Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/9F9I3l0kDTlp-eoEF284sWlPGxI.roa
File: 9F9I3l0kDTlp-eoEF284sWlPGxI.roa (raw, json)
Hash identifier: 4VcL1XGIV10hZHftqySXDrbpFOFnw2bKCXq6LamBsLk=
Subject key identifier: F4:5F:48:DE:5D:24:0D:39:69:F9:EA:04:17:6F:38:B1:69:4F:1B:12
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A057DED682ACE2201AEF6454832F959994
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/9F9I3l0kDTlp-eoEF284sWlPGxI.roa
Signing time: Mon 31 Aug 2026 12:50:16 +0000
ROA not before: Mon 31 Aug 2026 12:50:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200153
IP address blocks: 2a06:9801:213::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:57:de:d6:82:ac:e2:20:1a:ef:64:54:83:2f:95:99:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Aug 31 12:50:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f45f48de5d240d3969f9ea04176f38b1694f1b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e6:8d:71:fd:15:1d:68:c5:1b:07:e2:41:56:
5b:f2:86:64:a8:ac:7f:21:04:b6:e1:f8:24:5c:bf:
55:3f:5d:16:0a:ac:82:d4:ab:d1:f3:35:3f:b9:e3:
88:a2:a5:93:fd:91:18:9e:4f:7c:60:b4:e3:a8:90:
07:df:52:29:6e:9a:bf:c5:0b:e1:12:01:5b:50:ee:
03:22:92:96:78:ae:7c:1c:94:23:1e:d9:77:3d:be:
7e:b8:e7:1a:e5:83:da:cc:6a:f5:ad:e8:f3:e2:74:
fc:1f:31:14:9a:98:58:d7:3c:91:ff:30:57:20:83:
c5:0a:ee:15:94:1c:35:68:10:3e:5a:d2:54:bb:af:
69:d6:17:a5:16:0f:cb:0a:63:32:94:de:ad:41:3f:
4d:f3:51:60:89:3b:56:00:46:0f:e4:e5:d1:77:ce:
48:8e:85:29:f3:cf:db:65:0e:78:f6:1a:95:9c:b3:
ff:ee:36:6f:33:06:96:a1:26:49:cf:c9:c4:81:af:
81:37:79:8f:c2:14:7e:34:bf:5b:23:fc:46:61:a8:
c7:83:34:5d:60:0c:70:0f:d2:eb:0f:11:1e:6f:d3:
c3:c8:a1:08:13:ec:50:ed:79:28:28:e1:e9:7c:f1:
75:ea:f8:21:9c:65:0a:80:a0:02:1e:15:59:4b:8c:
25:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:5F:48:DE:5D:24:0D:39:69:F9:EA:04:17:6F:38:B1:69:4F:1B:12
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/9F9I3l0kDTlp-eoEF284sWlPGxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:213::/48
Signature Algorithm: sha256WithRSAEncryption
7c:24:15:35:17:13:73:05:b2:2a:e1:46:35:38:3b:59:71:fa:
9d:e7:f6:fe:89:14:d4:1c:94:0f:0e:4b:dc:50:53:58:69:d1:
77:44:11:bd:ec:1a:34:45:c3:0a:6e:2d:0d:c8:c8:03:4e:bd:
7b:b1:f0:32:48:01:6e:5a:89:3b:94:9b:ab:ba:f9:bc:a3:2a:
87:9b:59:ce:ef:55:ac:86:f3:1a:ac:6a:50:c3:04:22:e9:e0:
28:95:00:d7:66:a2:a2:80:3e:bc:87:a3:bd:ec:4f:1d:20:1b:
70:cf:09:db:65:16:9b:e4:63:ef:9d:cd:2a:3f:4c:c1:08:8b:
8e:c4:fc:0a:fc:ee:5b:c0:3a:e5:3d:39:e4:24:1b:2c:cd:35:
7c:e1:cc:54:cb:27:4d:f2:d9:b8:23:f1:9c:1b:3b:d2:90:c7:
73:cb:e8:a9:f8:44:e8:7c:30:45:ec:b4:72:1b:a3:e6:73:ae:
88:7b:cd:12:4a:d4:f5:95:08:6f:4b:af:3b:08:45:2c:5d:6c:
9b:a6:88:82:c1:98:be:91:fd:bf:38:58:07:f4:1b:9f:a0:9a:
07:a4:f7:07:d1:78:f6:27:6a:49:f3:99:04:20:50:29:52:ad:
e2:8f:dc:7e:7a:89:06:bb:61:a8:d5:73:b7:fd:45:5e:81:21:
af:2a:b2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:01:06 2026 by rpki-client