Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/58txdVLVsenb0JYjO9o6LhIzbB0.roa
File: 58txdVLVsenb0JYjO9o6LhIzbB0.roa (raw, json)
Hash identifier: ndLhdY8TinlpyCYSke2QqMJmKSuvwre1uj8z7/FAxjE=
Subject key identifier: E7:CB:71:75:52:D5:B1:E9:DB:D0:96:23:3B:DA:3A:2E:12:33:6C:1D
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A0424DCFE52A3F2DE06205B260453AF8CC
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/58txdVLVsenb0JYjO9o6LhIzbB0.roa
Signing time: Thu 27 Aug 2026 08:19:50 +0000
ROA not before: Thu 27 Aug 2026 08:19:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218882
IP address blocks: 2a06:9801:f7f::/48 maxlen: 48
2a06:9801:fca::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:4d:cf:e5:2a:3f:2d:e0:62:05:b2:60:45:3a:f8:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Aug 27 08:19:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e7cb717552d5b1e9dbd096233bda3a2e12336c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ec:01:b0:40:72:de:a1:cd:6d:ac:10:67:1d:
b1:4b:ee:e0:d6:64:b8:54:84:75:d2:ef:cb:5a:67:
4f:2a:9c:2c:7c:3e:65:a0:33:a0:cd:68:f3:65:c9:
00:4c:da:17:a3:a5:73:2b:fd:6c:bc:17:4a:ee:0c:
62:3c:88:76:07:2c:99:bf:32:45:d4:e0:2a:7f:2b:
cc:d6:d3:de:a6:93:e1:3d:09:2f:fa:a3:71:16:40:
61:42:af:41:02:6a:ad:9d:ae:8d:ef:e5:38:ca:15:
a8:06:30:98:9d:a6:41:f9:1c:ff:ef:bf:ff:86:6f:
bd:06:b4:4c:9c:59:a4:75:69:e4:e2:1e:fd:0b:66:
67:b3:6f:63:22:1f:30:e2:a6:4a:f8:1c:c0:8e:dd:
18:3a:e4:5d:b9:3b:33:13:a1:f7:45:fb:19:1d:50:
e1:88:7b:5b:e2:d0:d3:67:80:ff:6c:b1:6b:d3:fe:
b2:3d:91:c2:de:ec:d9:e9:46:27:9e:df:d2:72:c5:
b9:17:d2:d2:04:9d:68:46:60:59:85:78:0d:c2:15:
b2:e1:d0:72:f4:55:d3:2f:b0:61:b2:c0:d3:04:0f:
ed:8f:57:e3:f8:90:cc:a5:a5:cf:2c:d2:31:c9:01:
9e:38:81:b1:68:14:5a:cf:fc:da:92:42:42:45:7a:
27:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:CB:71:75:52:D5:B1:E9:DB:D0:96:23:3B:DA:3A:2E:12:33:6C:1D
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/58txdVLVsenb0JYjO9o6LhIzbB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:f7f::/48
2a06:9801:fca::/48
Signature Algorithm: sha256WithRSAEncryption
89:6d:14:95:af:d4:bb:3e:3f:cb:01:96:39:4b:45:63:2d:61:
36:f4:22:39:69:13:cf:ca:0e:07:1c:69:81:e6:e5:89:22:f1:
4c:19:8b:9f:95:dd:32:d2:3d:5a:f8:72:4a:de:e9:27:c2:e6:
79:42:fa:e1:2a:46:8f:c1:c8:4b:97:4d:fa:81:81:c8:da:31:
62:53:85:d0:31:71:f7:e7:e5:cb:46:70:f2:2a:fa:73:d0:1c:
77:a5:19:df:c0:61:83:7c:35:e8:79:e6:1f:91:f9:32:62:08:
e0:c9:06:e8:f8:61:8e:e6:f9:99:cd:67:cb:eb:42:21:04:bc:
10:b0:97:b8:fb:33:14:cf:6a:df:5e:ae:86:64:4f:e9:f7:15:
21:ae:32:10:b5:79:b6:0e:98:44:7a:fa:c0:5d:9c:bd:e3:2b:
55:b8:14:81:76:71:2d:ee:24:2a:fe:23:6b:07:2e:be:2e:78:
6d:c0:2b:e5:8c:a5:ec:56:85:0f:c4:fa:93:57:5e:e2:04:fa:
8c:b8:c4:4e:2b:40:27:6f:4d:81:76:b3:4c:07:da:8d:e2:51:
07:70:28:51:02:f4:a7:e4:06:25:5d:5e:eb:a0:2b:36:49:1e:
da:b9:ae:fe:3e:f0:c7:b2:b4:b9:ec:38:c7:2b:aa:8b:1f:91:
37:e3:0e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:07:41 2026 by rpki-client