Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/HhLnlenRgl65bYG2ph5g0A2L_mg.roa
File: HhLnlenRgl65bYG2ph5g0A2L_mg.roa (raw, json)
Hash identifier: HIS1ZMSYVC8YmdJ9AFSjoR5l0f838+IJH/I2X9oMPLg=
Subject key identifier: 1E:12:E7:95:E9:D1:82:5E:B9:6D:81:B6:A6:1E:60:D0:0D:8B:FE:68
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A08678E89DC109EF1B8C1297F73AEAC71B
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/HhLnlenRgl65bYG2ph5g0A2L_mg.roa
Signing time: Wed 09 Sep 2026 14:01:05 +0000
ROA not before: Wed 09 Sep 2026 14:01:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218726
IP address blocks: 2a06:9801:1519::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:78:e8:9d:c1:09:ef:1b:8c:12:97:f7:3a:ea:c7:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Sep 9 14:01:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e12e795e9d1825eb96d81b6a61e60d00d8bfe68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:52:c0:4a:35:dc:0a:de:6b:af:c1:5e:3f:e3:
f9:55:51:87:e9:e0:69:b2:b8:69:5f:83:0f:65:0d:
17:13:20:f2:e8:ba:09:5c:2d:09:d4:fa:57:5c:5c:
ac:c1:38:4a:32:23:eb:af:dd:43:fa:60:37:61:d8:
31:88:02:c8:68:cb:96:8a:31:2f:64:40:5a:29:45:
ae:c1:d6:e7:98:2a:e7:52:d0:bb:a0:00:56:58:dd:
31:bf:6d:f7:75:ed:7a:1f:c0:14:92:c4:cc:a7:26:
df:bf:b7:ef:b7:91:80:95:e3:a5:45:68:0c:9c:09:
ce:3c:6c:a4:61:9d:9e:80:64:d5:84:c2:82:02:10:
80:d9:13:d2:f6:70:48:c6:c0:a4:ae:c9:a0:93:bf:
4f:ff:47:74:1f:91:66:78:45:26:0a:74:4f:a0:e3:
72:83:14:c1:0b:42:0c:38:e9:c1:45:0e:61:eb:6e:
ed:59:b3:97:46:8a:8f:19:a5:fa:c8:60:74:d2:e8:
6d:c7:b7:f0:94:74:7d:df:04:fa:33:35:b1:f3:58:
10:a8:1a:c3:22:cc:3c:83:73:4e:f1:68:64:dd:77:
19:7d:dc:65:2a:3a:4d:dc:d5:9e:19:2b:eb:cc:7d:
45:e9:8f:96:6c:64:f8:8d:4e:a1:0b:5b:6d:e4:e5:
85:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:12:E7:95:E9:D1:82:5E:B9:6D:81:B6:A6:1E:60:D0:0D:8B:FE:68
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/HhLnlenRgl65bYG2ph5g0A2L_mg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:1519::/48
Signature Algorithm: sha256WithRSAEncryption
43:68:d0:81:c5:00:da:a4:98:7b:ad:be:9e:1d:b9:fd:57:62:
87:9d:13:b1:29:34:2d:0b:00:a3:d4:db:45:a6:33:7f:55:2c:
ef:e3:96:d2:09:08:48:6d:76:91:0f:1b:38:61:2e:9f:1d:6a:
a2:91:75:9e:46:07:73:57:9f:fa:a0:ef:6c:05:a1:bf:90:9d:
9e:b8:8f:bf:4c:79:26:a3:7a:f6:6d:ed:b6:12:f5:21:2a:3a:
df:e7:c3:66:b2:b4:04:61:ff:94:ab:2f:50:26:bb:ea:0e:32:
5c:0c:da:a7:02:04:4b:fc:58:e9:42:da:38:c2:1e:61:dc:fc:
fb:90:07:16:24:d1:2d:e0:99:f6:f9:d9:5e:70:7e:49:34:e5:
a9:7a:ac:01:35:df:46:00:0a:46:0b:54:8e:38:be:f2:96:7e:
d5:c7:fe:ef:18:07:4a:5c:b0:47:39:cb:f3:82:6f:f0:85:1f:
3d:3b:df:29:78:b7:5f:df:74:88:8b:4a:fc:99:87:93:71:bb:
fa:b0:92:e8:ad:d6:f6:0d:aa:78:17:52:5e:8e:9a:33:14:6b:
48:33:71:94:6a:db:e5:7b:f8:f9:76:52:d0:b5:35:ae:8e:78:
50:5c:cf:d8:df:78:c4:8f:5c:c7:05:44:0c:35:ff:6a:de:35:
a8:6c:ff:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:04:48 2026 by rpki-client