Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/G60f18mQPKx-XNRfIVUMU1NDZs0.roa
File: G60f18mQPKx-XNRfIVUMU1NDZs0.roa (raw, json)
Hash identifier: aPll4DOkS4zwKxrRjfwMh1euaO0CwYcfL+WjrDduRq0=
Subject key identifier: 1B:AD:1F:D7:C9:90:3C:AC:7E:5C:D4:5F:21:55:0C:53:53:43:66:CD
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019EBE2CDEC5BFB39347E814E27F44F75EB9
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/G60f18mQPKx-XNRfIVUMU1NDZs0.roa
Signing time: Fri 12 Jun 2026 23:31:12 +0000
ROA not before: Fri 12 Jun 2026 23:31:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219484
IP address blocks: 2a06:9801:793::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:2c:de:c5:bf:b3:93:47:e8:14:e2:7f:44:f7:5e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jun 12 23:31:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1bad1fd7c9903cac7e5cd45f21550c53534366cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0e:62:a3:47:28:98:0e:30:0d:69:a9:b6:a5:
aa:b6:6e:d5:c5:eb:75:f6:d2:00:3b:2e:1f:24:55:
54:ac:ac:d7:57:5b:3c:be:3b:5e:18:03:34:ac:9e:
d6:11:5b:67:f6:2f:65:67:c0:ab:bb:77:0a:61:20:
99:be:0a:98:9c:d1:fe:0c:53:18:a0:bd:3c:10:b0:
a8:77:52:e0:03:8d:4c:a8:62:b7:2c:f9:93:c4:56:
d7:bf:2a:59:58:e2:d0:92:4b:e6:8c:7e:8e:20:24:
6d:28:cf:96:6a:7b:00:50:f2:e3:e0:2d:27:4a:87:
7d:da:e5:2e:06:63:5d:06:65:82:76:6c:a0:cd:e4:
97:38:0e:d3:b3:62:0f:57:01:69:fc:6a:2c:98:8c:
6a:cf:4f:cf:32:db:41:c4:2b:02:5b:94:d6:d7:ce:
35:2e:dd:54:6d:ab:e3:f9:e3:87:ea:1c:40:d7:49:
d1:dc:83:59:eb:fc:a7:43:dc:b4:ba:d9:ba:45:e5:
d5:48:38:12:f2:38:0c:06:3c:71:6f:3e:cd:c4:64:
0d:db:17:b2:64:65:e8:a6:fe:71:61:94:50:d7:b7:
f6:14:b0:23:6b:67:a4:16:79:38:2a:08:f5:97:c1:
c2:b4:a0:36:cc:72:5b:89:e7:cd:54:f8:4f:38:e8:
ee:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:AD:1F:D7:C9:90:3C:AC:7E:5C:D4:5F:21:55:0C:53:53:43:66:CD
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/G60f18mQPKx-XNRfIVUMU1NDZs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:793::/48
Signature Algorithm: sha256WithRSAEncryption
04:13:91:2d:06:c3:c4:8c:af:71:94:9a:8e:7f:5d:be:58:a5:
6b:bf:1c:bc:de:e1:a7:60:66:c0:fc:24:39:39:1f:55:9b:a3:
19:0d:ea:ca:7f:a1:34:75:73:c7:66:43:da:d1:15:af:09:64:
ec:b3:50:d0:93:87:b6:73:e5:ba:8e:78:7c:a9:56:44:d0:ca:
cf:44:cd:9e:9e:f7:82:0b:f9:81:18:12:12:d7:35:1f:38:78:
10:d5:3e:4d:11:40:97:df:d5:43:a0:47:d0:77:02:26:df:13:
04:0e:7b:28:5a:e8:f0:ba:b4:28:6e:74:fc:72:b3:32:db:d2:
08:20:41:0f:ad:35:ae:e3:1c:50:da:dd:20:69:25:99:29:64:
6a:1a:9d:70:86:95:48:e1:b6:37:78:94:8d:5d:d9:5f:0b:57:
14:3b:19:c3:fb:45:fe:20:76:cc:02:90:7e:2d:3b:e3:ba:7f:
f6:3e:cc:71:d9:5d:94:8a:d9:1a:25:74:51:47:7c:d4:16:db:
60:01:a0:c7:40:86:4e:28:f2:ab:aa:11:5b:92:e0:59:5f:1f:
72:da:b7:f1:28:cf:ff:0a:97:e7:3c:db:6d:22:ae:60:5a:4a:
2a:6e:9c:17:51:cd:a7:1a:d0:aa:1b:3d:e7:56:34:e0:b2:dd:
65:1b:c5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:20:38 2026 by rpki-client