Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/75ce8DzF2-zXgo0FZJmhySYpJ_s.roa
File: 75ce8DzF2-zXgo0FZJmhySYpJ_s.roa (raw, json)
Hash identifier: A7W+ZHXqHlPm6yU0oC+CYfg/8B0IPR5BFSvTjNFA+TI=
Subject key identifier: EF:97:1E:F0:3C:C5:DB:EC:D7:82:8D:05:64:99:A1:C9:26:29:27:FB
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A048D8B45CD05777E6C9BE4688A574EAD3
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/75ce8DzF2-zXgo0FZJmhySYpJ_s.roa
Signing time: Fri 28 Aug 2026 14:49:16 +0000
ROA not before: Fri 28 Aug 2026 14:49:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218824
IP address blocks: 2a06:9801:f9b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:48:d8:b4:5c:d0:57:77:e6:c9:be:46:88:a5:74:ea:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Aug 28 14:49:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef971ef03cc5dbecd7828d056499a1c9262927fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:38:6b:3b:a1:e7:c8:0c:6e:30:68:05:c1:da:
40:c6:2f:cb:41:76:ae:0d:47:d3:c5:04:c7:57:f1:
63:b0:17:77:04:85:61:c5:99:90:07:3a:39:cc:cf:
f3:92:aa:d8:e1:01:e7:39:68:79:f4:10:fd:d6:f6:
17:7c:f3:5a:bc:4e:55:f9:4a:5b:5c:c5:5c:94:0f:
4f:98:90:7e:d0:a3:0a:3b:83:95:a7:4d:7a:56:60:
c2:3d:b5:d8:53:a2:74:59:06:16:bf:19:01:1f:1c:
f2:fb:29:23:4d:58:ea:c2:93:bd:c8:75:0a:a0:de:
d9:01:a8:4d:1a:67:d0:c6:f2:38:e7:1c:c0:ad:8f:
af:ac:79:31:63:01:36:77:93:c2:0f:6d:2a:4d:12:
29:c9:d5:12:6d:93:d0:60:19:90:64:7a:79:08:f6:
af:50:fe:5b:68:c0:8c:59:d3:a5:e7:89:65:89:9a:
ee:e8:89:b0:c6:27:fa:98:7c:59:42:a6:b2:25:a9:
a9:cf:61:22:c9:7f:91:8e:7b:e5:5c:48:6c:4b:ac:
9b:b1:51:b9:f2:fa:0c:5f:e3:13:fb:db:34:82:71:
10:24:e9:0e:b5:8f:68:a2:ed:9d:46:89:af:95:4e:
03:84:4e:97:f4:39:0f:0b:8e:26:3c:95:92:e1:28:
1a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:97:1E:F0:3C:C5:DB:EC:D7:82:8D:05:64:99:A1:C9:26:29:27:FB
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/75ce8DzF2-zXgo0FZJmhySYpJ_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:f9b::/48
Signature Algorithm: sha256WithRSAEncryption
9a:02:95:72:86:8f:29:43:b0:85:e0:77:8f:09:16:29:cb:b5:
76:b9:1a:d4:53:94:50:9e:a9:7f:17:99:92:43:78:93:0a:7f:
21:da:95:da:cc:e8:6e:19:3d:35:1c:90:8f:96:e3:8b:34:9d:
36:a5:55:50:79:f0:38:c6:16:2e:b3:0a:f3:ca:11:5d:74:1e:
fb:68:c0:94:97:37:b6:31:0f:6d:ca:fa:fe:e4:38:8a:89:6a:
25:98:b3:f1:4c:f9:ac:0e:8c:3e:ce:3c:15:52:f8:48:2d:52:
ff:29:95:38:ed:cc:ae:e3:da:8f:f8:dc:86:a0:6b:dc:23:2b:
95:1b:5a:4b:a9:26:a2:51:59:8e:18:34:dd:92:26:1f:42:b9:
1b:20:92:23:4a:b5:02:ef:ab:6a:c0:68:1a:ad:38:14:77:8c:
62:30:e5:6c:ae:4f:87:83:50:0f:64:5d:dd:4f:67:0e:b4:99:
90:ec:ba:63:b5:af:66:d0:6a:8b:85:77:81:b9:ac:b3:df:89:
aa:e1:04:ed:1f:8f:22:08:2f:16:91:62:8a:e8:4c:14:69:3a:
ab:b1:69:f4:d9:25:cd:05:b8:c8:86:8b:e5:00:9d:ac:cc:3d:
5a:54:9e:be:b9:cd:3f:48:ce:f2:74:93:28:d6:5a:3c:2d:6c:
47:f0:78:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:56:55 2026 by rpki-client