Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/2zUSVC_3z7PZEMYL0V1f6rHu-yQ.roa
File: 2zUSVC_3z7PZEMYL0V1f6rHu-yQ.roa (raw, json)
Hash identifier: 9SyJFPvU6nm5MjF7xOocYB4j7CcW3ggRsz46Ky6Q92A=
Subject key identifier: DB:35:12:54:2F:F7:CF:B3:D9:10:C6:0B:D1:5D:5F:EA:B1:EE:FB:24
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019E95B2E9738696FB1259552085FEE1BB46
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/2zUSVC_3z7PZEMYL0V1f6rHu-yQ.roa
Signing time: Fri 05 Jun 2026 02:53:10 +0000
ROA not before: Fri 05 Jun 2026 02:53:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219525
IP address blocks: 2a06:9801:2f8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:95:b2:e9:73:86:96:fb:12:59:55:20:85:fe:e1:bb:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jun 5 02:53:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db3512542ff7cfb3d910c60bd15d5feab1eefb24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a6:85:b9:6b:78:a3:a8:06:a1:12:af:40:6a:
ac:1f:a4:24:89:ee:c6:43:ae:5e:7d:51:60:83:0f:
ad:2c:63:5c:70:30:23:42:66:53:4e:62:25:5a:1e:
7d:fd:4c:0a:20:46:48:4d:de:db:d7:b9:22:e2:5c:
14:7a:1f:31:e5:4b:4e:ea:07:7f:6f:56:3d:f7:55:
c6:55:7a:05:f1:89:db:d1:1c:43:3d:0b:3d:3a:66:
19:f6:b0:a5:c6:a4:ce:6b:43:f3:88:2a:8e:8e:99:
c1:87:b3:a5:13:a0:6f:12:07:e7:62:6b:1c:aa:77:
ff:2e:7c:8f:cc:1d:91:72:64:56:b6:cc:9c:6e:01:
84:cb:8a:3e:05:9e:6d:18:21:40:4f:ee:3c:03:cb:
c5:cf:55:a6:1f:cb:71:88:47:cf:9b:20:fc:c4:ab:
23:1b:2e:e4:70:0a:e1:f1:dc:48:06:84:8b:0f:a6:
98:df:ad:4d:32:5c:5f:ec:4f:47:73:1f:93:e4:2a:
27:9c:1c:42:f2:3d:06:2f:de:e9:b9:71:c6:7b:c9:
66:61:77:27:5a:fb:89:46:a5:72:cc:43:ec:2f:7e:
65:54:e3:9d:5b:99:11:36:92:e3:fa:a3:98:4b:4f:
b6:74:8c:1c:52:7e:2b:98:c3:a8:c2:d5:0b:4b:9e:
9f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:35:12:54:2F:F7:CF:B3:D9:10:C6:0B:D1:5D:5F:EA:B1:EE:FB:24
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/2zUSVC_3z7PZEMYL0V1f6rHu-yQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:2f8::/48
Signature Algorithm: sha256WithRSAEncryption
71:74:88:26:44:27:ef:32:24:87:d4:a2:cf:38:a6:de:22:b4:
ee:74:ff:67:89:7e:d8:09:50:18:8c:22:aa:6d:fa:2e:25:81:
9c:02:c4:c1:82:6e:0f:0c:41:34:9d:df:b7:d4:97:47:be:e2:
a2:f8:5f:17:c3:d4:91:ed:65:d0:db:ea:40:92:9a:a5:60:29:
91:99:09:e3:ae:e6:f0:4b:cb:59:1e:70:11:30:40:64:e5:84:
9d:05:48:5d:ee:0d:e0:85:28:d9:58:b0:13:6d:79:6d:bf:cc:
2a:60:84:2e:7d:da:9e:37:68:41:53:5e:c7:a4:30:4e:cc:19:
b6:84:da:64:99:82:c0:2a:a6:43:ce:ce:3b:10:f4:ba:66:36:
5e:cb:97:15:5f:73:68:6f:04:1c:b6:aa:6c:0e:6e:95:82:05:
bf:3d:3e:52:d7:c4:ab:46:4c:a1:1c:79:dd:1a:26:f3:d4:79:
d2:f7:cf:b0:07:3d:5e:3c:5e:9b:b3:02:71:56:ae:d4:14:a6:
4f:ed:8e:3b:33:93:d3:83:a0:43:c6:d4:da:06:dc:ac:c1:db:
55:ce:a2:b5:a6:20:62:48:88:2a:44:18:3e:34:a6:4e:8c:8e:
aa:5c:73:97:65:d5:53:0a:c8:13:4c:f8:a7:91:06:fd:c5:65:
96:3c:29:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:03:43 2026 by rpki-client