Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/65WRish4COLtI0vNfHrVIiab9SM.roa
File: 65WRish4COLtI0vNfHrVIiab9SM.roa (raw, json)
Hash identifier: oTPsxFAW4axbISSnQ7SVOQ1KnlFI7iQpC9Z+2M1VHdc=
Subject key identifier: EB:95:91:8A:C8:78:08:E2:ED:23:4B:CD:7C:7A:D5:22:26:9B:F5:23
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019C69097496907ED0A1B9981329F830CD57
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/65WRish4COLtI0vNfHrVIiab9SM.roa
Signing time: Tue 17 Feb 2026 00:39:13 +0000
ROA not before: Tue 17 Feb 2026 00:39:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201182
IP address blocks: 2a06:9801:55::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:69:09:74:96:90:7e:d0:a1:b9:98:13:29:f8:30:cd:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Feb 17 00:39:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eb95918ac87808e2ed234bcd7c7ad522269bf523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:37:6c:31:6f:ac:62:de:e2:d2:de:ce:96:57:
63:79:f5:c9:88:5b:25:70:42:73:fa:07:c7:89:06:
56:c2:f9:0a:5a:09:ff:15:be:6e:95:a8:4d:d4:28:
94:32:d9:4f:12:83:81:25:ae:24:a4:8c:5c:05:f4:
66:61:c2:90:ab:11:55:2a:b9:fd:5b:db:27:d6:af:
d4:03:20:09:f3:28:a6:7e:bd:95:ed:c5:76:d8:37:
93:79:59:e1:8c:b5:48:1a:05:ec:0f:b9:be:b3:f5:
a4:e6:47:70:3f:e4:4e:87:6d:8a:9c:67:c7:9e:7b:
19:14:68:2d:93:4c:87:24:20:b4:e5:6d:cf:ac:a7:
1e:1e:06:0f:7c:71:23:12:e2:67:96:9c:f6:e3:6b:
b8:8c:d3:be:11:fd:05:51:d0:b2:fa:fd:72:59:da:
ae:fb:40:1d:61:21:ea:73:75:21:95:8a:55:27:19:
9f:b5:4f:aa:61:d6:61:e0:87:ff:e1:4d:f7:d5:01:
af:aa:4e:1d:7e:0f:79:18:da:79:b2:db:30:37:f0:
6a:13:77:28:df:e6:2e:16:54:94:4c:31:74:13:95:
fb:eb:7d:1f:e5:41:44:b4:73:49:1f:f5:ca:15:cc:
08:65:8b:75:2f:d1:96:08:5c:e6:54:a4:89:79:67:
6d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:95:91:8A:C8:78:08:E2:ED:23:4B:CD:7C:7A:D5:22:26:9B:F5:23
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/65WRish4COLtI0vNfHrVIiab9SM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:55::/48
Signature Algorithm: sha256WithRSAEncryption
6a:06:af:b4:6a:9a:ba:ee:77:03:a7:56:54:f0:f1:30:dd:30:
62:a5:03:2e:64:cd:77:96:6b:ce:cb:8a:0c:2b:dd:eb:cb:c6:
90:83:26:57:23:4c:c8:39:a9:45:9a:ed:55:9e:59:41:8d:b4:
8e:7f:70:13:f2:d5:89:f1:8c:8e:3a:f6:d1:c1:51:c9:d0:32:
9f:26:b2:a4:e3:32:8b:39:71:1f:a2:29:8d:ba:e0:2e:c4:07:
15:84:d9:1e:31:84:b2:f7:1f:7e:33:91:29:af:b9:35:25:62:
ad:60:9a:a8:37:fe:2b:63:1f:9e:ed:55:0c:bb:6e:59:7a:b0:
29:8b:07:64:97:c9:5a:ab:c7:95:d1:73:75:d0:76:c7:c9:6e:
33:9d:5a:61:20:ff:57:9f:07:5f:e0:6f:e8:dd:da:a0:c7:f4:
b4:5b:93:a6:06:1a:b3:13:6a:6b:19:83:48:a5:17:a6:37:d3:
92:42:8d:ed:55:d9:2e:4f:b5:82:eb:d4:8b:ea:4c:4a:75:c9:
f0:e5:8e:da:bd:05:91:1c:49:7c:df:84:4b:eb:ce:63:cb:f5:
a1:7b:8a:75:77:13:12:8f:a0:5c:65:b9:7b:72:3d:1a:e2:f5:
c9:fd:7b:58:16:3d:15:05:a2:68:83:3d:95:85:ee:fd:18:b3:
a4:5e:d1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:08:34 2026 by rpki-client