Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/EwE3VnsbeaiXUtOxNragQ6dYrfc.roa
File: EwE3VnsbeaiXUtOxNragQ6dYrfc.roa (raw, json)
Hash identifier: /yXvQs2Km8hGxtGeOrc/R913Lt4tZPR5f0p9Px6UBWE=
Subject key identifier: 13:01:37:56:7B:1B:79:A8:97:52:D3:B1:36:B6:A0:43:A7:58:AD:F7
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A05B7F20470FD4D17C65DC60EE0211A0BE
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/EwE3VnsbeaiXUtOxNragQ6dYrfc.roa
Signing time: Tue 01 Sep 2026 05:44:13 +0000
ROA not before: Tue 01 Sep 2026 05:44:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 2a06:9801:2b0::/48 maxlen: 48
2a06:9801:ff0::/44 maxlen: 44
2a06:9801:ffb::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5b:7f:20:47:0f:d4:d1:7c:65:dc:60:ee:02:11:a0:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Sep 1 05:44:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=130137567b1b79a89752d3b136b6a043a758adf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2f:cf:fe:44:ff:b2:1c:e7:d6:99:f6:0f:4f:
aa:7b:82:94:66:10:79:c4:6d:3c:e4:56:2b:3f:33:
8a:a6:9a:39:66:4d:69:02:05:ec:f9:d8:4f:3d:5e:
ee:52:3a:eb:70:56:65:94:5c:2a:fa:c1:27:e4:0a:
fb:db:dd:8c:2d:a6:a1:c3:fe:1d:a9:cc:a8:91:cc:
58:c6:87:27:ce:a7:ee:66:5b:ba:11:7d:f1:da:eb:
6c:db:39:ea:4c:9b:08:55:2f:75:94:c8:00:57:4e:
16:b1:0e:50:eb:fb:0d:79:32:c7:37:55:24:ad:0a:
e9:cf:cb:6e:28:c3:4a:26:07:20:87:7c:b2:e8:19:
00:47:00:38:67:a1:06:e6:a6:f3:76:93:dd:72:58:
7d:a0:90:6d:c4:97:4c:e1:3b:6c:ed:15:84:6a:91:
1e:4c:86:31:fd:77:56:f7:be:76:eb:77:46:d5:08:
58:25:43:15:6c:2e:08:3b:95:3f:5e:ba:1d:06:bf:
66:2a:44:21:05:8f:96:5b:39:46:e2:56:9b:7a:84:
a4:76:81:92:05:52:7b:13:5a:94:83:65:c9:ac:4b:
54:9c:44:4e:de:98:e8:98:67:0c:73:51:80:d4:86:
ce:15:a4:f4:05:3b:36:55:df:87:ef:7a:f1:38:54:
59:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:01:37:56:7B:1B:79:A8:97:52:D3:B1:36:B6:A0:43:A7:58:AD:F7
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/EwE3VnsbeaiXUtOxNragQ6dYrfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:2b0::/48
2a06:9801:ff0::/44
Signature Algorithm: sha256WithRSAEncryption
a5:ab:37:66:f5:04:23:4f:56:50:a9:03:dd:df:21:43:d5:68:
f5:fa:ef:29:21:2c:49:c6:b9:d8:dd:4a:30:3b:a2:fd:a9:aa:
e7:c3:7d:a9:e0:b2:d3:b3:08:d7:fc:ea:73:5d:10:e7:03:b3:
33:46:f4:87:57:1e:80:27:f8:c1:4d:65:60:59:11:ea:71:cc:
48:65:1f:48:9b:08:27:ec:45:06:56:87:8b:d4:09:c8:05:66:
0a:2c:f7:b9:55:8a:29:27:80:65:19:aa:ff:2f:1e:b3:4d:b6:
97:33:b4:61:d0:e3:12:52:b7:6b:08:30:76:07:83:48:f5:ca:
70:df:06:42:35:5c:84:cf:fc:42:f3:63:1a:dd:fb:50:bd:68:
78:0c:c6:04:6b:5a:58:b1:21:5e:59:3b:f8:8e:5f:73:ee:e7:
31:84:05:20:53:d6:40:d8:d3:bc:c3:4e:11:5e:b4:f8:d4:8a:
ae:95:6c:34:67:da:c6:73:b4:c9:14:27:7c:c4:72:43:2b:59:
50:77:ae:f0:2d:88:0e:1e:36:04:f4:52:aa:3d:18:a2:f7:50:
04:ec:4d:bf:d9:fa:7a:75:61:d6:61:33:79:c8:f8:eb:b8:52:
db:d5:ff:4c:ff:4a:9e:35:90:8c:a6:19:82:a0:13:f5:eb:42:
2b:4a:84:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:49:53 2026 by rpki-client