Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/9rYmf-4--fWMV0enuVlyU-gbaps.roa
File: 9rYmf-4--fWMV0enuVlyU-gbaps.roa (raw, json)
Hash identifier: VGtQqJLbNWvjIrJ7Cuz2pQT8pmQIyZr8WaWvHzehroQ=
Subject key identifier: F6:B6:26:7F:EE:3E:F9:F5:8C:57:47:A7:B9:59:72:53:E8:1B:6A:9B
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A0525B0C1B3A3EBD1201537A5CA7ACF9FF
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/9rYmf-4--fWMV0enuVlyU-gbaps.roa
Signing time: Sun 30 Aug 2026 11:08:13 +0000
ROA not before: Sun 30 Aug 2026 11:08:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198750
IP address blocks: 2a06:9801:277::/48 maxlen: 48
2a06:9801:600::/40 maxlen: 40
2a06:9801:a00::/40 maxlen: 40
2a06:9801:b00::/40 maxlen: 40
2a06:9801:c00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:52:5b:0c:1b:3a:3e:bd:12:01:53:7a:5c:a7:ac:f9:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Aug 30 11:08:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f6b6267fee3ef9f58c5747a7b9597253e81b6a9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cf:34:3a:be:04:61:44:a0:a7:bc:b6:6c:0c:
5a:93:74:1c:c7:32:c0:de:62:d8:7c:ea:16:ef:ea:
03:ca:46:6a:be:51:1b:e6:bd:c1:c2:0a:68:90:14:
38:e4:4a:dd:37:fa:e5:89:24:27:2d:de:d6:e4:92:
4f:f4:9e:24:dc:25:13:19:c5:53:ec:d2:ed:5f:54:
fb:5a:57:59:2f:2e:b7:59:6b:70:7e:c5:e4:72:c0:
f1:f2:8b:b1:4d:44:9c:59:ce:99:b7:2f:1e:12:93:
1d:73:f4:1b:c1:13:e0:f8:4e:bc:e8:e8:a0:c1:20:
15:a8:65:db:5b:66:a6:de:a7:d3:90:75:c6:a8:5a:
07:23:67:5f:25:19:16:17:fd:32:51:40:80:19:80:
d6:0e:46:7d:80:9f:41:1c:9c:2b:38:57:ce:de:db:
6c:3c:b9:7a:b7:ca:41:14:98:6a:41:30:50:85:03:
a1:14:61:79:46:de:94:57:3c:1d:07:6a:35:d8:f4:
a3:d3:0e:ea:88:7a:82:b9:49:02:49:3a:de:fb:e1:
bf:2f:57:8c:18:f1:37:4e:3f:8e:b8:d6:6a:29:36:
ff:e1:62:bb:62:fa:10:a5:e1:9d:9b:db:fc:a5:64:
a9:07:66:92:f1:9c:3b:97:6a:62:01:fe:57:fd:39:
3c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B6:26:7F:EE:3E:F9:F5:8C:57:47:A7:B9:59:72:53:E8:1B:6A:9B
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/9rYmf-4--fWMV0enuVlyU-gbaps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:277::/48
2a06:9801:600::/40
2a06:9801:a00::-2a06:9801:cff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
86:6d:6b:e1:48:7f:1b:d0:f7:43:08:4e:4f:25:f5:53:d1:5e:
b8:c2:15:d5:4f:c7:f1:e8:f3:4b:13:3d:6f:49:87:54:19:84:
62:31:ee:9c:e7:7c:94:8f:6e:3d:71:fe:39:d9:ca:d8:8d:bf:
cd:ce:4b:10:dd:47:aa:da:9b:c3:45:be:fb:13:39:ec:30:d0:
0f:c7:42:98:32:50:4d:20:4f:2b:ff:32:06:12:e1:e9:fd:04:
b8:5a:c0:59:7d:75:d3:6f:87:40:60:57:b1:28:d6:b6:f2:ae:
28:22:a6:90:f3:15:7f:f0:ac:cc:cd:15:51:0e:ff:40:b3:af:
08:e9:60:a5:f6:34:81:2e:c4:ee:b7:24:e9:c3:fd:3e:16:3b:
87:76:1d:67:b0:44:cf:07:c5:d0:fd:8c:55:07:69:cd:16:a1:
47:b1:2b:c4:6e:5d:68:12:00:1d:9a:67:bd:6e:fd:4b:30:04:
3e:90:a3:dd:a0:b1:f3:9a:f4:0f:63:a4:f1:a9:e1:ca:e1:aa:
67:53:21:06:42:a1:71:21:05:92:2d:9a:f0:91:21:01:6b:4e:
58:21:b0:6f:f7:19:ae:1f:44:cb:08:f1:62:72:9d:41:42:75:
91:6b:77:fc:e3:3d:80:8d:b7:81:29:fd:98:e4:ac:c9:d3:7f:
8b:91:e3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:14:00 2026 by rpki-client