Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/PRDAtaIIcsZCJjb71g6dx9qQldc.roa
File: PRDAtaIIcsZCJjb71g6dx9qQldc.roa (raw, json)
Hash identifier: Il1WULvs/WNeb05TRhZhLUa/lKRJe4S5L+pLpnnuQE4=
Subject key identifier: 3D:10:C0:B5:A2:08:72:C6:42:26:36:FB:D6:0E:9D:C7:DA:90:95:D7
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A089D3D85D0EAA63B6AAB896F4A8D6DBC2
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/PRDAtaIIcsZCJjb71g6dx9qQldc.roa
Signing time: Thu 10 Sep 2026 05:39:17 +0000
ROA not before: Thu 10 Sep 2026 05:39:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218718
IP address blocks: 2a06:9801:fcd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 00:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:d3:d8:5d:0e:aa:63:b6:aa:b8:96:f4:a8:d6:db:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Sep 10 05:39:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d10c0b5a20872c6422636fbd60e9dc7da9095d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9b:6f:77:0a:29:bd:ca:94:4e:58:4f:ab:f8:
75:4f:6b:ed:52:77:44:12:92:e8:f3:1c:e6:53:95:
68:e6:92:3e:25:2d:7a:3a:ca:c0:2d:80:2a:85:5f:
b6:ad:1e:ca:fd:7f:e6:52:1a:7f:31:0c:7a:73:b1:
59:54:2a:13:0e:7e:d8:08:cb:86:9d:20:21:9b:c6:
97:d5:b6:1d:1a:a3:b4:b3:33:66:c2:31:e8:69:53:
3b:80:2b:cc:a2:44:0a:b9:fc:25:82:57:b1:99:d5:
a8:3d:fa:33:41:06:0a:e9:85:fd:c3:dc:11:fe:09:
f0:eb:6d:b7:51:27:37:1b:8e:cf:a9:a5:8e:09:62:
af:1a:b4:33:4f:bb:c3:81:b6:6d:3f:0b:ed:7d:ea:
28:e0:3b:de:7b:7b:02:d8:04:e2:5f:b4:2a:f0:ae:
d6:82:22:4d:60:93:1f:1a:23:c6:91:2f:fa:88:98:
74:7c:8b:85:c0:62:72:0c:52:06:a0:79:71:06:91:
6a:84:18:60:0f:9b:77:86:f5:e3:19:13:4c:a1:36:
ff:5d:ca:84:82:76:8f:b8:fe:c0:bd:5a:60:51:64:
5b:9d:86:8c:6f:c9:bc:16:68:21:31:8f:49:86:69:
45:39:1c:60:fd:02:03:63:da:c4:69:a3:28:0c:df:
36:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:10:C0:B5:A2:08:72:C6:42:26:36:FB:D6:0E:9D:C7:DA:90:95:D7
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/PRDAtaIIcsZCJjb71g6dx9qQldc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:fcd::/48
Signature Algorithm: sha256WithRSAEncryption
8d:b6:cf:86:22:35:41:f1:83:f6:f4:d2:91:a8:09:d4:02:ac:
7d:f5:03:63:33:ef:b1:b4:2d:8a:57:8f:ac:92:df:69:68:58:
cf:a4:cf:e0:18:19:5a:7a:a2:6a:75:6a:68:d1:d4:93:f8:b9:
44:a9:97:ae:5f:72:a9:e7:ff:8d:ab:85:6a:e2:2b:59:54:a2:
24:d1:02:06:8a:2d:91:05:c0:62:e2:96:ca:19:0d:30:70:64:
d0:27:d3:f3:25:f8:8e:28:6c:35:f5:4e:93:67:e1:26:62:57:
76:62:b0:44:6a:13:6f:0f:df:3f:e5:7b:1b:f1:52:66:f4:4a:
b1:c9:6b:c4:09:17:d0:f7:42:fb:13:a7:0e:d7:73:d0:e7:ed:
b3:8c:2c:ca:14:c3:cd:9c:6a:63:e2:91:0b:6e:56:b9:5e:0b:
57:e4:cc:d6:8a:14:46:5c:61:56:58:f2:4f:15:54:ab:26:28:
76:0b:14:a4:55:0c:45:af:6a:c7:2e:bd:f0:52:ea:97:43:a8:
48:ba:ea:bf:57:bb:13:20:3e:03:ea:40:d6:de:75:ef:ac:45:
f6:5e:03:94:e8:8c:0e:c1:cd:b8:0b:c3:81:4c:b7:c8:2a:7a:
9c:e0:f2:59:64:79:66:c1:ab:f4:90:0f:89:b2:81:ea:ef:86:
9c:e1:f7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:05:32 2026 by rpki-client