Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/I-B_dRlRd7j4vyRI3Q9f1UsOvhk.roa
File: I-B_dRlRd7j4vyRI3Q9f1UsOvhk.roa (raw, json)
Hash identifier: WJrbM4HPoNv4q2n3mu0V1U4bP7pKJqubqY3A9UE0AHI=
Subject key identifier: 23:E0:7F:75:19:51:77:B8:F8:BF:24:48:DD:0F:5F:D5:4B:0E:BE:19
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A05897B9C47D3077A331994809CCA5C2BF
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/I-B_dRlRd7j4vyRI3Q9f1UsOvhk.roa
Signing time: Mon 31 Aug 2026 16:12:13 +0000
ROA not before: Mon 31 Aug 2026 16:12:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218804
IP address blocks: 2a06:9801:fc7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:58:97:b9:c4:7d:30:77:a3:31:99:48:09:cc:a5:c2:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Aug 31 16:12:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=23e07f75195177b8f8bf2448dd0f5fd54b0ebe19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5a:db:2d:a7:b6:11:5d:81:b8:f6:ff:b4:a6:
b8:9a:2a:f5:e1:b8:a9:f9:7d:1f:34:40:0f:83:7b:
f1:39:a8:ec:7c:e2:0e:ec:df:bb:47:13:4e:d8:2b:
7c:41:da:b2:bd:08:e7:85:b2:e1:71:f6:40:b8:d9:
a7:f8:3f:24:ca:5e:bb:48:46:00:f4:2d:da:70:08:
5e:d6:a2:36:61:e0:ba:c3:be:7e:92:41:62:26:76:
66:3b:8a:b1:42:c5:8c:60:36:69:6e:3e:f5:26:aa:
c2:59:df:e2:24:9c:9d:fb:00:c9:df:29:c0:47:23:
b9:70:bd:c2:f2:ac:e0:e1:67:45:3e:d0:76:fc:26:
f8:a4:ec:59:d5:f6:80:ce:73:a2:9b:eb:6f:7f:29:
06:e4:e5:5e:e2:2a:b0:49:fc:68:f5:27:b6:9f:8b:
5c:1f:92:43:bd:37:7d:32:af:46:26:59:98:6f:a4:
a6:b6:62:82:a7:6c:40:38:38:48:1f:d5:67:07:32:
0e:6f:3d:ff:d5:36:1e:d5:6e:76:c5:c7:64:ac:19:
a1:c7:f9:4e:a4:fe:72:63:6f:6e:00:41:9d:e8:4b:
15:89:c9:ea:76:7e:92:1f:13:9f:3c:51:b9:ad:6a:
35:8b:2a:86:cb:50:f6:d6:b0:2a:f6:4e:e1:b3:8a:
69:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E0:7F:75:19:51:77:B8:F8:BF:24:48:DD:0F:5F:D5:4B:0E:BE:19
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/I-B_dRlRd7j4vyRI3Q9f1UsOvhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:fc7::/48
Signature Algorithm: sha256WithRSAEncryption
76:1c:a6:2f:36:30:69:5a:31:f1:87:ba:d7:45:17:43:57:06:
28:f5:3f:55:8a:32:f3:ba:6c:94:5d:ea:a5:81:06:0b:81:21:
da:18:3a:40:3e:4c:9f:09:92:57:c0:64:d2:6b:9c:0c:93:bd:
ac:98:d8:7b:03:11:e9:b8:35:19:fd:5d:fe:61:f0:a6:4b:6d:
0b:c1:49:8a:b8:ba:3f:d2:85:23:46:75:bd:36:b0:59:02:56:
4f:08:87:98:fc:8c:6e:ea:df:c3:1d:7b:15:c5:a1:ae:45:24:
b0:1a:69:fa:1f:58:06:6e:e3:c2:86:06:0b:73:c0:7a:89:6a:
dc:06:63:f7:9a:0a:e6:db:04:a5:e2:da:d9:4d:e8:2c:09:0b:
51:6a:2d:ca:c6:ea:17:0e:45:4b:12:55:df:cb:c2:8f:fc:05:
72:1f:96:51:a5:f5:51:dd:bf:b7:27:ee:c8:3f:fa:05:80:9d:
e8:7f:fb:7a:8e:67:f1:68:37:ec:9e:86:30:c1:95:82:45:f8:
59:ee:ea:83:db:d0:26:ea:12:83:57:16:ec:09:a1:6a:b7:44:
f5:2c:ae:04:f4:23:7c:59:1b:17:2d:3d:ca:18:da:1f:1e:52:
85:c7:4c:07:e2:1e:71:1e:a9:0a:46:7c:cb:a2:eb:06:ab:e5:
cd:d6:11:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:15:06 2026 by rpki-client