Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/K3kUHnP6lWgrX_CLTcGyc3AFAv0.roa
File: K3kUHnP6lWgrX_CLTcGyc3AFAv0.roa (raw, json)
Hash identifier: hItXPpzSGWo3f4fH5lihK8cN8IVu/l+YZyT8lispF+w=
Subject key identifier: 2B:79:14:1E:73:FA:95:68:2B:5F:F0:8B:4D:C1:B2:73:70:05:02:FD
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A05FE866A5D9EA30EC132FFF2C36B2680B
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/K3kUHnP6lWgrX_CLTcGyc3AFAv0.roa
Signing time: Wed 02 Sep 2026 02:17:41 +0000
ROA not before: Wed 02 Sep 2026 02:17:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218822
IP address blocks: 2a06:9801:ff0::/44 maxlen: 44
2a06:9801:ffa::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 00:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5f:e8:66:a5:d9:ea:30:ec:13:2f:ff:2c:36:b2:68:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Sep 2 02:17:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2b79141e73fa95682b5ff08b4dc1b273700502fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b3:09:8c:e2:6c:f2:cb:2d:80:2f:62:0f:e8:
aa:f1:ad:4a:37:f3:ae:44:28:00:cd:7d:55:21:2f:
d7:ab:ef:96:6f:bd:83:0d:28:82:1d:8d:8a:12:cf:
9c:a3:78:d3:a0:d4:f5:4f:00:bc:79:6b:a2:30:33:
d8:3b:c7:48:ba:d0:68:6b:4a:d5:02:a1:51:17:bd:
eb:4a:83:19:58:de:8e:39:24:ba:09:3f:f5:c4:ce:
7d:12:d5:70:e9:e7:b9:b6:04:42:89:be:c5:5c:9b:
0e:17:0e:d6:bd:25:92:8f:04:a9:7f:fc:37:cd:a3:
59:c8:2b:a1:11:8c:60:58:d8:f4:0e:bd:1a:c5:fb:
26:24:3d:12:22:d8:5b:00:7b:10:c5:fb:33:e1:e1:
1f:b1:82:f4:d2:26:9f:02:1c:60:41:c6:48:b4:e1:
15:14:e9:e2:76:9a:cb:19:10:78:d2:9d:bd:40:2e:
4e:d3:bb:c4:b8:bf:86:4a:f9:4e:e9:ae:77:1f:ff:
8a:42:25:16:82:fd:d7:69:8e:3a:75:4c:cf:7d:6e:
1c:43:10:73:ab:75:81:2b:92:4d:29:eb:a6:73:84:
62:0c:b4:6e:2a:2e:2e:94:d7:7d:26:e1:a4:89:b4:
05:ee:67:6e:e4:93:c9:6f:47:e8:72:cc:4c:a1:3d:
fc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:79:14:1E:73:FA:95:68:2B:5F:F0:8B:4D:C1:B2:73:70:05:02:FD
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/K3kUHnP6lWgrX_CLTcGyc3AFAv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:ff0::/44
Signature Algorithm: sha256WithRSAEncryption
37:95:4a:77:51:ca:9e:29:7f:40:51:76:d7:66:0e:84:40:f0:
94:50:4e:b0:e4:fc:7c:2a:be:c2:fb:40:b5:cb:a0:3f:57:3e:
26:ec:41:1f:17:df:fc:32:33:5c:d6:3b:dd:b0:41:94:ac:4f:
fb:b1:ab:6e:04:b9:67:15:15:7d:d8:4c:c3:a6:10:10:e8:4d:
04:d9:ce:a6:e7:0b:26:a8:18:b4:8f:4d:3e:98:ff:b2:68:04:
dd:e7:03:14:3b:02:88:0f:b4:44:c2:09:6b:19:d5:9a:65:21:
2f:83:ce:e9:87:fc:51:94:72:3b:82:62:17:89:cc:66:83:49:
87:53:b4:a6:21:cc:ae:0f:ba:79:30:e9:13:53:1c:b6:35:04:
62:b5:97:12:34:0b:ea:93:02:21:c7:a2:88:40:35:95:d5:1d:
3f:61:7e:e5:08:b2:4f:9e:cc:5c:c9:69:fb:b9:bd:93:0b:1c:
8a:e0:4e:4b:0d:bd:b3:05:d8:7e:b8:be:c3:cb:bb:3c:d6:46:
95:25:2a:be:d8:43:28:60:95:64:88:4f:9c:a3:8d:5c:5e:8b:
12:ba:a0:f9:a8:cc:eb:63:4d:56:2d:98:b6:54:2a:bc:6c:6f:
71:e1:1b:70:35:6e:19:57:98:66:53:d8:5f:f1:95:c1:75:06:
af:cd:e2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:50:46 2026 by rpki-client