Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/PXDDpoqpS5H0ZzEWHV5HJoylVfs.roa
File: PXDDpoqpS5H0ZzEWHV5HJoylVfs.roa (raw, json)
Hash identifier: bbQdkmHEPGMgTYxcyT7hoJEsSJvuALihxWelLnN5fjo=
Subject key identifier: 3D:70:C3:A6:8A:A9:4B:91:F4:67:31:16:1D:5E:47:26:8C:A5:55:FB
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A061C7C5FFB3FB3CB57C65BF7E21F5BB91
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/PXDDpoqpS5H0ZzEWHV5HJoylVfs.roa
Signing time: Wed 02 Sep 2026 11:01:17 +0000
ROA not before: Wed 02 Sep 2026 11:01:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218792
IP address blocks: 2a06:9801:1511::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 00:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:61:c7:c5:ff:b3:fb:3c:b5:7c:65:bf:7e:21:f5:bb:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Sep 2 11:01:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d70c3a68aa94b91f46731161d5e47268ca555fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:44:b3:19:91:75:c3:d1:9a:08:34:e1:5c:a4:
b6:90:1b:9e:33:f4:6f:05:6a:3d:2d:db:70:43:16:
e5:26:81:0e:cd:3b:dc:43:8c:d2:ff:f7:db:94:5a:
af:2e:5c:2e:1a:94:38:62:64:08:21:7b:4b:81:0a:
df:96:40:64:7e:af:b0:71:b3:20:c3:07:d9:cd:1a:
ea:f3:27:b6:14:10:f5:5b:3c:6c:ec:20:bd:ce:d5:
3c:10:27:38:f5:be:4a:1f:0a:be:47:51:21:27:49:
bd:00:0a:c9:b8:9a:15:1d:27:88:28:1e:34:e8:df:
bd:0b:4b:a3:55:92:fb:9e:51:41:7f:8f:c9:cc:f2:
f7:dd:7d:ea:03:8e:f2:19:32:4b:e2:80:41:81:2c:
2d:df:a1:da:26:a1:b6:1c:67:60:1f:14:ed:7c:cd:
e7:bf:71:b6:7a:fa:73:d1:02:d0:e2:e2:ce:0c:2b:
29:5a:80:27:c7:05:70:d3:83:4a:01:6e:fa:f8:16:
90:7e:c3:da:8d:83:23:50:e0:d4:d9:8a:25:a0:53:
f0:65:63:96:b4:13:ed:4a:84:e1:ae:06:c2:a0:04:
cb:b4:6a:6a:52:e1:46:ca:d9:7a:7b:50:fc:4d:d9:
78:a1:86:5f:8b:88:f1:35:a4:3f:b9:ca:d2:bd:39:
88:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:70:C3:A6:8A:A9:4B:91:F4:67:31:16:1D:5E:47:26:8C:A5:55:FB
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/PXDDpoqpS5H0ZzEWHV5HJoylVfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:1511::/48
Signature Algorithm: sha256WithRSAEncryption
76:22:8c:8b:3a:91:98:a5:62:82:fc:59:7d:54:42:c7:53:a2:
7a:99:42:5e:9b:78:65:a8:d3:74:a4:bb:1d:fb:9b:7a:41:71:
7d:4d:6a:8d:f1:2e:47:4f:fd:84:87:3f:9b:9c:9c:ba:d1:7d:
bc:3c:9a:d9:76:bb:da:4b:75:2b:8d:53:38:89:2c:7e:5e:8a:
02:b8:bb:f4:07:19:fd:ee:00:c6:e7:86:68:89:bc:cb:64:8d:
fb:40:a6:1a:a8:3c:b9:5d:95:8f:19:5e:2a:e1:d9:b9:f2:78:
fa:4d:11:44:0b:b5:f8:48:8a:26:74:f8:bc:6f:8f:67:47:50:
73:0a:bd:1b:0a:18:68:a1:43:c3:33:75:27:ad:11:3a:ec:77:
43:e7:22:3b:75:a6:47:f1:78:4b:22:ec:b2:31:37:3f:c3:e9:
a5:fe:54:5a:7b:7e:0f:6d:14:85:48:17:a3:06:fb:09:00:34:
47:8d:09:f2:7f:2d:6f:25:a2:a2:ac:9f:d6:d5:69:24:73:40:
d5:40:84:a4:6f:48:55:ff:40:49:22:d5:7d:8c:88:6b:a3:f8:
ec:33:0c:f0:06:02:61:76:bf:f0:f8:4c:a3:51:24:ae:42:3c:
b9:ca:71:f4:89:69:95:58:43:a3:96:a3:9e:3d:b7:3b:b6:b7:
a4:e2:a4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:51:33 2026 by rpki-client