Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/6MjJQkCXEsHauGWZGOx_FX_bXeE.roa
File: 6MjJQkCXEsHauGWZGOx_FX_bXeE.roa (raw, json)
Hash identifier: 8f+ylsYf51OPwipaVanr758p+DwLr94jwlqssG05KdA=
Subject key identifier: E8:C8:C9:42:40:97:12:C1:DA:B8:65:99:18:EC:7F:15:7F:DB:5D:E1
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019E736DAAE0A9B5BDDCF1059AAC2AB6C161
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/6MjJQkCXEsHauGWZGOx_FX_bXeE.roa
Signing time: Fri 29 May 2026 11:10:27 +0000
ROA not before: Fri 29 May 2026 11:10:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215030
IP address blocks: 2a06:9801:1a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:73:6d:aa:e0:a9:b5:bd:dc:f1:05:9a:ac:2a:b6:c1:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: May 29 11:10:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e8c8c942409712c1dab8659918ec7f157fdb5de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f6:33:10:0a:04:16:49:a5:72:4e:f7:33:ab:
aa:d2:31:36:73:4f:8c:c9:b0:09:7d:81:1e:95:57:
f1:3d:49:d9:59:4b:92:e1:05:ad:59:ab:09:23:55:
f5:b2:ba:05:88:b8:79:ff:68:fa:74:79:3a:01:d3:
cd:e4:27:f9:9c:44:cf:88:96:47:fb:91:1c:75:0f:
18:ab:88:35:6f:b4:ec:ea:4a:dc:94:a0:1e:bb:a5:
5b:64:e7:3e:05:e3:81:8f:70:87:f6:94:b0:34:3e:
52:fe:fc:ab:7c:4e:ef:06:db:3c:c2:48:e2:65:cc:
68:d5:0b:b4:e8:a8:ea:fe:75:f7:51:e3:b3:18:61:
fc:8b:ac:af:70:e6:30:43:db:36:b9:00:87:d2:54:
a0:8f:81:82:0e:0b:91:20:ab:f3:f4:ef:ee:46:f8:
3b:fa:0d:f5:1b:5a:28:87:e8:1c:bc:e0:f5:6c:61:
cb:aa:21:f7:3e:cb:3d:4b:d2:23:57:f3:54:fc:35:
81:65:2f:c3:64:65:12:db:94:89:46:14:0e:ff:00:
98:1f:b2:75:5f:75:22:fb:b7:d3:c8:a1:c7:74:55:
78:ee:66:b5:d6:6b:f3:6c:ff:07:d1:00:96:61:79:
1f:d6:b0:c5:4f:ec:41:5b:40:40:50:35:6e:d1:52:
44:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C8:C9:42:40:97:12:C1:DA:B8:65:99:18:EC:7F:15:7F:DB:5D:E1
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/6MjJQkCXEsHauGWZGOx_FX_bXeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:1a::/48
Signature Algorithm: sha256WithRSAEncryption
99:9f:7e:8e:3f:80:d6:72:d1:1f:8f:54:46:59:ea:3b:37:d1:
0d:9b:13:fc:9a:bb:10:54:ff:09:98:05:cc:d4:87:93:d5:90:
78:b2:99:d7:0d:d0:bf:83:25:7c:c8:4e:b6:1a:a6:d4:8e:0e:
ba:3e:e1:b5:ff:52:8b:37:c9:f0:f9:92:4a:cb:0c:db:44:45:
57:4b:b7:ab:c6:fa:2f:ea:9d:d5:00:d4:f1:73:20:97:e9:86:
90:27:6f:65:42:d6:7f:1c:1c:d7:e0:5a:27:73:c6:17:35:04:
bd:0b:f1:04:fd:ee:91:49:86:ce:64:52:6d:73:69:c9:02:83:
a8:40:16:88:e0:cc:54:ce:3c:ac:94:34:3d:6d:4f:01:7d:5a:
a1:c8:18:67:fd:91:d7:69:5b:8f:b8:05:16:3c:30:d1:af:db:
6c:8c:05:27:91:e3:43:04:db:0b:b7:a9:79:e1:52:51:9a:1a:
af:97:5d:a7:e7:0d:7e:94:03:9e:14:0a:d1:89:b3:3b:b5:42:
b5:d7:4c:6d:78:5d:02:02:b3:60:a1:b3:ed:cd:74:2f:05:08:
c1:bd:d9:2a:b8:f4:99:df:7a:dd:5f:42:f0:55:f1:fe:a1:c7:
e0:c5:be:ba:fc:c0:2e:d1:df:6e:5e:e2:61:d7:c4:a2:7c:40:
3d:54:43:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:28:54 2026 by rpki-client