Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/5ygWWrou4xGyjaWdUx9a0HxgWbA.roa
File: 5ygWWrou4xGyjaWdUx9a0HxgWbA.roa (raw, json)
Hash identifier: XlwNAJhrYgeMMVlQHLWKeZtXaV/eU7w/JuWWj2f9XZY=
Subject key identifier: E7:28:16:5A:BA:2E:E3:11:B2:8D:A5:9D:53:1F:5A:D0:7C:60:59:B0
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019D6AD46F97352D0BD8CAC009A268B39178
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/5ygWWrou4xGyjaWdUx9a0HxgWbA.roa
Signing time: Wed 08 Apr 2026 02:03:20 +0000
ROA not before: Wed 08 Apr 2026 02:03:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208285
IP address blocks: 2a06:9801:217::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6a:d4:6f:97:35:2d:0b:d8:ca:c0:09:a2:68:b3:91:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Apr 8 02:03:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e728165aba2ee311b28da59d531f5ad07c6059b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:78:68:ec:4c:5e:48:9e:18:7f:08:83:b6:e2:
55:d6:44:ea:79:54:5d:ec:80:12:55:a0:f0:52:79:
68:cb:fe:47:4b:98:b5:80:81:53:77:55:58:f2:d7:
06:2d:05:e1:7c:4d:c4:f5:0b:84:3e:5e:c5:4b:a3:
0c:f2:41:47:aa:f1:b3:c5:6b:32:64:c8:3b:46:bd:
1d:57:c0:14:ba:11:48:47:69:16:e9:64:ee:d2:2e:
8f:32:46:84:36:d9:81:06:74:74:76:75:1e:97:ae:
fc:18:ec:d1:1b:5a:9d:e3:04:54:22:6c:08:ca:e8:
58:18:90:6b:61:b2:8c:f5:30:58:38:1e:48:9a:d5:
3a:03:aa:5a:8a:a8:ec:9b:8b:b6:16:8f:f0:e6:be:
31:fe:1d:77:0d:8c:8f:db:2a:69:49:a4:56:c4:b1:
ca:8c:75:51:fe:f5:4a:b4:05:57:84:98:f2:37:d9:
af:3b:37:8d:92:db:bb:b8:e3:66:da:67:07:de:c3:
45:09:ea:f1:c7:63:67:5b:5f:78:91:b2:2e:fd:cf:
02:79:a1:4b:df:1c:1e:5d:9a:76:31:90:0d:de:b4:
5a:3e:18:30:b5:c8:0e:81:be:20:7c:33:fd:9e:a9:
03:85:33:e0:87:d7:1a:dd:7a:97:82:f1:9e:89:27:
cd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:28:16:5A:BA:2E:E3:11:B2:8D:A5:9D:53:1F:5A:D0:7C:60:59:B0
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/5ygWWrou4xGyjaWdUx9a0HxgWbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:217::/48
Signature Algorithm: sha256WithRSAEncryption
36:2a:67:95:7d:e4:5f:a7:b0:b2:ac:c6:6c:18:65:96:f6:d9:
c7:95:51:84:72:39:08:2d:c8:8c:7e:ea:c6:42:7a:bd:9c:16:
d7:8d:d8:2f:dc:06:51:1f:68:97:21:28:9a:7c:cb:49:a7:2f:
e9:cc:90:2d:2c:9d:ca:4e:dd:2e:4b:fa:55:3f:00:54:cc:57:
8c:9f:66:b8:0b:d5:a1:9f:0e:03:a9:bc:ad:53:e2:b0:9a:d5:
15:88:bd:3a:1f:d0:5e:5d:85:a0:6c:d6:2e:45:06:b9:24:38:
25:16:0b:cd:ad:1c:65:8d:5e:0d:c2:f9:f2:a7:1e:3f:f3:4f:
55:50:e0:bb:df:65:d9:72:ee:c4:fd:ec:00:fb:ab:f0:d4:0d:
2c:93:c6:11:1b:d9:c7:54:ec:48:b3:24:48:fd:35:d7:1c:49:
87:a7:a7:f6:96:86:4f:76:b2:8f:15:db:a2:d1:81:b0:9c:d7:
8a:dd:e8:b0:51:06:66:7e:33:13:c7:d7:be:37:20:5b:08:cd:
ad:ed:19:9b:d1:d0:7a:22:72:8e:30:52:ae:e8:b7:10:d3:00:
7a:c9:9d:ee:41:80:36:42:34:c5:57:ea:22:d5:9d:32:52:f0:
2a:76:c6:7a:b9:f4:1a:fa:f2:0d:bd:10:59:4e:83:dd:8c:d8:
d4:54:09:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:27:55 2026 by rpki-client