Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/2A-L7ze1IQMdjAnRWGJCxhThN7Q.roa
File: 2A-L7ze1IQMdjAnRWGJCxhThN7Q.roa (raw, json)
Hash identifier: i+w+5Rr6b2BTSxl6dcvU8NqktuWrZowzgVFibanTz54=
Subject key identifier: D8:0F:8B:EF:37:B5:21:03:1D:8C:09:D1:58:62:42:C6:14:E1:37:B4
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019EB730402E3F4FEE2D313D1A096BDE7340
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/2A-L7ze1IQMdjAnRWGJCxhThN7Q.roa
Signing time: Thu 11 Jun 2026 14:57:33 +0000
ROA not before: Thu 11 Jun 2026 14:57:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219455
IP address blocks: 2a06:9801:79d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:31:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:30:40:2e:3f:4f:ee:2d:31:3d:1a:09:6b:de:73:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jun 11 14:57:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d80f8bef37b521031d8c09d1586242c614e137b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:df:51:28:b8:33:34:30:3a:29:e6:cf:f7:bc:
8e:72:38:b3:a3:f8:14:e4:ee:fa:de:c8:d0:c1:cf:
aa:da:0c:b1:f7:a7:1a:ee:0a:41:25:69:a7:fd:47:
ff:35:be:af:16:99:60:d0:61:a4:b6:20:58:b5:d0:
ec:5e:ad:aa:c0:f5:2c:5a:08:fd:3b:a9:be:04:72:
f4:6c:30:a6:b9:53:a4:1e:6a:5e:b2:1f:39:35:77:
ed:37:d5:87:4b:16:20:5a:c3:55:66:ac:64:14:d1:
44:24:f8:80:bd:72:1f:a7:58:e2:90:eb:5f:27:e8:
29:f9:9b:e2:3e:78:63:e4:72:c4:a0:4b:ec:59:63:
5f:1e:22:6c:de:52:7a:8e:54:33:0f:7b:40:a0:2b:
78:ab:86:2f:58:69:94:29:a2:02:5d:26:7f:ff:6b:
d6:0a:ab:81:8c:ee:f3:b2:dd:13:72:ff:a1:83:38:
88:f5:8b:2f:ea:38:c3:ab:97:85:33:4e:80:db:98:
ca:7b:8c:b3:f3:d7:46:e7:e2:f8:b8:d8:6e:8b:e8:
f2:99:ff:de:e7:79:b3:99:50:05:04:43:c6:29:15:
0d:4a:10:6f:ca:86:1e:dc:4e:58:1c:50:20:5c:9e:
ca:e8:d9:6c:b7:03:c0:26:a9:78:7c:aa:1a:42:6c:
65:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:0F:8B:EF:37:B5:21:03:1D:8C:09:D1:58:62:42:C6:14:E1:37:B4
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/2A-L7ze1IQMdjAnRWGJCxhThN7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:79d::/48
Signature Algorithm: sha256WithRSAEncryption
30:8c:da:4f:96:63:6d:af:e1:d8:5f:af:f5:de:c6:6f:95:b3:
8c:18:89:fb:2a:d3:dc:6e:a0:7e:8d:36:30:09:f8:8d:84:a2:
d6:bb:2c:b5:01:c7:38:6c:09:0f:ad:6c:ba:21:c2:69:68:25:
57:81:4c:0b:d6:2b:32:22:a2:34:9a:99:88:68:82:82:bd:79:
33:65:5b:91:83:63:c9:ca:eb:5c:05:a6:d5:78:2f:cf:00:85:
10:f1:c9:f9:3f:83:fe:69:f0:4e:ef:52:e9:fd:80:86:ba:ee:
66:b8:4a:c2:b8:28:e8:bb:6f:01:80:bc:15:d8:54:98:13:dc:
b5:54:f2:4a:8b:ad:01:fd:b8:3e:a2:3a:f5:75:9d:cd:79:4a:
d8:e7:fa:eb:85:ff:c7:93:84:0a:8e:a8:13:84:f1:3b:70:e1:
9a:aa:cb:0c:2d:e0:ab:ed:ff:d8:61:d0:50:c4:58:03:a6:62:
e2:53:1a:8f:69:fd:fb:0e:ce:3b:8f:34:b7:44:00:59:25:fd:
85:58:ac:d5:58:a5:2d:c1:00:8d:ed:d3:c1:63:3a:01:a9:cc:
96:8c:0d:48:b8:a3:c7:b2:13:95:23:77:4a:3c:eb:4a:5f:69:
9a:5b:d2:9f:01:14:9c:7c:2d:17:7c:94:e4:31:e7:9e:bc:46:
a8:38:da:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:05:25 2026 by rpki-client