Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/2Y9PlYVfZNahVaEGHq5w4uZkyzc.roa
File: 2Y9PlYVfZNahVaEGHq5w4uZkyzc.roa (raw, json)
Hash identifier: 7ZakjAuzlT4Z7/hyAXcZRYA68cgQ2I9vtKK2FRyDLlA=
Subject key identifier: D9:8F:4F:95:85:5F:64:D6:A1:55:A1:06:1E:AE:70:E2:E6:64:CB:37
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A088613AF63BAD581111653E4852E34B77
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/2Y9PlYVfZNahVaEGHq5w4uZkyzc.roa
Signing time: Wed 09 Sep 2026 22:54:28 +0000
ROA not before: Wed 09 Sep 2026 22:54:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219484
IP address blocks: 2a06:9801:793::/48 maxlen: 48
2a06:9801:151f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:61:3a:f6:3b:ad:58:11:11:65:3e:48:52:e3:4b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Sep 9 22:54:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d98f4f95855f64d6a155a1061eae70e2e664cb37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fe:98:34:e5:74:38:6d:77:e4:ad:f0:33:c2:
8a:7c:92:8b:08:57:69:ab:8b:5a:09:5d:a5:69:84:
da:bb:1a:df:dd:a2:20:93:a4:27:79:3f:02:23:c1:
c4:56:82:2a:be:cc:25:db:f2:2a:f7:95:28:54:94:
89:cb:b7:e4:a2:b2:55:aa:47:a7:ca:e8:77:7e:cd:
0e:69:a1:7e:c9:f1:92:c2:4e:e1:2b:64:30:d4:1c:
4b:c0:d3:d6:1c:82:88:19:88:32:e4:4a:06:f9:71:
5a:f3:09:c7:02:40:0a:e7:4e:a3:e1:fa:42:8b:d1:
bd:95:27:cd:a5:1f:4a:34:ba:9d:6b:46:2e:36:8a:
de:c6:b1:df:71:56:48:06:d2:d6:2a:4c:29:bc:be:
af:a7:b5:ba:b1:8a:ff:49:9b:a3:72:da:d7:c1:cc:
3a:b7:95:2d:f5:8c:1e:6d:36:59:25:c9:ad:b5:24:
8f:ab:3b:ce:4c:be:49:41:eb:17:36:e8:9e:f2:69:
ef:95:6c:cf:50:a4:21:bf:15:16:95:9f:74:e9:be:
e7:c1:bf:7f:99:63:fa:ee:a8:7d:9b:fa:88:87:44:
92:b8:c1:73:eb:72:4c:f2:f9:ce:48:34:af:5f:af:
d5:99:6b:19:7b:1b:23:ed:95:d4:b7:0b:ed:3a:ac:
df:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:8F:4F:95:85:5F:64:D6:A1:55:A1:06:1E:AE:70:E2:E6:64:CB:37
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/2Y9PlYVfZNahVaEGHq5w4uZkyzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:793::/48
2a06:9801:151f::/48
Signature Algorithm: sha256WithRSAEncryption
88:a0:c1:ce:b6:4a:c0:f0:fc:cd:87:9c:df:6c:bf:13:be:df:
64:e4:5f:9e:20:7b:2c:03:98:d9:a2:c5:a5:64:1a:46:8c:40:
f3:de:23:9d:68:ad:92:36:6a:bb:54:2f:e1:50:b7:89:b6:90:
5a:e8:f7:e7:8b:07:44:b0:ca:6d:4e:df:8f:bc:4f:66:06:08:
a6:39:d9:f9:47:13:47:6c:97:a4:8d:1f:90:0b:5f:c5:fa:f5:
0e:4e:a1:d6:61:1c:79:1a:33:d8:99:51:a9:80:37:2d:e0:a5:
fb:4f:76:c0:8f:c7:5c:59:53:f4:a0:3d:02:ea:07:3c:cb:7a:
97:bf:d8:0b:17:d4:03:3d:fd:2e:53:9c:42:1e:f9:bd:18:d1:
c4:91:c1:58:7c:3a:3c:ac:b5:28:c6:0b:90:d7:5e:55:c8:69:
26:17:d0:53:76:7d:55:cf:80:80:3c:ed:7f:6f:f9:60:0c:7d:
8a:d6:78:b4:d1:8f:fa:b1:9d:7c:7a:99:d3:89:14:e7:30:eb:
08:1a:9e:fe:f6:d1:22:ab:9f:02:b9:e0:a5:1d:9b:6d:92:9f:
43:4c:b8:3c:38:09:6a:7b:9e:f3:47:76:08:2c:61:97:04:70:
fe:61:54:95:89:fa:2c:e5:63:b7:f5:3c:7c:e4:a0:fd:6a:9a:
44:46:22:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:06:44 2026 by rpki-client