Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/2l1z6s-ogvwgRxS_xbBc2AnAps0.roa
File: 2l1z6s-ogvwgRxS_xbBc2AnAps0.roa (raw, json)
Hash identifier: yZa9ecyivzPcyMS3YH6CkRTt2am+ZwmTkob511BsfTg=
Subject key identifier: DA:5D:73:EA:CF:A8:82:FC:20:47:14:BF:C5:B0:5C:D8:09:C0:A6:CD
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A16962553FCA66809B84EDBD3F417FFD3E
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/2l1z6s-ogvwgRxS_xbBc2AnAps0.roa
Signing time: Fri 23 Oct 2026 15:30:14 +0000
ROA not before: Fri 23 Oct 2026 15:30:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218294
IP address blocks: 2a06:9801:15c5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:69:62:55:3f:ca:66:80:9b:84:ed:bd:3f:41:7f:fd:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Oct 23 15:30:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da5d73eacfa882fc204714bfc5b05cd809c0a6cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0b:4a:24:65:32:85:10:a6:8a:16:dc:c2:f3:
92:b8:6b:bb:a2:53:ff:a1:f2:be:a4:60:91:92:2f:
5e:8e:d6:f4:95:22:34:15:21:85:da:62:15:22:d8:
bc:a6:0d:61:c1:81:ce:b4:04:b5:c2:c8:a9:0b:1a:
63:79:27:3a:a7:23:ea:30:33:b4:0d:ff:2f:ed:b8:
9d:9a:02:d3:c9:7d:8e:1f:17:7a:26:db:aa:fa:fb:
26:9f:13:3b:08:0d:f0:ef:b5:c5:a4:14:10:d2:ce:
46:6e:94:48:c6:45:d3:a0:a5:dd:a8:86:35:d1:66:
11:60:76:77:ff:a5:4e:67:23:a7:c4:f2:94:2d:a8:
ca:5f:d9:8b:6d:6a:df:3d:dc:a0:d8:96:ce:cd:60:
e6:e8:a4:8c:28:94:47:3f:f0:20:42:72:ab:41:a7:
ae:26:d6:e0:d1:a4:7a:bd:9f:be:91:f1:af:81:b6:
d4:48:11:c2:02:9e:62:7a:13:f9:8f:35:c2:b9:25:
36:ca:ce:58:0a:63:ce:42:68:4a:95:ad:35:89:bd:
cb:7a:dc:92:aa:48:21:95:c6:d3:b6:ca:18:e8:82:
88:f7:b1:e0:f9:8a:a9:c8:ae:e6:09:a5:af:72:18:
7f:e7:b8:b6:84:b0:e5:d9:c4:d6:7d:fa:89:14:c2:
5f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:5D:73:EA:CF:A8:82:FC:20:47:14:BF:C5:B0:5C:D8:09:C0:A6:CD
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/2l1z6s-ogvwgRxS_xbBc2AnAps0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:15c5::/48
Signature Algorithm: sha256WithRSAEncryption
93:87:7a:bb:76:dd:d8:19:18:f6:6a:30:f8:ee:5c:81:54:83:
22:d4:25:77:ce:f1:e0:1d:25:c0:d6:74:8f:bb:8a:16:94:cf:
9b:f9:c3:b5:cd:50:5b:e4:78:9b:14:f0:9e:c7:9c:ac:81:b6:
0a:88:cd:b1:7c:5a:7c:57:37:16:0c:ea:b6:9e:e3:a5:55:f9:
c0:2b:d8:c8:51:14:a4:54:cc:da:3b:b7:c3:7b:69:b0:ba:df:
3a:5e:e9:e0:77:26:50:23:72:0c:eb:71:09:57:5b:2d:3d:36:
e8:c8:2f:c3:c9:25:d2:ea:66:3e:6f:22:fe:1e:74:58:0b:df:
72:ec:14:6c:a7:92:a7:97:d3:45:1d:59:46:f8:3c:79:96:45:
60:3f:c4:63:80:20:77:81:92:08:71:8c:a1:3b:29:7a:84:2a:
e6:26:2d:e5:b8:a1:6c:b2:f2:5a:68:f0:52:d9:a0:aa:7e:dc:
9e:c9:3a:46:31:b1:c0:d6:6d:e2:f8:b8:1d:dc:ef:fb:5f:93:
d4:be:0d:0d:ed:95:23:6c:52:2e:69:b2:1a:97:10:63:bf:fb:
a7:da:0c:26:6a:d7:44:bf:67:5f:3d:fe:a6:7f:8a:1e:18:a6:
79:90:a7:10:15:12:38:4f:19:e5:3b:7d:29:ed:c5:71:16:0a:
9a:2f:87:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 02:29:42 2026 by rpki-client