Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/Iv19JXi6-nJtxtagKB6qg5uqfHI.roa
File: Iv19JXi6-nJtxtagKB6qg5uqfHI.roa (raw, json)
Hash identifier: ngf0HfbeRdsM7u4ClIfCn6u1pZGysfP1EruYcCbeqnY=
Subject key identifier: 22:FD:7D:25:78:BA:FA:72:6D:C6:D6:A0:28:1E:AA:83:9B:AA:7C:72
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019C8CC4B2BB4D3078A275D7FF26F98AC65F
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/Iv19JXi6-nJtxtagKB6qg5uqfHI.roa
Signing time: Mon 23 Feb 2026 23:10:26 +0000
ROA not before: Mon 23 Feb 2026 23:10:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200878
IP address blocks: 2a06:9801:82::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8c:c4:b2:bb:4d:30:78:a2:75:d7:ff:26:f9:8a:c6:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Feb 23 23:10:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22fd7d2578bafa726dc6d6a0281eaa839baa7c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5a:e4:5e:d2:c1:0a:aa:b7:6b:96:00:68:1d:
b6:be:45:29:eb:d0:b5:42:95:0f:d2:2e:b1:c0:4b:
a1:f4:ab:59:82:ec:47:13:ba:6b:b4:a6:a9:72:de:
e1:f8:72:df:93:27:65:1b:5f:35:cb:c5:66:9f:0f:
2c:10:55:d2:7e:67:29:dc:a8:aa:8c:1d:79:d5:5c:
e2:4d:82:d6:61:c9:2b:47:a8:96:1b:d3:fb:d9:1e:
71:bd:cd:50:71:fd:00:0b:81:80:7e:23:68:cd:ea:
2a:f4:64:ac:a5:26:50:1d:fb:67:ba:4b:45:b0:dd:
29:f2:6f:ed:b4:4c:d5:43:ed:d3:9f:3a:f3:39:90:
fb:5f:39:c9:64:d9:94:b2:e3:8d:51:b5:2a:93:a9:
43:80:b0:51:88:4e:a1:44:3e:9d:7d:ed:15:ba:8b:
42:58:88:f9:31:39:0c:ce:7a:29:19:b1:03:e9:63:
ed:89:47:b5:7a:c1:4c:9a:e1:aa:2a:a5:2d:ea:02:
63:ac:91:f1:4b:ec:fb:fb:b4:24:a6:cc:7d:72:93:
ea:ec:10:d2:c8:21:76:09:57:3e:80:e2:e6:09:ba:
08:c0:75:e8:e3:ed:a7:86:12:2b:7a:05:37:21:eb:
7b:df:f4:0f:df:87:b0:84:d2:ab:14:fd:e6:9a:fd:
21:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:FD:7D:25:78:BA:FA:72:6D:C6:D6:A0:28:1E:AA:83:9B:AA:7C:72
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/Iv19JXi6-nJtxtagKB6qg5uqfHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:82::/48
Signature Algorithm: sha256WithRSAEncryption
9c:5a:25:9d:17:78:ab:1e:4b:93:b3:04:ae:45:a0:77:72:1a:
84:6a:ee:75:ff:31:0f:c6:d4:92:b6:8b:39:51:1b:16:ed:cc:
cf:17:b1:a0:69:0c:31:db:dc:11:5c:d6:41:95:b7:ec:b4:fe:
85:8f:b3:03:ec:4e:ea:bc:7c:86:8d:9e:a7:61:a5:0a:71:25:
43:db:85:e2:45:bd:0c:05:4c:6c:38:cc:21:40:a9:bd:59:85:
f4:6b:c1:61:0f:b0:60:8d:54:6d:64:0d:d5:96:2d:fd:3c:cf:
4b:39:92:84:0b:65:b1:c5:66:0a:1b:ff:d3:03:a1:d2:0c:de:
3e:d5:2b:cb:7d:ac:25:e7:e6:ec:2d:4c:20:55:3c:55:c9:91:
9e:ea:15:e6:3c:7f:b9:95:9f:b8:23:98:cf:1c:33:da:2e:cc:
fb:16:0d:37:65:f2:27:24:c5:66:fd:36:14:e6:16:87:77:1f:
c6:d3:52:b4:fe:9c:6b:12:ed:ce:2b:b4:4a:cb:6e:18:19:a1:
12:96:f1:a7:90:c1:68:ba:c9:2a:cf:23:15:d7:6a:2b:6a:87:
da:39:4f:33:67:88:40:1a:02:02:21:ba:4d:b5:1f:87:e6:46:
e8:bd:d4:11:bf:ea:9d:10:ee:38:c1:9c:1f:2c:a5:e2:6a:01:
0d:fc:c0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:11:40 2026 by rpki-client