Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/FhMObnlYbck6j80FBKtxye-I-eo.roa
File: FhMObnlYbck6j80FBKtxye-I-eo.roa (raw, json)
Hash identifier: kO/KzB2ct+LOz5sECY7VRf8v+hBXfBjXAqntILKbje8=
Subject key identifier: 16:13:0E:6E:79:58:6D:C9:3A:8F:CD:05:04:AB:71:C9:EF:88:F9:EA
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019D791A4E833554EE8DC700526A758BC29A
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/FhMObnlYbck6j80FBKtxye-I-eo.roa
Signing time: Fri 10 Apr 2026 20:34:20 +0000
ROA not before: Fri 10 Apr 2026 20:34:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200104
IP address blocks: 2a06:9801:1f::/48 maxlen: 48
2a06:9801:284::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:79:1a:4e:83:35:54:ee:8d:c7:00:52:6a:75:8b:c2:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Apr 10 20:34:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16130e6e79586dc93a8fcd0504ab71c9ef88f9ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:69:86:e8:86:5c:d7:23:af:8f:5b:82:44:07:
33:39:54:c2:87:bb:8c:5d:e8:20:86:4c:72:cd:9e:
6a:7d:49:8e:27:62:36:70:60:f6:b6:24:14:5c:22:
e0:ea:b3:ca:0f:60:99:b4:7e:16:b8:14:c1:03:9a:
aa:99:9c:c4:35:57:e3:07:f2:cc:80:84:b1:b7:aa:
1d:04:9c:a1:62:a1:06:c8:e9:e2:bd:f8:61:8f:8b:
21:47:fa:9a:33:33:97:de:b9:c5:16:d0:b2:23:cd:
05:3a:25:a3:6e:03:ae:5d:cb:66:9f:3d:de:44:fe:
43:78:67:a6:34:78:f0:19:bc:a4:e7:6a:10:2f:56:
e5:85:30:e1:be:13:4f:20:59:2f:f4:7d:12:f3:17:
48:62:3d:a0:d8:e4:1e:e8:e3:a3:f0:66:48:98:1f:
a0:74:03:18:1f:cf:0d:48:5d:f4:53:20:f8:c2:20:
24:f9:08:4c:a2:0c:11:0c:c9:b1:48:8f:b8:94:10:
d2:eb:57:52:ee:08:8a:9e:d2:f9:cb:59:71:73:f0:
f5:c4:a2:12:98:f6:4b:28:85:11:58:0c:d7:2b:fc:
ee:aa:a7:11:e3:a4:47:41:9f:de:9f:47:b3:da:1c:
48:b0:64:f7:08:53:49:2d:7b:ea:85:7f:45:60:2f:
fc:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:13:0E:6E:79:58:6D:C9:3A:8F:CD:05:04:AB:71:C9:EF:88:F9:EA
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/FhMObnlYbck6j80FBKtxye-I-eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:1f::/48
2a06:9801:284::/48
Signature Algorithm: sha256WithRSAEncryption
1f:0a:40:37:90:be:db:3b:84:ad:59:37:8d:25:ec:54:66:7a:
f8:c2:f8:13:99:1c:b2:cf:01:b8:93:14:30:7d:c8:5b:a4:01:
32:75:71:1d:0a:c4:09:b7:35:28:50:0c:18:76:54:a3:6c:9c:
76:23:98:b3:1e:5e:58:3b:ff:c6:98:0a:4f:a6:48:93:4b:31:
b0:ff:67:0a:66:36:4b:e2:ea:42:15:fb:31:72:eb:25:eb:c2:
92:55:66:34:53:ff:fa:db:53:da:d1:35:40:37:ac:52:17:08:
53:06:dd:5c:99:3a:17:ac:dd:d7:98:bf:a5:dd:e6:01:ad:2d:
2b:5f:a9:22:79:8d:60:de:a6:e4:b0:b0:93:4a:15:45:f6:44:
3a:91:5d:d6:e7:53:97:da:cc:9d:63:2e:63:02:18:2b:ce:57:
f0:ba:d5:a0:4b:b4:1e:4d:6d:bd:60:7f:e7:d7:9f:bf:9d:7a:
94:ed:8b:ea:5d:67:29:82:dd:f8:52:cc:f8:75:52:dc:04:f2:
66:dc:ad:4f:ee:ed:5e:ab:67:ed:84:95:21:66:6d:bc:99:33:
20:6d:45:2f:48:8e:57:da:6f:eb:6b:1e:40:57:7e:8f:15:b0:
8a:5f:87:45:b9:35:02:b7:12:b8:03:55:af:e9:e8:a9:d2:86:
42:fd:ab:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:27:59 2026 by rpki-client