tue 17 Feb 2026 00:42:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201132
IP address blocks: 2a06:9801:50::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:69:0c:34:87:1d:31:57:38:5c:30:07:dc:4b:8a:ac:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Feb 17 00:42:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4351c2a440b66f555e43fdf55ebd4bd90fb4f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ab:f2:3c:18:b7:e6:9d:88:96:4a:29:0c:f0:
4b:73:db:a4:cc:63:37:28:f0:71:f1:6e:fa:1a:cd:
81:d2:fc:43:46:fc:c8:0a:f5:16:a1:84:c6:a4:9c:
ff:06:d9:27:dc:79:54:2e:79:d9:77:38:c0:ff:ab:
d7:f3:44:67:bd:0b:cd:47:6b:f6:27:f4:ad:de:36:
9f:a2:10:e3:25:57:13:a6:07:2f:b5:46:68:fa:ed:
bb:10:6e:bd:64:88:8e:96:e0:4a:3b:39:77:00:05:
b2:82:da:40:63:67:98:27:23:ab:8b:85:46:0a:ee:
de:cf:7f:7b:80:49:95:7d:2f:58:56:30:24:ba:5d:
6e:e4:b4:6a:f5:04:a6:22:a2:42:83:9e:a0:97:54:
5a:15:bc:76:e3:5e:5b:17:0e:be:ab:c4:f9:31:64:
f3:ef:4a:57:42:85:b4:9f:89:f2:fc:d3:c1:17:c2:
b1:09:8a:9b:08:94:d5:55:32:b6:c0:50:69:71:91:
4f:5c:d3:74:b8:b1:8c:c6:ab:5a:5b:1e:41:63:e3:
97:e3:20:2b:b8:7e:f6:41:57:62:fd:a7:36:28:09:
3f:3f:af:8c:1d:9c:2c:51:8a:94:ed:9e:b1:b0:fd:
5f:06:37:85:47:a9:1f:1e:2c:70:05:a6:99:e1:04:
43:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:35:1C:2A:44:0B:66:F5:55:E4:3F:DF:55:EB:D4:BD:90:FB:4F:5E
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/1DUcKkQLZvVV5D_fVevUvZD7T14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:50::/48
Signature Algorithm: sha256WithRSAEncryption
74:13:57:c3:06:1d:01:15:04:7d:d8:c3:50:9a:ce:a3:bf:06:
06:5e:44:95:ff:d0:7f:f8:e2:26:3d:17:dd:8b:76:18:b2:c8:
82:85:55:7e:89:9e:c2:9a:40:79:eb:59:77:19:18:3d:65:98:
6d:88:87:8c:eb:3a:08:fb:44:27:40:f4:db:c4:b8:1f:0a:6f:
fb:50:b9:ef:c5:da:d6:7b:50:c8:d2:ca:fd:4e:3f:85:93:e2:
58:d0:e8:f2:f1:44:07:d9:dc:e6:0b:04:c2:96:e5:80:89:cd:
bb:79:26:68:6c:de:61:c3:3c:b0:1d:41:62:39:ea:3e:84:ed:
e2:59:f9:cd:05:30:8c:b3:9d:fa:95:26:8f:47:4a:4a:c4:7b:
10:44:93:73:0a:04:76:4d:15:d0:eb:f6:12:40:2d:49:77:99:
63:c8:2a:8e:42:52:16:17:59:04:8f:a3:56:65:62:17:98:a3:
d2:0e:9b:f3:a2:09:cd:c8:ae:36:4f:91:fa:08:4f:40:fa:8d:
f6:29:11:d6:35:9a:f2:85:b7:08:06:fb:8c:36:1d:1c:db:15:
0e:08:07:75:71:fb:8d:20:7e:17:d2:48:24:82:d0:ff:78:db:
0a:3b:01:4a:a9:03:78:5a:ac:05:d0:54:5b:0d:53:f8:1e:0c:
45:60:9c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:47:11 2026 by rpki-client