Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/GhNa1mTL7Kqc_WAjMiZGnOrQWaM.roa
File: GhNa1mTL7Kqc_WAjMiZGnOrQWaM.roa (raw, json)
Hash identifier: ErkDn7Gs3m6jRS528aAzbhHmQKesvxJ1dO4Lf4WvHxE=
Subject key identifier: 1A:13:5A:D6:64:CB:EC:AA:9C:FD:60:23:32:26:46:9C:EA:D0:59:A3
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019E8F8A5DE847F22FB970CF7C370D82DE1D
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/GhNa1mTL7Kqc_WAjMiZGnOrQWaM.roa
Signing time: Wed 03 Jun 2026 22:11:10 +0000
ROA not before: Wed 03 Jun 2026 22:11:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197378
IP address blocks: 2a06:9801:741::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8f:8a:5d:e8:47:f2:2f:b9:70:cf:7c:37:0d:82:de:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jun 3 22:11:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1a135ad664cbecaa9cfd60233226469cead059a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e1:89:88:b7:72:f5:31:97:4d:ac:c2:43:88:
20:3d:47:7b:f1:89:b4:17:36:25:ef:b4:da:74:69:
42:4b:61:61:20:6e:ae:04:ab:11:5d:56:39:a4:3f:
42:6a:16:e1:1a:ca:44:9b:a8:83:66:19:55:73:02:
05:08:9d:8c:a6:dc:86:ea:eb:e9:52:ae:81:40:4d:
a3:09:f1:f6:7b:7c:dd:75:b0:c9:f4:77:b9:bf:11:
55:c3:f1:f5:74:4f:82:da:e1:e8:cb:52:ee:67:6e:
03:23:20:41:1c:d9:da:7d:3a:4c:32:ee:24:9d:7b:
fd:c0:50:34:4b:97:2e:94:b7:cf:0a:16:00:2f:12:
3a:40:de:44:0d:8f:ae:62:0e:be:59:17:00:c5:af:
2c:5c:66:e2:98:d8:69:16:66:46:29:a2:1d:b1:e8:
8e:85:2d:a8:cb:46:cc:c6:46:6a:3d:00:40:a8:b5:
2d:fc:58:cf:63:ab:1b:b8:ef:f3:83:27:24:63:12:
50:06:be:af:53:3c:97:0a:38:68:58:6e:92:fb:58:
bd:9e:90:83:11:aa:d2:83:a5:c9:91:e4:20:bd:f6:
1f:44:14:36:ea:b5:d2:eb:be:ad:98:31:ac:25:70:
de:b2:c5:76:38:69:e4:79:9c:ff:5c:b1:55:a0:51:
92:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:13:5A:D6:64:CB:EC:AA:9C:FD:60:23:32:26:46:9C:EA:D0:59:A3
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/GhNa1mTL7Kqc_WAjMiZGnOrQWaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:741::/48
Signature Algorithm: sha256WithRSAEncryption
89:8e:7d:fc:a6:5a:f6:b3:6f:be:f4:ce:51:b1:a3:80:fe:83:
54:6a:b6:ce:83:2b:44:af:19:fe:f1:33:fe:c5:5f:2e:a2:ef:
a7:c5:ea:7b:b5:cb:86:3f:e0:ff:25:d3:f8:7e:91:3a:cb:5b:
dd:33:34:95:28:c9:d2:4d:aa:c7:b3:53:24:05:bc:81:70:c4:
30:82:86:4f:27:36:59:bc:c6:87:e3:b8:16:4e:2a:93:0f:1e:
84:fa:d4:c6:01:e4:19:b2:71:9a:90:f3:84:4c:25:0c:85:47:
e5:68:fc:27:82:09:bb:a1:95:a6:5d:40:20:3e:3e:15:13:9a:
6b:a3:dd:49:42:f3:83:20:56:c5:b9:76:8b:c3:b6:77:d6:6f:
4d:45:f3:e6:d3:e1:e6:32:48:9d:5a:1b:4c:59:42:75:b5:d2:
25:f1:14:62:aa:f0:88:69:5f:99:b3:fa:44:2a:46:b2:97:51:
c0:ae:93:b9:66:b7:7e:d7:10:3f:7a:b7:57:8c:91:08:d4:af:
f6:c8:81:04:ad:4b:91:12:63:ca:16:65:83:06:04:15:30:7c:
2f:b1:42:5c:5e:5b:d6:45:ab:62:e3:63:f6:8e:28:c6:fb:e6:
c6:16:bf:82:eb:d5:64:d9:e7:f0:08:10:eb:c2:de:bd:cc:c4:
08:4d:0a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:20:42 2026 by rpki-client