Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/2XXDM5z0tAYwtpYc06-Nk-Scnr4.roa
File: 2XXDM5z0tAYwtpYc06-Nk-Scnr4.roa (raw, json)
Hash identifier: yrP5VpI2HXvABlrMfjn8Pvhi6LI+muR2R+k+pBavMeo=
Subject key identifier: D9:75:C3:33:9C:F4:B4:06:30:B6:96:1C:D3:AF:8D:93:E4:9C:9E:BE
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A0B0AB3F627D2B125F74C144920C4C7B96
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/2XXDM5z0tAYwtpYc06-Nk-Scnr4.roa
Signing time: Thu 17 Sep 2026 18:40:07 +0000
ROA not before: Thu 17 Sep 2026 18:40:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 2a06:9801:214::/48 maxlen: 48
2a06:9801:267::/48 maxlen: 48
2a06:9801:280::/48 maxlen: 48
2a06:9801:2ba::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b0:ab:3f:62:7d:2b:12:5f:74:c1:44:92:0c:4c:7b:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Sep 17 18:40:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d975c3339cf4b40630b6961cd3af8d93e49c9ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b7:8b:1e:15:d4:d9:d0:d0:09:9d:ca:b7:fb:
01:5e:78:0a:aa:e2:2b:99:be:25:5f:d5:0f:fe:48:
60:3e:66:43:e6:8b:3c:76:5f:25:42:b1:26:3f:72:
50:29:41:a5:52:ec:1f:17:29:87:f8:1a:7b:9a:8c:
cc:5e:68:17:ac:2c:6d:96:26:b9:47:91:41:e7:70:
98:af:c2:1c:29:d2:12:98:cc:09:a0:49:69:4b:b1:
7e:5f:e9:2d:7e:42:8f:41:9a:ce:05:24:86:30:12:
47:b9:07:1e:ac:c0:d5:53:c9:e8:06:0a:62:14:1a:
26:42:8d:1d:c8:75:67:cf:c5:b7:85:d6:81:9c:0b:
c2:ed:a4:d6:ad:2a:bf:d8:67:4f:91:68:8e:98:46:
ea:0a:f7:6f:0f:84:a2:0f:86:ec:2a:c3:3b:86:58:
e2:0e:e2:48:d1:9e:fb:20:d5:75:36:88:ad:9f:a6:
e5:16:0b:93:81:ca:06:8e:7c:3f:eb:57:6f:7c:24:
35:b3:5f:c2:76:c2:74:ff:9d:71:3f:f2:d8:4b:91:
52:6c:2d:da:36:02:6d:9e:01:39:09:92:fc:84:41:
9d:94:06:4b:22:dc:70:45:40:74:77:af:9b:a6:cb:
10:a7:f3:40:38:d8:9a:6c:bb:af:a6:43:ce:1f:40:
a4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:75:C3:33:9C:F4:B4:06:30:B6:96:1C:D3:AF:8D:93:E4:9C:9E:BE
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/2XXDM5z0tAYwtpYc06-Nk-Scnr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:214::/48
2a06:9801:267::/48
2a06:9801:280::/48
2a06:9801:2ba::/48
Signature Algorithm: sha256WithRSAEncryption
c4:04:17:bd:3e:03:d4:96:94:35:b3:62:8f:65:c3:6e:f6:08:
4a:c4:8e:dd:ef:dd:ee:96:14:53:ac:90:95:d6:f5:b1:6e:26:
40:a1:f1:aa:ec:be:e4:37:ad:3e:28:4b:24:12:de:97:09:fc:
cf:01:98:7a:60:36:cf:08:41:5c:44:60:46:a9:45:cc:13:12:
b2:18:96:fe:87:5f:21:43:07:d1:10:d6:e7:bf:9f:bb:64:15:
ed:37:5c:1b:dc:ec:2f:3d:e0:1f:b4:71:17:60:ea:70:18:8f:
a1:a7:2f:d2:7c:ad:75:88:7d:16:95:33:77:a5:65:ca:fc:1c:
0d:0e:4e:8e:78:87:35:a8:03:f2:f2:dc:8f:e2:e4:b5:ca:83:
2d:7b:5d:b4:1b:99:88:0f:2c:2b:f7:6e:a1:36:cf:90:8b:0f:
74:6b:f3:4a:4a:dd:b8:19:d5:fd:41:79:6c:b2:60:97:e7:cf:
e6:72:fc:39:17:d5:c4:6b:96:43:da:6e:53:eb:15:24:62:20:
47:dd:f1:88:a9:7e:ab:dd:54:26:15:61:97:56:03:1a:74:6f:
6a:51:4d:76:f0:be:3d:59:f9:b1:b5:bb:40:2a:76:74:39:7b:
d8:7f:fa:c8:5f:a7:e1:63:c0:6a:6a:57:35:6f:0d:eb:39:11:
ce:71:46:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:22:13 2026 by rpki-client