Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/AbsX2k9GLFPkEwGwbMLp2ndLJyU.roa
File: AbsX2k9GLFPkEwGwbMLp2ndLJyU.roa (raw, json)
Hash identifier: lGfL6x8byFdG0f8V3asDXbIkcjjM8GoC+e48KTbbjPk=
Subject key identifier: 01:BB:17:DA:4F:46:2C:53:E4:13:01:B0:6C:C2:E9:DA:77:4B:27:25
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A06BC61E7FF154CAE592ECAD1155CBE750
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/AbsX2k9GLFPkEwGwbMLp2ndLJyU.roa
Signing time: Fri 04 Sep 2026 09:35:41 +0000
ROA not before: Fri 04 Sep 2026 09:35:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205781
IP address blocks: 2a06:9801:1517::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6b:c6:1e:7f:f1:54:ca:e5:92:ec:ad:11:55:cb:e7:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Sep 4 09:35:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=01bb17da4f462c53e41301b06cc2e9da774b2725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:80:d5:91:f3:b6:36:b3:26:06:0d:ec:25:33:
72:95:3c:c2:8b:05:28:51:65:18:94:94:59:a4:be:
fa:33:2d:18:c1:f0:0a:a3:f2:42:f1:50:87:9f:cc:
bb:ba:49:4b:08:b9:f3:b5:71:10:6e:4c:e0:7a:15:
c7:c2:24:f7:b9:02:c3:d7:f5:f0:22:ff:40:aa:77:
34:93:78:59:ea:ed:b4:03:fd:e7:d1:5b:09:5b:68:
a3:c6:09:2e:5c:5b:62:9e:6b:a9:8b:27:4f:97:f3:
c9:c3:be:d9:07:72:ad:bf:84:06:d3:12:0c:f3:8e:
77:37:92:6f:8e:2c:b4:8e:81:63:df:b6:7a:52:c3:
59:43:92:2d:42:f3:49:ad:fd:ec:65:88:d7:78:b0:
0f:1e:dc:25:8f:c1:39:79:31:18:51:7b:42:b5:4c:
b7:c1:d1:ec:eb:95:82:02:ca:82:72:88:61:aa:2c:
10:5a:3c:1b:2d:54:d8:01:09:05:7c:ec:2a:e2:58:
d9:bf:32:55:58:67:18:5f:01:ab:f8:42:68:4a:2d:
f2:ac:83:de:b8:f2:44:ab:fd:f7:d6:f8:9c:e5:20:
7a:73:38:a2:2d:62:c3:a0:d5:cd:8a:fe:16:53:2d:
da:4f:15:95:5c:cb:76:f1:be:a0:0a:ba:fb:3f:a0:
15:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:BB:17:DA:4F:46:2C:53:E4:13:01:B0:6C:C2:E9:DA:77:4B:27:25
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/AbsX2k9GLFPkEwGwbMLp2ndLJyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:1517::/48
Signature Algorithm: sha256WithRSAEncryption
30:02:71:f9:67:00:58:64:95:1e:54:c5:b2:04:80:7c:c5:cc:
11:d2:77:c3:f3:be:00:30:fb:90:84:a8:17:13:a2:50:0f:86:
e9:7f:86:19:c5:34:21:6d:f7:da:84:41:98:4b:c5:4a:cb:a4:
f0:93:bc:76:d2:21:c6:68:3c:75:00:08:45:25:7a:a0:4e:68:
c3:21:1d:00:54:f0:8e:3c:1f:1c:3e:64:b3:41:2f:2a:52:02:
db:c4:6d:c7:22:93:1f:5c:54:05:f6:4d:4e:5c:1f:37:6b:9d:
a6:63:2b:73:18:90:21:53:67:0a:7a:a0:04:d8:3d:72:9e:c1:
d3:65:0b:2c:4d:15:dc:e3:a5:7d:e4:8f:5c:ee:ef:1a:00:61:
4d:2e:76:4d:d7:63:fc:bc:22:41:37:0c:da:99:58:50:1d:7d:
b1:00:a4:6f:20:53:f0:cb:f8:3f:0b:53:85:46:24:a7:df:10:
4e:38:4a:3a:89:68:8d:43:52:db:28:ec:f5:37:1f:22:1e:67:
56:64:ec:7d:17:6a:bb:c8:2b:46:3b:c0:bd:df:f6:b1:98:4c:
1f:03:e7:2e:a8:0a:e1:53:d5:c5:27:86:11:64:bf:69:8f:f9:
c4:90:44:9e:3b:10:94:fb:00:44:9a:8b:32:ee:d0:f2:be:ad:
dc:a3:61:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 04:10:31 2026 by rpki-client