Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/1tK6snuwTmzouKX1UQqPHM1BH0o.roa
File: 1tK6snuwTmzouKX1UQqPHM1BH0o.roa (raw, json)
Hash identifier: RgYiaU8BpERFCcXI1skxOb4iF29XIUDCBX3uZPl8qik=
Subject key identifier: D6:D2:BA:B2:7B:B0:4E:6C:E8:B8:A5:F5:51:0A:8F:1C:CD:41:1F:4A
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A0B0AC2A2A3A17F352033E8F09BAA7A810
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/1tK6snuwTmzouKX1UQqPHM1BH0o.roa
Signing time: Thu 17 Sep 2026 18:41:07 +0000
ROA not before: Thu 17 Sep 2026 18:41:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214726
IP address blocks: 2a06:9801:261::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b0:ac:2a:2a:3a:17:f3:52:03:3e:8f:09:ba:a7:a8:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Sep 17 18:41:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d6d2bab27bb04e6ce8b8a5f5510a8f1ccd411f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4d:2c:66:0d:d2:fd:77:25:a0:78:dd:31:c3:
dd:77:59:52:05:bf:9e:4d:91:7f:0a:a1:13:a5:0b:
66:89:5c:93:e7:d6:8c:c9:a2:ef:05:28:64:17:a6:
c9:65:e6:ac:1d:05:6b:1c:99:e2:50:81:0e:4e:e0:
66:36:d7:b3:9a:78:20:fd:9a:c1:54:f8:89:2d:4d:
46:8d:93:0f:66:ee:e8:88:d7:3a:32:84:2f:0f:c4:
3f:c2:e2:d6:2b:c2:a8:96:50:8f:9e:30:01:ae:3b:
9c:96:c9:b1:3b:96:91:77:b6:46:f9:a4:6b:c3:ad:
24:5f:8e:86:46:b6:bf:ac:a1:3b:04:c1:65:e6:8a:
d8:84:48:2f:ed:76:af:b4:67:5e:33:0e:9d:60:37:
ec:a6:67:91:7d:1e:74:39:a0:d9:2a:2c:bb:f7:26:
8b:fc:b4:ed:08:a6:f8:c3:80:58:63:a5:f4:da:db:
80:fc:d3:47:d3:6a:08:1e:92:b4:67:c5:b5:ea:d1:
c1:ac:f2:4b:b9:10:26:17:cd:52:1f:9c:f9:0f:ec:
4b:6e:89:43:32:dc:87:4d:91:71:64:11:af:03:dc:
4d:0d:52:5a:c1:78:a2:49:d1:c7:2b:b3:99:fa:96:
47:d2:cd:b2:f0:d0:dc:d3:97:13:74:fc:c1:b7:07:
c9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D2:BA:B2:7B:B0:4E:6C:E8:B8:A5:F5:51:0A:8F:1C:CD:41:1F:4A
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/1tK6snuwTmzouKX1UQqPHM1BH0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:261::/48
Signature Algorithm: sha256WithRSAEncryption
94:c1:e1:55:e8:fe:ba:42:1a:6d:65:3e:9f:54:a5:09:ea:02:
4c:b7:a9:93:0a:d5:fe:1d:4f:54:a2:9d:16:4a:95:e7:f9:79:
0e:4c:72:ba:70:70:b0:99:1c:6b:aa:47:d7:4f:8a:a7:41:ff:
34:43:cd:4c:f5:19:26:43:d2:eb:85:09:e0:73:7c:b5:b8:69:
0b:bb:14:e9:95:c2:dd:1e:f2:56:ac:41:38:b8:ad:3d:20:ad:
17:1d:eb:1e:b4:b4:36:5b:24:b9:a6:f1:60:6c:ed:d3:63:1b:
57:f3:da:e3:19:86:31:f6:89:cf:3f:cf:02:23:af:62:22:f2:
52:fa:b8:4a:85:05:38:7f:8d:8e:cf:bc:f6:47:f2:73:cf:d7:
a3:d6:6f:d5:0a:76:2c:30:74:b8:b6:ac:6d:61:ae:1b:16:95:
7b:74:62:34:f5:fe:05:8a:8c:e8:58:50:05:40:da:ff:b5:21:
a5:29:ef:d3:52:58:66:c1:2e:cf:f5:fd:15:d4:9b:b2:80:8b:
7b:a6:8f:2c:36:dc:e5:66:92:a7:00:a7:16:46:0a:9c:ac:b0:
cf:b4:8b:67:77:55:35:c2:ac:14:2b:bf:fc:f2:5c:12:0c:83:
0b:6a:65:4f:60:38:51:44:a0:41:62:73:3b:01:8a:31:1e:db:
00:07:ee:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:03:44 2026 by rpki-client