Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/DTqlG-TW_2ydUXNPGQpocSiCF-0.roa
File: DTqlG-TW_2ydUXNPGQpocSiCF-0.roa (raw, json)
Hash identifier: QCvute5cfnUonsMRI1c+8teHO8T1o/Y1X/YRWoizmpM=
Subject key identifier: 0D:3A:A5:1B:E4:D6:FF:6C:9D:51:73:4F:19:0A:68:71:28:82:17:ED
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A0B070A8A2591C1F97A45B4F2E33EDE04D
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/DTqlG-TW_2ydUXNPGQpocSiCF-0.roa
Signing time: Thu 17 Sep 2026 17:36:08 +0000
ROA not before: Thu 17 Sep 2026 17:36:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201640
IP address blocks: 2a06:9801:23::/48 maxlen: 48
2a06:9801:1568::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b0:70:a8:a2:59:1c:1f:97:a4:5b:4f:2e:33:ed:e0:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Sep 17 17:36:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d3aa51be4d6ff6c9d51734f190a6871288217ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5c:ac:dc:9e:f1:8f:15:bc:48:4e:f2:f1:5e:
72:10:7e:56:92:99:1f:39:92:84:0e:d5:a0:dc:60:
6e:e0:17:0b:00:96:60:6b:38:c8:c1:64:b6:23:21:
41:05:fb:e5:9d:17:08:cc:17:4d:73:7c:64:7f:3d:
04:b2:b2:c9:c9:86:51:7b:f3:f5:c2:61:d1:11:35:
40:01:64:b0:0c:b5:ef:80:51:59:15:9d:b3:8d:d8:
17:c2:c1:54:7b:06:96:8f:02:61:14:71:8e:20:75:
fa:7c:59:2b:ed:d3:fa:ce:f3:d4:b3:17:92:f4:61:
1d:8c:7e:c3:3e:6a:20:0c:20:61:d5:08:97:f9:fe:
1f:28:be:6f:73:ff:38:2d:ea:8f:5f:d6:0b:9d:ad:
20:fe:35:ca:f2:ed:3f:1a:08:28:e3:b8:2e:99:da:
f7:32:65:16:96:c0:30:76:86:be:a2:cf:24:a2:ce:
58:7a:ea:d1:34:1d:cc:30:e0:67:1c:a9:91:7d:f3:
49:f1:81:fe:cc:60:3b:fe:78:b2:4d:e0:f6:5c:f3:
2a:6c:b1:2a:36:ff:e4:f0:17:91:74:3c:0c:0f:2e:
92:5f:78:8f:56:3d:a0:cd:c8:57:93:56:9d:f6:24:
45:ec:1c:43:0b:c9:24:b0:e6:fd:db:74:40:2d:28:
10:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:3A:A5:1B:E4:D6:FF:6C:9D:51:73:4F:19:0A:68:71:28:82:17:ED
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/DTqlG-TW_2ydUXNPGQpocSiCF-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:23::/48
2a06:9801:1568::/48
Signature Algorithm: sha256WithRSAEncryption
36:fb:6b:be:11:7e:b3:79:11:5f:b6:82:a4:28:a0:05:28:ec:
72:fc:4f:f1:ab:91:53:ca:fc:d7:20:e6:bf:e7:f6:27:ba:a0:
37:e5:e5:ee:be:af:3b:4c:95:92:7a:4e:3e:f2:ba:ad:9e:60:
57:eb:f8:9f:6b:de:ce:42:71:b4:5e:ce:38:62:1e:fe:83:03:
5e:8b:ca:45:c8:15:43:06:1b:18:7b:bb:b6:d5:02:8e:8e:72:
fc:7e:dc:6d:0b:73:1e:a1:d1:1c:01:89:b9:7b:87:66:e0:30:
8f:8e:82:a5:78:3e:12:ab:34:f3:e4:2a:2a:c5:6f:4f:2c:32:
c9:b0:5d:6f:1c:ba:36:d3:ba:45:9c:33:23:41:d3:27:15:45:
c1:68:88:65:6a:8e:10:bb:fd:fd:3f:18:59:a9:e8:cb:40:1f:
f8:19:f5:76:a7:e6:42:90:d0:bc:98:e9:6e:08:41:f7:a3:1b:
77:63:05:56:29:e3:2d:41:2f:4d:e4:26:13:a0:3a:86:49:78:
b3:a9:8f:fe:29:1c:04:0f:35:34:2f:00:f5:88:9d:cf:ca:aa:
60:93:6b:e7:5f:50:c9:08:2c:b0:53:c2:9f:96:de:13:85:1e:
2b:f4:e0:b4:30:49:86:42:62:db:46:85:46:40:76:37:20:13:
05:fa:65:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:01:21 2026 by rpki-client