Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/AAr_kZRM5WALP3X8ki7QCqkY7Io.roa
File: AAr_kZRM5WALP3X8ki7QCqkY7Io.roa (raw, json)
Hash identifier: CtWxKJGd/TYhHj8muJCGjexUnwQ709LmENU3+F1lrWQ=
Subject key identifier: 00:0A:FF:91:94:4C:E5:60:0B:3F:75:FC:92:2E:D0:0A:A9:18:EC:8A
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019E3B5946B1122C1E3E45697B2C6FBF6A09
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/AAr_kZRM5WALP3X8ki7QCqkY7Io.roa
Signing time: Mon 18 May 2026 13:49:26 +0000
ROA not before: Mon 18 May 2026 13:49:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199539
IP address blocks: 2a06:9801:263::/48 maxlen: 48
2a06:9801:750::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3b:59:46:b1:12:2c:1e:3e:45:69:7b:2c:6f:bf:6a:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: May 18 13:49:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=000aff91944ce5600b3f75fc922ed00aa918ec8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fa:fd:d6:ce:9c:8d:7c:a4:5c:f6:a5:04:cf:
be:c3:3b:56:77:94:07:a6:3d:5e:c0:f0:b6:63:a7:
cf:3e:19:1f:4d:92:f7:3a:2a:a0:c4:ac:fc:82:45:
18:23:31:5e:bc:77:75:d9:39:07:a6:25:fa:a3:50:
4f:56:98:47:d8:c5:a3:d5:a7:7e:14:a4:9d:23:f5:
a5:c5:b7:5c:ac:57:41:23:a3:1a:7e:ad:a2:6e:2c:
5c:3a:3c:5b:87:a9:49:68:5d:0e:54:e6:d9:4f:d5:
f3:c7:c1:57:10:1e:51:28:90:f6:bc:80:2b:7d:aa:
48:a0:77:58:e2:29:6b:0b:28:05:79:40:f3:c1:c5:
21:3c:8c:36:9a:22:ec:47:4c:e4:da:cc:ab:e5:65:
0a:8d:ed:20:b2:0d:88:50:75:8e:53:77:d6:f7:09:
c9:f4:0b:cf:15:6c:3c:a1:06:53:95:ac:79:fb:70:
1b:27:7f:0e:4f:a1:08:a9:86:5a:db:d8:43:b8:19:
e2:41:b4:0d:52:26:a5:53:73:f6:d9:a8:c2:e6:12:
20:6a:83:03:62:da:3d:ac:99:66:1b:9c:53:7d:67:
be:3c:bf:7c:c0:cf:56:3a:6f:21:d8:bc:5f:dc:63:
7b:3b:5c:04:25:22:2f:ab:68:94:34:c3:8f:86:89:
b5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:0A:FF:91:94:4C:E5:60:0B:3F:75:FC:92:2E:D0:0A:A9:18:EC:8A
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/AAr_kZRM5WALP3X8ki7QCqkY7Io.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:263::/48
2a06:9801:750::/44
Signature Algorithm: sha256WithRSAEncryption
42:6e:04:f8:4d:99:dc:a5:69:0c:26:ac:91:93:2e:1c:66:c4:
2b:5d:fd:43:bb:88:e6:13:e9:a4:86:be:67:e9:54:0e:a0:dd:
f0:e9:ac:94:79:ad:00:b8:b4:4b:a1:25:b6:3b:59:d2:1d:37:
f2:f9:76:71:40:78:93:80:54:b0:01:c9:83:40:cc:21:b1:17:
31:09:05:c6:ce:99:d2:5a:44:c3:f9:72:62:aa:b3:33:db:ad:
c5:15:c5:03:36:55:65:7d:47:1a:fc:81:33:74:c7:a9:3b:75:
47:67:c5:e5:f4:e9:53:46:3d:0d:16:90:0c:a0:c1:ce:a8:77:
87:11:8f:96:ea:74:5a:db:33:de:4f:eb:39:96:10:cb:43:bd:
86:fb:ea:72:3f:83:7c:47:03:aa:bd:4e:4d:71:0d:30:a8:b6:
c4:e4:89:b7:b3:fe:35:6b:75:57:c2:e9:7d:9b:bc:27:78:74:
f0:61:fb:86:da:83:5e:90:76:6d:2a:ef:d1:ba:86:00:b3:97:
47:76:97:04:c1:fb:8f:82:6a:3e:87:46:ca:ce:d6:07:28:2d:
2e:53:be:2d:40:17:78:9a:4c:2a:31:12:50:01:08:96:3f:c9:
2c:4d:2d:b4:8c:28:79:9c:18:dc:e9:48:e2:62:28:83:28:5b:
87:b1:4c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:19:49 2026 by rpki-client