Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/1MY1crVsnTg78jqS8gWfnHB9I0o.roa
File: 1MY1crVsnTg78jqS8gWfnHB9I0o.roa (raw, json)
Hash identifier: GQwUXAPhVp0j4HA2wuaYUpxtbsO9JJOrOZYkRVBe46s=
Subject key identifier: D4:C6:35:72:B5:6C:9D:38:3B:F2:3A:92:F2:05:9F:9C:70:7D:23:4A
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019EB726C6C47636ECF98AF43BAC699F6C3C
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/1MY1crVsnTg78jqS8gWfnHB9I0o.roa
Signing time: Thu 11 Jun 2026 14:47:12 +0000
ROA not before: Thu 11 Jun 2026 14:47:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219458
IP address blocks: 2a06:9801:79f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:26:c6:c4:76:36:ec:f9:8a:f4:3b:ac:69:9f:6c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jun 11 14:47:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4c63572b56c9d383bf23a92f2059f9c707d234a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7c:21:0a:3a:7c:18:39:2f:57:c5:4f:4c:63:
1f:9f:fd:47:55:92:bb:4e:3e:10:f9:b7:eb:24:87:
5f:4e:d3:11:a4:39:7f:a7:24:f6:d0:19:64:45:3f:
09:e2:d2:25:6f:f9:0c:ce:9f:e9:c9:3f:02:6f:cd:
8e:69:53:a7:02:26:e3:98:f1:d7:84:50:61:e1:fd:
97:2f:c3:5c:a0:c3:9c:94:ce:da:0a:4f:34:61:f3:
fc:d5:04:b4:4b:7b:b9:87:80:35:21:29:68:2a:ca:
1c:24:b1:a2:47:0b:81:03:55:9b:6f:61:57:5a:81:
e2:71:e1:91:25:12:8c:a2:f4:11:9d:39:08:5f:4d:
80:4c:86:88:fb:f3:80:af:79:f6:2e:0d:86:6b:ac:
01:cd:97:a8:bb:31:7f:89:ad:8f:da:2a:d1:97:04:
c5:c8:8e:0c:f5:de:97:f6:c4:76:4e:9b:42:15:9e:
c5:2d:9f:a4:d2:a7:3f:06:22:f2:81:6c:b3:24:ac:
ae:66:aa:d4:86:1b:fd:6c:44:73:ef:11:69:05:4c:
43:9a:1a:a3:77:30:86:e4:c5:eb:76:dc:89:85:2b:
5f:89:1b:ad:15:5e:69:bf:80:7d:ac:a7:09:07:38:
ce:3b:28:27:86:51:38:dd:da:36:ae:66:6c:99:9d:
d4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C6:35:72:B5:6C:9D:38:3B:F2:3A:92:F2:05:9F:9C:70:7D:23:4A
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/1MY1crVsnTg78jqS8gWfnHB9I0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:79f::/48
Signature Algorithm: sha256WithRSAEncryption
55:72:83:77:01:8a:d2:8b:09:3f:eb:d1:41:4c:87:0b:8c:73:
8f:f4:5c:b1:80:4b:5b:25:ab:4d:c8:fb:2a:a6:15:ed:bb:05:
a7:98:df:3d:39:eb:cf:d9:12:e5:4c:4b:8c:71:5e:ca:54:b6:
47:9c:07:96:26:11:fc:9f:65:ef:30:b6:7c:a4:78:62:42:78:
f1:f2:5f:c8:5f:d5:2a:9c:a6:ee:49:20:5a:5e:52:cc:e4:24:
75:8c:e4:3e:d9:87:b5:7a:6b:aa:20:c0:dc:e5:be:80:78:ad:
eb:92:9d:e1:58:8a:62:e4:49:73:b1:8f:30:51:25:7a:47:14:
45:bf:b8:c3:8f:c8:b6:c0:84:1d:cb:9a:bf:f9:ec:67:fd:3a:
73:fe:ed:e5:bd:88:25:c1:f7:fe:68:85:b5:ba:e0:f5:2a:90:
03:d5:1f:ad:29:18:30:5f:9d:5c:4c:f7:45:99:e9:74:39:5d:
77:ff:53:2f:fa:64:8b:45:fb:49:5e:be:23:50:e7:5b:2d:1e:
f7:43:1c:9e:72:d0:0d:99:86:77:c7:76:00:8e:e2:30:7c:79:
d5:9e:0f:29:9a:af:c0:58:52:42:9f:6b:30:24:33:a4:b9:ac:
30:35:0f:e4:c5:dc:d5:8a:0e:85:e9:23:6e:4e:98:16:21:02:
01:39:11:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:20:40 2026 by rpki-client