Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MXWEf3Kb2rdwximgInNVxA7ImK8.roa
File: MXWEf3Kb2rdwximgInNVxA7ImK8.roa (raw, json)
Hash identifier: 5cBJJQfAshMgPLFxzj9UKJ5iHmD+u8JDhjFDLOCsf2Q=
Subject key identifier: 31:75:84:7F:72:9B:DA:B7:70:C6:29:A0:22:73:55:C4:0E:C8:98:AF
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019D8E998AA02755EDCC61B77139FE1603D7
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MXWEf3Kb2rdwximgInNVxA7ImK8.roa
Signing time: Wed 15 Apr 2026 00:45:20 +0000
ROA not before: Wed 15 Apr 2026 00:45:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199012
IP address blocks: 2a06:9801:26f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8e:99:8a:a0:27:55:ed:cc:61:b7:71:39:fe:16:03:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Apr 15 00:45:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3175847f729bdab770c629a0227355c40ec898af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4b:38:3f:88:29:4e:84:cd:a5:0d:82:13:5b:
83:d8:fa:54:2c:b8:b5:60:00:be:86:52:d6:b9:cb:
a6:c1:5c:76:0f:c8:2b:ec:36:87:f9:ec:8a:57:3d:
5e:d0:00:32:f0:4b:15:a4:86:8e:0d:40:5c:97:35:
b7:46:16:22:89:5a:4e:16:60:14:a7:20:99:36:47:
1a:c8:24:5e:05:82:aa:b5:97:cf:a9:bf:73:f9:0f:
16:9d:b7:95:a9:2d:23:19:0a:52:61:e8:fb:73:94:
0e:43:d5:8f:ea:0c:35:ab:40:f3:ec:10:bf:78:03:
17:89:f9:8e:24:00:3e:77:39:e4:d3:dc:a4:82:e7:
e1:9c:a1:0b:0e:7f:8d:59:04:b4:3b:46:f0:2b:66:
a5:f4:74:47:ed:6c:c0:67:a8:d0:55:86:8e:82:0e:
c7:0e:58:00:77:a4:03:f6:ce:ff:2d:ec:cc:be:68:
59:f5:c4:d1:02:56:de:00:91:aa:a3:35:6d:ae:22:
7f:a6:ba:d7:88:2a:1e:e1:ab:89:f8:17:66:23:1d:
e5:52:c6:61:e3:df:0c:99:52:c6:1f:ee:b4:09:02:
51:48:85:47:5a:27:67:8a:14:fd:2e:ab:0d:03:de:
60:81:21:d5:b5:a9:1f:9b:5a:d1:20:5d:f1:d8:7c:
b5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:75:84:7F:72:9B:DA:B7:70:C6:29:A0:22:73:55:C4:0E:C8:98:AF
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MXWEf3Kb2rdwximgInNVxA7ImK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:26f::/48
Signature Algorithm: sha256WithRSAEncryption
40:1d:4a:ba:97:95:84:5d:8a:ca:93:e0:39:ce:f1:18:7a:c8:
d1:81:e4:ec:68:c3:77:aa:b3:af:90:42:1b:49:fb:82:49:f6:
28:f6:7c:58:39:2a:02:5d:00:1a:40:f8:e4:03:bf:72:42:fb:
1f:67:3d:2c:af:a4:60:d8:79:15:2f:8d:f4:1f:22:f0:44:64:
55:d0:32:1a:06:03:b4:53:11:ca:72:0f:99:7e:ce:78:cd:9b:
f1:a2:14:e8:49:18:e6:40:d8:97:34:3a:a0:e0:14:e8:65:7b:
2d:3b:36:80:b5:d8:c0:81:d3:d5:47:c3:b5:e7:7f:b2:9f:3f:
b1:23:af:f5:e1:4a:1c:a7:59:c3:e9:6a:e9:a6:a6:5b:cb:c2:
d3:fa:6b:29:57:94:1a:8d:4d:d4:39:97:28:c9:fc:95:1b:56:
96:63:3b:b6:ba:97:ca:51:24:ca:06:62:32:8e:8d:30:b0:0c:
4f:25:6c:a1:e2:30:1b:dd:e8:ce:49:fd:1f:77:78:f8:a8:8d:
cc:0c:92:5d:21:34:28:d6:d2:75:ee:f6:f4:e0:d1:fa:92:1f:
ba:18:11:9d:46:d1:e0:a9:ad:bd:d8:c8:57:a6:d7:e8:d2:2d:
0c:4a:26:fb:70:be:0e:23:ad:26:25:c8:9e:2d:be:ec:d2:bf:
4e:4d:57:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:12:07 2026 by rpki-client