Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/42njZx63aHmK72Fsrr7b23b0sow.roa
File: 42njZx63aHmK72Fsrr7b23b0sow.roa (raw, json)
Hash identifier: 3xRB5dI5ymntH1Y5q39nDip2/zPAq/2x7+E0ymwE4BY=
Subject key identifier: E3:69:E3:67:1E:B7:68:79:8A:EF:61:6C:AE:BE:DB:DB:76:F4:B2:8C
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019E2210A7354C31753F13F8C6B14B031CDE
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/42njZx63aHmK72Fsrr7b23b0sow.roa
Signing time: Wed 13 May 2026 15:59:37 +0000
ROA not before: Wed 13 May 2026 15:59:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197612
IP address blocks: 2a06:9801:2f5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:22:10:a7:35:4c:31:75:3f:13:f8:c6:b1:4b:03:1c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: May 13 15:59:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e369e3671eb768798aef616caebedbdb76f4b28c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:fb:45:55:48:7c:39:45:ed:76:2f:b5:50:fa:
4c:c9:5e:f8:9f:8c:98:4d:52:39:f9:24:ff:01:34:
80:72:da:ee:1f:70:d0:e4:f8:e8:a7:29:5c:f2:e1:
0e:c5:52:60:80:fb:e1:2a:c1:c0:2b:98:8f:9a:1d:
9c:26:ba:72:13:4e:20:d8:24:2a:44:f8:90:79:44:
af:4e:bb:12:a2:89:27:f5:48:f8:5c:71:d3:7a:0f:
09:ad:09:94:5c:d2:33:d0:37:ec:13:4f:df:dd:e2:
bd:ed:32:16:9a:e0:b2:9a:e9:f8:b2:32:89:65:01:
9a:75:af:0c:4a:23:cd:59:0b:f4:a5:98:bd:59:37:
f6:f6:1d:28:b2:b3:9e:47:ec:5a:19:69:f2:1e:85:
53:78:2f:d6:91:ec:af:c5:e3:c4:eb:ba:ba:e6:a6:
2a:ca:ba:74:c5:06:eb:b0:62:6a:ab:a0:05:f3:bc:
e6:84:c6:7c:32:ea:4a:44:f9:33:38:c1:52:a3:c5:
03:00:e5:e2:23:1a:3d:a1:b8:b3:ab:43:26:ee:3b:
e2:15:56:17:57:31:4e:2d:66:25:13:0c:9f:46:86:
e4:b9:b1:c7:3e:76:8c:f3:63:dc:3f:3a:fc:3c:40:
91:ee:f4:5b:ce:b7:1e:7c:a8:8f:e8:4d:8d:2e:30:
2a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:69:E3:67:1E:B7:68:79:8A:EF:61:6C:AE:BE:DB:DB:76:F4:B2:8C
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/42njZx63aHmK72Fsrr7b23b0sow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:2f5::/48
Signature Algorithm: sha256WithRSAEncryption
28:09:58:e5:53:00:df:52:30:09:e5:a6:9a:2f:25:53:90:b6:
73:d9:58:93:da:54:ea:31:10:49:6d:8f:22:f0:10:a9:0d:e0:
40:fc:a4:91:09:45:37:04:d8:cc:68:e6:87:3b:9b:7c:63:b6:
cd:63:d0:32:31:4b:3a:1c:0c:9f:57:bc:a9:a1:05:41:f2:c0:
c3:17:42:11:90:06:bb:91:a7:6e:0e:f5:bc:8f:18:f8:f7:7d:
d1:9a:66:29:09:b1:cd:83:8c:31:4e:c0:3c:0b:cb:c3:47:d0:
a2:e3:ed:74:42:3e:4f:e4:dd:c2:75:c0:60:7d:6b:89:5b:f1:
ba:40:17:fa:a0:7f:27:e6:07:1c:54:39:3a:ef:f3:5d:3f:15:
0f:08:df:5d:97:21:68:10:27:e0:ea:86:77:7a:48:62:fa:b1:
e2:10:6d:e5:8c:c6:f0:19:f2:3a:84:8f:49:38:24:30:13:9e:
fc:a8:08:15:63:3d:1e:31:d5:c8:cb:29:0e:0a:ba:88:26:c5:
0a:61:e7:ac:4c:31:fc:d8:c4:c9:7b:2d:2e:f6:40:05:3a:9a:
5d:13:07:89:69:e7:93:b3:72:cc:29:2d:e5:c2:49:42:6b:68:
14:a9:f3:e3:24:e0:37:d7:ab:56:c1:56:ef:73:4b:e3:c3:dc:
9f:4c:c9:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:52:40 2026 by rpki-client