Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/2QhftBDwfHAoYSzYndUksdbdBN0.roa
File: 2QhftBDwfHAoYSzYndUksdbdBN0.roa (raw, json)
Hash identifier: 6R+OZM793DQyhhNoSqE/hq/W5QF+tYNDfHFoMWnmAvc=
Subject key identifier: D9:08:5F:B4:10:F0:7C:70:28:61:2C:D8:9D:D5:24:B1:D6:DD:04:DD
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A13D69E9ABF43624B4D51E8393DDBD7971
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/2QhftBDwfHAoYSzYndUksdbdBN0.roa
Signing time: Thu 15 Oct 2026 02:35:13 +0000
ROA not before: Thu 15 Oct 2026 02:35:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208690
IP address blocks: 2a06:9801:26::/48 maxlen: 48
2a06:9801:15bb::/48 maxlen: 48
2a06:9801:1c00::/40 maxlen: 40
2a06:9801:1c00::/48 maxlen: 48
2a06:9801:1c01::/48 maxlen: 48
2a06:9801:1c02::/48 maxlen: 48
2a06:9801:1c03::/48 maxlen: 48
2a06:9801:1c04::/48 maxlen: 48
2a06:9801:1d00::/40 maxlen: 40
2a06:9801:1d00::/48 maxlen: 48
2a06:9801:1d01::/48 maxlen: 48
2a06:9801:1d02::/48 maxlen: 48
2a06:9801:1d03::/48 maxlen: 48
2a06:9801:1d04::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:69:e9:ab:f4:36:24:b4:d5:1e:83:93:dd:bd:79:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Oct 15 02:35:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d9085fb410f07c7028612cd89dd524b1d6dd04dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:33:07:bf:58:0c:49:5c:ed:13:09:d4:61:26:
48:1d:fc:73:d7:21:48:77:b8:9a:2f:71:46:b4:11:
5e:17:db:71:ed:e6:62:85:4b:be:bb:ec:e6:6b:53:
61:22:2b:55:c2:46:26:48:41:ee:4e:f8:f2:c8:1f:
f0:0b:54:66:b3:16:9c:e1:f2:e0:86:55:ee:ac:10:
d9:e3:e2:3d:78:63:3d:7d:fe:29:d0:43:f5:a3:f4:
3a:3e:df:7b:81:01:76:43:bb:a6:ec:45:4d:81:04:
22:f5:74:05:ee:22:9f:ae:bf:78:d4:6a:00:22:db:
57:28:19:df:1e:e1:b8:69:15:94:ec:51:04:1c:72:
33:3a:da:ff:5f:0d:72:0f:be:84:a9:30:ba:99:f1:
88:42:fc:f4:63:07:a5:f3:0d:1e:e0:2a:d2:37:51:
7c:b6:00:65:49:d3:06:f4:29:69:db:b7:b7:f0:fb:
dd:06:24:e6:18:0c:ef:18:12:15:7a:e0:cb:f9:cf:
47:0e:47:20:24:80:07:6e:2a:6c:0c:b6:53:51:4a:
1f:72:d6:6d:6c:e6:96:d0:cd:cf:2f:53:46:ff:92:
a7:0a:2e:c4:b4:32:b8:e3:52:b3:7b:b9:ec:62:98:
ad:a8:f6:b2:f6:4f:51:61:94:10:07:de:7f:9a:ed:
a0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:08:5F:B4:10:F0:7C:70:28:61:2C:D8:9D:D5:24:B1:D6:DD:04:DD
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/2QhftBDwfHAoYSzYndUksdbdBN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:26::/48
2a06:9801:15bb::/48
2a06:9801:1c00::/39
Signature Algorithm: sha256WithRSAEncryption
38:d5:2d:b0:3a:9f:fa:62:b9:4b:11:50:a9:81:bf:b2:76:86:
9e:6f:86:64:a7:cd:99:eb:aa:31:c0:40:ba:05:31:ac:2c:18:
1e:54:07:29:50:09:72:10:f3:7d:fc:a5:a3:08:03:ac:a5:cb:
17:f2:c3:9c:0c:f8:f2:89:93:56:84:bc:93:83:a3:31:5c:f2:
70:3e:5f:04:d4:2c:a8:14:2b:7c:27:5e:78:73:60:ff:7b:2d:
2e:3b:2f:7d:3f:f2:5d:6c:c0:20:9f:87:ad:09:78:2e:57:11:
44:c3:cc:ae:b7:0e:89:4c:02:40:e8:4d:93:4d:2c:11:00:ae:
8b:dd:be:fb:87:8a:16:b6:86:29:ea:d7:ea:e1:c2:32:61:b2:
f2:a3:e4:9d:1a:66:0b:38:78:0a:55:5b:d2:e3:10:1f:5e:ff:
71:c3:fe:55:26:3a:cf:7c:2a:24:6b:03:5a:d9:31:a9:bc:86:
37:0c:d8:a7:b0:c8:e8:44:87:79:18:2c:da:fe:77:d6:d4:e2:
51:03:99:57:c5:94:bc:21:00:2c:d4:29:56:22:50:2f:25:d5:
75:11:33:74:41:ea:d4:6d:2b:9d:95:28:37:be:fc:41:7e:96:
b3:aa:57:d3:6b:98:9e:4f:b0:fd:46:cb:c0:c4:51:65:8f:df:
6a:83:30:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:08:16 2026 by rpki-client