Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/1sWd_i4Xirz7c5cjP8Dq6afq2iA.roa
File: 1sWd_i4Xirz7c5cjP8Dq6afq2iA.roa (raw, json)
Hash identifier: Wz5i0U7ELGBEolIBflQO2IE7PvpJ/EIyIPgjkiTSTyg=
Subject key identifier: D6:C5:9D:FE:2E:17:8A:BC:FB:73:97:23:3F:C0:EA:E9:A7:EA:DA:20
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A1AC97FE7B49D1559EB0F08C2FC5C3829D
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/1sWd_i4Xirz7c5cjP8Dq6afq2iA.roa
Signing time: Thu 05 Nov 2026 16:43:24 +0000
ROA not before: Thu 05 Nov 2026 16:43:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218160
IP address blocks: 2a06:9801:159e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ac:97:fe:7b:49:d1:55:9e:b0:f0:8c:2f:c5:c3:82:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Nov 5 16:43:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d6c59dfe2e178abcfb7397233fc0eae9a7eada20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:18:e3:1a:fa:ac:56:91:e5:84:68:fe:9e:50:
21:c3:7e:0b:14:be:5b:8a:49:d7:12:44:3f:65:11:
92:d9:9c:9f:4c:3a:fb:cc:fa:6c:b6:2a:e0:2b:a2:
de:3a:6a:94:9b:ba:bf:1e:76:86:1a:e3:c9:57:db:
b4:b7:ac:2a:19:61:14:04:86:e9:cf:84:82:c7:6c:
97:e5:c3:06:94:0b:68:17:02:78:67:2c:68:8d:70:
c7:1d:f9:fc:33:97:ad:02:c5:a7:91:91:d5:a1:d0:
b6:ff:bc:9b:71:27:50:1e:60:47:2c:7b:d6:ff:41:
ee:37:68:25:7b:f2:c0:0a:72:11:db:32:5a:b6:4f:
f9:d8:46:c0:14:0f:8e:57:14:38:e2:ab:69:58:04:
3d:3d:e1:f2:09:d0:51:58:be:51:5c:66:b3:8e:4d:
9e:e1:a8:51:dc:f4:c1:c6:a1:74:e5:3a:b6:3b:90:
d2:1a:74:3d:63:e9:97:da:6e:19:8f:73:b3:6d:75:
3c:73:05:88:98:f6:5a:61:f1:5c:0d:d1:0f:54:13:
d4:36:96:80:62:16:69:3a:a7:a6:c9:da:e0:67:4d:
a6:da:45:7f:05:49:1c:45:44:06:52:56:bc:cf:c0:
0e:89:ba:44:55:c4:f8:55:e7:b2:3d:1f:5f:f0:fd:
30:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C5:9D:FE:2E:17:8A:BC:FB:73:97:23:3F:C0:EA:E9:A7:EA:DA:20
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/1sWd_i4Xirz7c5cjP8Dq6afq2iA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:159e::/48
Signature Algorithm: sha256WithRSAEncryption
8c:5f:56:f4:cf:e3:08:6f:2d:e0:58:e4:7d:a0:86:89:27:a4:
88:50:f0:76:b9:e0:16:e5:26:f9:08:5f:cc:2c:39:d8:21:cb:
d7:13:fe:37:8b:1b:d1:1d:b1:ff:87:a7:72:cc:a0:3c:35:00:
6a:66:5b:a0:5a:93:4c:58:6c:26:36:09:45:58:6e:14:cd:21:
a1:2c:e5:2c:a2:b0:cb:fd:e0:99:eb:28:0b:5e:a7:da:d3:70:
5c:06:7f:c5:20:49:07:c0:1e:78:f7:c2:12:7d:36:53:43:9c:
05:0a:6b:a9:40:4a:72:c4:0d:f9:36:b4:ce:c8:8a:d7:1b:13:
21:f5:b5:5c:18:34:ea:7d:9c:5c:bc:89:48:b9:bf:39:21:5c:
b4:4a:2e:7f:49:9c:3c:48:93:5b:a9:34:55:b9:5e:18:e1:7e:
d7:96:d8:69:72:e1:ce:c4:f6:c6:f3:bf:53:38:c6:6c:57:09:
4f:a7:f0:74:71:10:c9:3e:d2:54:f1:d7:84:92:da:5b:de:78:
67:60:35:dc:c2:b1:71:a5:85:61:d2:7f:b4:fe:72:92:46:7c:
c8:9a:23:9f:3a:da:dd:78:54:2c:b6:92:8f:40:1a:12:16:68:
d3:1b:0b:5d:71:e3:80:e2:95:7f:be:8c:1e:68:8e:8b:03:23:
a0:14:3b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:56:47 2026 by rpki-client