Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/1I4mp1nJov8rZzS_4-0BcEqqnjk.roa
File: 1I4mp1nJov8rZzS_4-0BcEqqnjk.roa (raw, json)
Hash identifier: mEqMKFV4kEBur+F80iRBU8t/2yLel6ieX6dXb1h5aFI=
Subject key identifier: D4:8E:26:A7:59:C9:A2:FF:2B:67:34:BF:E3:ED:01:70:4A:AA:9E:39
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A061D989D41E0A6E05EEEFCCC250D1A332
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/1I4mp1nJov8rZzS_4-0BcEqqnjk.roa
Signing time: Wed 02 Sep 2026 11:20:41 +0000
ROA not before: Wed 02 Sep 2026 11:20:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218798
IP address blocks: 2a06:9801:fc5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:61:d9:89:d4:1e:0a:6e:05:ee:ef:cc:c2:50:d1:a3:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Sep 2 11:20:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d48e26a759c9a2ff2b6734bfe3ed01704aaa9e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1d:a6:6e:55:42:b4:e5:94:bd:91:f6:22:8d:
1b:e2:70:31:f0:91:5e:34:37:d3:f4:cb:c2:a8:c8:
c4:f7:b6:92:0a:2d:4f:3c:50:eb:48:cc:c3:ce:a3:
98:cc:f0:e0:44:e1:52:dc:97:96:e1:39:b5:0d:9a:
10:fe:f3:a6:35:71:cf:2f:86:ea:c5:d6:99:d2:31:
a3:2a:3b:5a:2c:41:17:84:69:1e:a1:38:2d:b2:3d:
92:1a:2b:9a:72:95:35:2a:96:1d:61:70:81:f0:02:
f6:b0:1c:c6:ed:16:00:14:1d:99:95:1d:9c:00:21:
25:53:12:55:fe:4c:89:10:48:dd:6c:6a:8f:3c:dd:
4e:55:9c:f4:8a:d4:71:0b:ed:d6:03:ba:cc:c4:db:
2c:db:64:23:c8:bd:58:98:8d:f6:6d:c6:14:40:6a:
d2:fe:3a:7a:41:cf:6d:5c:a2:53:43:1e:a0:32:04:
b0:40:5a:15:76:75:1b:36:7e:ca:f7:ff:cc:9b:05:
38:3f:b8:63:9d:7f:0e:dd:84:d5:8f:63:5d:49:32:
a5:bf:00:89:52:10:97:98:0c:c8:28:e7:1c:cc:bc:
18:88:1e:44:aa:b1:e2:62:f7:1f:bf:0c:84:39:2c:
8e:5b:4b:87:27:49:b5:3a:3e:08:82:cd:b3:e4:c2:
ad:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8E:26:A7:59:C9:A2:FF:2B:67:34:BF:E3:ED:01:70:4A:AA:9E:39
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/1I4mp1nJov8rZzS_4-0BcEqqnjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:fc5::/48
Signature Algorithm: sha256WithRSAEncryption
3e:bc:22:34:6a:0c:37:c6:ca:95:70:33:0c:bf:ec:a4:ea:da:
39:52:e2:3c:a8:52:f7:83:4f:5d:b1:7f:8b:20:ed:f5:45:06:
ba:c9:9f:4c:72:78:b9:bc:27:b6:db:06:ed:23:91:cc:2c:20:
b3:00:fc:ad:85:b5:b5:51:bf:fa:10:bf:c0:0e:e9:85:56:84:
f1:16:b5:88:d7:b3:76:59:3f:92:b3:cd:f8:43:5a:17:76:83:
d1:29:f4:94:1e:1b:15:9a:ab:50:e7:21:0b:be:fa:be:30:59:
ad:14:06:7e:39:ec:7d:53:22:8c:d9:69:08:6d:a6:c9:2c:9d:
1f:5e:df:a4:ae:43:6f:c6:67:81:4f:4a:00:fb:a3:13:9e:56:
44:52:67:b3:1d:23:9b:89:af:09:a4:26:16:5a:41:55:8e:e0:
c4:42:b6:81:b8:1d:19:70:c2:54:33:21:6e:18:25:67:4d:14:
04:e2:9b:91:78:15:10:39:22:5d:a1:f1:3d:00:fd:52:4b:63:
50:27:80:0f:05:a5:98:51:99:b1:6f:50:f3:e6:2e:ab:c6:20:
6c:2a:c4:f1:40:cb:65:04:f9:53:b9:d7:6e:ef:25:0d:47:8c:
82:5e:3f:a3:a9:e6:bc:29:84:bd:26:32:15:15:2c:e0:9a:e2:
da:98:0d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 02:27:21 2026 by rpki-client