Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/5gIIag8CHoGFFDctdaEMxOXE2SM.roa
File: 5gIIag8CHoGFFDctdaEMxOXE2SM.roa (raw, json)
Hash identifier: a6bTUPTLbkxTaFRwv1/SfyUzqrD8/AS41d+7tc0gNUc=
Subject key identifier: E6:02:08:6A:0F:02:1E:81:85:14:37:2D:75:A1:0C:C4:E5:C4:D9:23
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A159B322C802ED292304A6CA1D0CBC822F
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/5gIIag8CHoGFFDctdaEMxOXE2SM.roa
Signing time: Tue 20 Oct 2026 14:24:34 +0000
ROA not before: Tue 20 Oct 2026 14:24:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218374
IP address blocks: 2a06:9801:15b9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Nov 2026 09:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:b3:22:c8:02:ed:29:23:04:a6:ca:1d:0c:bc:82:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Oct 20 14:24:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e602086a0f021e818514372d75a10cc4e5c4d923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:eb:23:78:80:db:b3:17:50:2d:4a:61:a9:bb:
6d:fe:83:8a:17:31:4b:96:1e:6b:20:a3:36:e7:a2:
7c:dc:5f:bd:ac:97:83:74:34:56:05:bb:13:03:72:
6a:ee:cf:94:c8:64:d7:7a:d7:1d:6e:76:cd:ad:3d:
62:bd:09:38:b3:0e:af:d1:72:a4:4f:23:e2:e6:fa:
4d:1e:ff:ea:c4:9b:8e:17:ba:70:7f:12:1e:a8:bf:
7b:08:58:98:85:54:dd:0a:a6:0b:81:a6:d9:8c:86:
48:29:d4:b9:43:cc:06:c7:b5:7b:4c:56:77:2c:78:
cb:9b:5c:41:67:79:25:18:27:c7:a3:e3:a0:fa:63:
e5:1b:d8:bd:f1:9b:45:a0:60:4e:f8:61:d2:95:aa:
d1:79:58:80:46:c6:48:3c:9f:61:81:e7:a8:04:5c:
07:45:89:03:c6:b8:81:66:70:b9:13:58:51:74:0e:
16:4f:fb:e9:01:a2:0a:ae:a8:5e:23:1f:a6:c6:54:
21:90:2f:6b:8a:47:ab:30:6a:8a:c9:1b:0b:2e:0d:
87:bb:ff:2d:ad:9f:3c:43:4f:47:43:55:8a:6b:b2:
f5:2f:56:b5:c4:00:9f:53:72:a9:6a:42:ff:2b:5c:
74:15:2a:9c:17:4d:63:16:8e:e1:32:d8:b5:f9:3e:
b5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:02:08:6A:0F:02:1E:81:85:14:37:2D:75:A1:0C:C4:E5:C4:D9:23
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/5gIIag8CHoGFFDctdaEMxOXE2SM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:15b9::/48
Signature Algorithm: sha256WithRSAEncryption
33:72:67:d2:d4:e4:fb:9e:8f:a7:08:47:e7:62:96:7b:0b:be:
b8:42:ae:ed:8c:dc:18:62:45:11:15:50:3a:70:74:21:c5:73:
e6:90:ea:1f:a0:21:25:eb:19:ae:98:2f:7c:1f:ec:b4:9c:35:
6e:75:bb:a5:00:ef:e1:34:0a:93:0b:4d:4d:40:c6:cb:cf:ed:
ca:0e:0f:70:d0:a9:b7:20:b8:d9:e6:96:22:7d:4d:a1:be:5a:
e4:1d:b5:3b:64:12:32:fe:6a:dc:1c:b9:00:c9:16:2b:d8:fc:
ce:42:ca:49:82:44:ea:fd:55:04:f7:6a:d4:f1:c1:3b:e6:29:
e6:5f:9f:b7:28:60:d5:3c:83:d3:bf:80:86:3c:bb:d8:c0:d3:
d9:00:12:6e:3a:f1:2a:89:1a:d5:01:cf:2e:2b:ad:60:c8:cb:
a0:ff:cf:ba:9d:b9:b2:e4:d8:d4:37:98:0d:b8:e2:9f:52:18:
9b:18:a9:0e:84:be:49:83:1c:26:be:b6:0c:7e:10:8f:d9:fb:
a5:72:4b:7b:f4:44:92:76:c6:b5:c6:46:3d:da:0d:21:67:d1:
33:9c:6a:7a:45:9b:2b:d0:df:73:29:b2:c3:ea:10:a5:31:a9:
7c:44:4c:fe:7f:4f:db:1a:81:b6:0f:e0:9b:bb:5a:e3:c3:3f:
5c:26:7f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 7 16:57:09 2026 by rpki-client