Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/A0UjgRSUCwwIylDwTiClDLqNsUg.roa
File: A0UjgRSUCwwIylDwTiClDLqNsUg.roa (raw, json)
Hash identifier: W4iHJenB0If2gNKsbJY0WYo8+rLv11YQl8GclPHUkN4=
Subject key identifier: 03:45:23:81:14:94:0B:0C:08:CA:50:F0:4E:20:A5:0C:BA:8D:B1:48
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A0A349A7EE2FF159BF73CA4DB213965038
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/A0UjgRSUCwwIylDwTiClDLqNsUg.roa
Signing time: Tue 15 Sep 2026 04:18:28 +0000
ROA not before: Tue 15 Sep 2026 04:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 274877
IP address blocks: 2a06:9801:fcd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a3:49:a7:ee:2f:f1:59:bf:73:ca:4d:b2:13:96:50:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Sep 15 04:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0345238114940b0c08ca50f04e20a50cba8db148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:96:36:ef:e2:30:ea:ce:cb:c8:da:da:5a:f8:
e4:99:09:87:88:1b:68:8a:e5:0c:33:86:bc:6e:ea:
cf:8d:e7:cc:5b:fe:25:d9:d3:73:48:85:fc:85:08:
03:02:2f:83:86:cf:1e:d4:bb:6d:fd:c9:94:6d:f6:
40:29:6e:e1:49:95:eb:53:c9:24:ae:32:d1:fa:e6:
87:48:4d:99:b0:c9:49:f1:20:ea:ac:32:16:0e:8d:
ad:87:4d:f3:ba:d6:8a:25:b6:3c:b6:69:8b:9c:e1:
af:03:3a:05:61:42:5e:bc:fb:07:7f:7f:34:bb:9c:
32:4d:27:57:5e:82:d7:e1:51:26:e5:c8:43:86:92:
ec:7b:81:b9:ad:f1:d6:9d:b0:78:f5:26:90:9c:34:
ce:88:8d:59:be:76:d6:e5:83:20:d0:ec:11:66:0f:
6d:a7:ab:43:e4:93:78:1e:76:3b:53:c2:b0:3b:6d:
0b:f7:bc:b0:17:35:c1:46:d1:7e:12:24:c8:b8:52:
40:82:d7:09:61:af:38:63:ad:cb:b5:9c:b8:c9:0e:
c8:ec:9c:a4:bd:59:8f:9d:9c:a7:af:e5:3b:3e:3e:
56:b6:36:6e:01:87:63:af:4c:fa:eb:02:0c:36:5c:
62:e3:b2:b2:98:4b:87:34:ce:22:09:9d:04:06:1e:
14:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:45:23:81:14:94:0B:0C:08:CA:50:F0:4E:20:A5:0C:BA:8D:B1:48
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/A0UjgRSUCwwIylDwTiClDLqNsUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:fcd::/48
Signature Algorithm: sha256WithRSAEncryption
2a:2c:8e:8a:cb:22:c9:a3:c8:fe:72:62:02:27:4d:20:46:cd:
ff:86:de:10:ce:2f:c8:c4:df:eb:65:d4:3d:d8:e5:b0:f8:8e:
aa:37:e2:c9:ae:ef:18:f0:54:60:7b:64:6b:69:ab:b9:c4:c4:
bc:a2:cf:06:3c:09:30:13:26:3f:51:bd:4f:47:80:8e:8d:65:
05:e0:25:27:74:4d:cb:aa:a2:b5:6d:af:4e:ee:99:20:16:18:
aa:6f:32:21:10:6d:0f:b4:8f:25:80:df:45:cb:1f:f7:57:a5:
07:8b:31:c6:a4:f9:cd:6b:a4:47:88:9e:0e:d9:fa:68:fc:6d:
a0:78:16:f3:db:ed:44:70:9b:eb:64:14:34:28:c8:cb:b6:97:
5f:a8:9c:11:35:8f:6b:c9:81:f8:34:d2:66:09:25:ac:66:6e:
3e:e7:d5:d6:df:9b:45:8b:a4:ed:d2:f8:49:7d:1a:ff:b8:64:
6b:3e:7d:97:4e:0b:db:cf:4d:b6:aa:61:23:f3:88:92:41:a5:
56:dc:0a:7f:76:c8:fa:aa:b0:fa:56:d1:c4:67:da:49:17:72:
02:cb:de:4a:fa:d8:47:49:e7:e9:3c:b4:54:a9:cd:48:be:76:
00:e2:5b:13:b5:72:57:91:6f:92:bd:43:fc:62:00:db:b9:f4:
dc:d3:db:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:57:26 2026 by rpki-client