Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MDTm4U5hh-FmwRf0D2lxrsfqZt8.roa
File: MDTm4U5hh-FmwRf0D2lxrsfqZt8.roa (raw, json)
Hash identifier: HyvBJat3ZJrsHCQC/FDPC1/XU+KEYy2DnYnoVztkYUw=
Subject key identifier: 30:34:E6:E1:4E:61:87:E1:66:C1:17:F4:0F:69:71:AE:C7:EA:66:DF
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A05F01B02914BE34DE9DB6356D065A4E84
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MDTm4U5hh-FmwRf0D2lxrsfqZt8.roa
Signing time: Tue 01 Sep 2026 22:05:41 +0000
ROA not before: Tue 01 Sep 2026 22:05:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218789
IP address blocks: 2a06:9801:f49::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5f:01:b0:29:14:be:34:de:9d:b6:35:6d:06:5a:4e:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Sep 1 22:05:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3034e6e14e6187e166c117f40f6971aec7ea66df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b7:07:84:b8:7a:8f:ef:83:d0:0c:c2:8d:f8:
77:08:82:a6:06:7e:cf:30:3f:2c:e2:68:ff:d4:76:
7b:36:7a:a3:27:52:12:d1:1a:c7:87:08:40:58:a9:
51:a7:aa:64:78:25:b7:83:f5:09:61:64:94:b7:77:
93:fa:3b:b4:b0:fa:eb:34:29:b3:74:b4:f1:5a:2a:
56:02:c0:31:8c:d1:77:7b:d7:41:e8:67:e7:c9:d8:
2a:80:b3:48:4e:32:de:34:27:9a:51:c4:ed:31:50:
20:c8:9d:d2:1b:d6:e7:9a:6a:a6:e4:e9:4a:63:3a:
d1:ce:6d:65:ee:6b:c3:c7:81:3e:98:ef:f2:d7:f4:
0a:e4:db:3c:90:3a:95:4f:15:70:7e:a8:3c:2d:4e:
ad:e9:37:96:69:a6:bf:b7:ce:13:a5:b7:b8:2c:5c:
39:0c:ba:49:b6:1e:9f:d4:96:78:a2:ed:1b:f5:40:
1c:b8:6a:b2:63:5f:ca:78:72:f6:9d:68:05:6c:69:
89:47:3c:8d:27:87:8f:f3:3b:d4:1f:ad:d2:1c:06:
9f:d9:c7:19:63:f6:48:43:1c:6e:f2:e2:af:02:21:
f6:2e:71:ca:4b:e8:a9:14:d6:05:6b:70:3b:b7:67:
e8:5d:26:54:b8:8b:00:91:f6:1f:a4:dc:74:12:da:
68:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:34:E6:E1:4E:61:87:E1:66:C1:17:F4:0F:69:71:AE:C7:EA:66:DF
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MDTm4U5hh-FmwRf0D2lxrsfqZt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:f49::/48
Signature Algorithm: sha256WithRSAEncryption
08:fb:6d:93:40:3b:f0:69:b9:f7:58:1a:a3:e8:05:56:5c:a3:
58:fe:35:a8:ae:69:52:93:06:36:18:65:0f:46:12:2b:8a:3b:
91:b0:e1:83:83:8d:c6:3b:fb:d4:36:97:23:27:9e:73:1d:54:
b3:d2:ab:b5:33:c5:2d:95:6f:cc:68:ed:fd:ff:06:e5:fe:7b:
cb:ad:57:d4:7f:8b:8e:70:f6:55:25:68:78:05:14:a2:e1:ea:
09:4f:7e:37:d0:23:40:2d:ff:29:4c:58:83:d1:6c:e2:df:71:
0c:79:98:b3:99:00:18:e1:02:5c:5d:86:19:01:4a:e7:6d:50:
28:20:2a:70:c6:c8:fc:03:e3:fc:31:d9:8f:d3:95:7a:a0:d3:
18:cd:17:ec:13:b4:8f:7e:74:a1:f9:13:aa:58:83:98:fd:cb:
94:c2:df:49:7c:d8:c4:9c:e2:0f:49:92:fe:11:c2:7e:8c:83:
ca:c8:6f:f2:15:fc:ca:5d:64:cc:66:24:b4:6e:b3:13:30:69:
ff:b9:8f:72:23:ba:56:9e:c0:79:ad:30:4e:97:c5:81:40:b5:
5e:7a:53:96:45:46:a2:a4:31:5d:1e:e7:db:98:b2:f8:c3:0c:
b7:dc:a1:95:f9:dd:eb:d3:54:16:b5:dc:c4:7e:e7:44:db:46:
94:03:18:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:07:47 2026 by rpki-client