Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/F4RetCKIifttNFfLH7UZQu_wXlY.roa
File: F4RetCKIifttNFfLH7UZQu_wXlY.roa (raw, json)
Hash identifier: Luog5O0I/7l+OM3jYBPUxXMdlZnHsc/3uf6bHOo9hYQ=
Subject key identifier: 17:84:5E:B4:22:88:89:FB:6D:34:57:CB:1F:B5:19:42:EF:F0:5E:56
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A08B8AE80C8C68C1B6A4CD9415F547D060
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/F4RetCKIifttNFfLH7UZQu_wXlY.roa
Signing time: Thu 10 Sep 2026 13:38:51 +0000
ROA not before: Thu 10 Sep 2026 13:38:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218705
IP address blocks: 2a06:9801:151a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:8a:e8:0c:8c:68:c1:b6:a4:cd:94:15:f5:47:d0:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Sep 10 13:38:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=17845eb4228889fb6d3457cb1fb51942eff05e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:08:a9:86:08:95:24:02:2d:d2:00:35:22:f6:
cd:2e:7e:33:80:e1:d2:30:5a:8a:43:a4:21:66:20:
7f:67:f7:79:c2:33:ee:96:77:e6:37:5d:e9:20:ae:
7b:79:a1:c2:67:9f:13:28:ea:77:52:2e:fe:f3:7a:
94:b6:38:3b:55:f6:4b:e5:a3:a9:ad:bd:ba:8a:16:
a9:af:b9:84:28:f1:59:90:01:db:34:7c:1f:bb:d8:
26:82:e6:81:e0:4d:a6:85:a0:0d:7a:eb:72:1f:43:
dd:12:af:ee:95:78:70:b6:04:28:51:b4:8a:f7:2e:
f7:52:8d:fe:f6:dd:b3:f0:cc:5c:06:b7:76:90:f6:
8b:f2:09:c4:33:59:c9:90:a3:74:c3:2e:3b:23:d1:
59:2e:b5:c3:56:7f:26:b7:5c:90:c0:ee:04:8a:95:
0f:43:6b:27:d7:d6:d3:cc:30:df:71:5a:2d:8e:ff:
6b:f3:94:ee:9d:0c:c9:98:c3:9e:95:fb:2f:cb:af:
b4:ab:90:e0:a7:8a:d6:86:2f:f8:dd:ce:34:76:09:
6f:0d:14:7a:80:a8:c3:33:73:73:cb:eb:87:d9:ce:
f1:62:c4:76:28:c9:51:67:ba:81:ea:8a:86:f4:32:
d6:7e:35:4a:69:42:c5:d6:78:24:d3:3f:7d:27:f8:
b7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:84:5E:B4:22:88:89:FB:6D:34:57:CB:1F:B5:19:42:EF:F0:5E:56
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/F4RetCKIifttNFfLH7UZQu_wXlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:151a::/48
Signature Algorithm: sha256WithRSAEncryption
25:61:fe:7d:43:e5:7b:00:02:22:55:4f:f3:1d:44:fb:97:b4:
bb:78:37:b3:20:65:5e:72:f4:55:d0:62:0f:2a:ab:d0:de:ea:
74:51:ee:d9:f2:c4:af:d3:91:77:2e:e5:79:95:4b:58:37:a5:
e5:a5:03:ff:13:d0:c4:1d:56:93:4b:cb:64:e4:9c:d6:08:64:
be:47:26:d5:d6:6a:6b:fc:06:10:df:b4:94:8a:ad:93:c1:3f:
6f:76:8d:a4:e9:b6:82:1f:ba:49:b4:41:db:f4:ec:35:b8:54:
41:fb:e5:eb:8f:21:97:f5:92:95:98:d3:66:10:37:c5:8c:66:
53:ad:d1:c8:37:5f:9f:f8:e6:1a:2d:29:c9:81:17:cc:59:c9:
05:10:36:ce:80:7a:a3:73:df:63:29:be:24:f6:7f:d6:05:d1:
25:28:d6:39:d4:92:3c:75:ae:e2:bc:d2:12:fb:79:c3:0a:e8:
b8:8f:58:f6:36:55:75:c3:4d:fc:19:8a:34:5f:b4:51:8e:f1:
3b:48:e1:2c:f3:99:b9:66:02:22:36:fa:df:bb:59:a2:07:cf:
3b:39:da:d4:77:cd:9c:46:01:81:58:08:87:8f:b1:5a:f1:ac:
67:8d:5b:af:a3:5d:fc:d2:f2:d4:4a:d7:bb:5e:6a:7b:72:87:
19:ac:15:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 02:44:02 2026 by rpki-client