Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/RLzXbPuhC4rqW8hlWgPPEq_jeZk.roa
File: RLzXbPuhC4rqW8hlWgPPEq_jeZk.roa (raw, json)
Hash identifier: 3px8yo2prgdJSA9WXdIIKsbPTmwMGfw9F6RhhTB6ZPA=
Subject key identifier: 44:BC:D7:6C:FB:A1:0B:8A:EA:5B:C8:65:5A:03:CF:12:AF:E3:79:99
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019EAE7C72A4B9979A8D64D7CEC8FF16C901
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/RLzXbPuhC4rqW8hlWgPPEq_jeZk.roa
Signing time: Tue 09 Jun 2026 22:24:11 +0000
ROA not before: Tue 09 Jun 2026 22:24:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219482
IP address blocks: 2a06:9801:799::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ae:7c:72:a4:b9:97:9a:8d:64:d7:ce:c8:ff:16:c9:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jun 9 22:24:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=44bcd76cfba10b8aea5bc8655a03cf12afe37999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:be:f5:a1:34:af:a7:72:75:e8:aa:2d:20:98:
42:04:73:39:06:b0:9b:89:91:f1:ce:05:f5:7a:16:
66:96:ff:ea:05:2d:19:66:80:70:11:f2:4f:39:df:
90:87:f8:9e:5e:75:19:53:e0:b8:d3:ca:99:98:ea:
07:4d:3f:6c:bb:66:4f:af:4d:f4:8d:12:98:c4:ed:
ba:c7:27:4a:40:a6:a4:6f:39:86:09:8a:61:e2:5b:
84:47:1b:34:df:5b:d9:e0:77:f6:f8:75:3b:9c:78:
d8:b8:2f:b1:c9:4e:95:74:a6:79:b7:5e:25:87:76:
b5:1a:d4:3e:a7:bf:64:e2:a4:47:01:4d:44:a5:e8:
6d:08:7e:d2:c2:cd:66:3d:3d:30:87:ce:47:dc:8f:
04:1f:7b:e9:f6:4c:f5:b9:47:37:a7:e8:ca:45:bd:
68:92:b0:a0:0d:a5:f2:45:30:40:06:f7:fe:7f:b0:
b7:7a:92:02:35:6b:f1:e7:3a:c6:2e:c5:f1:70:64:
1e:79:1c:45:7b:25:6c:b4:ab:ad:8e:c6:80:7c:49:
7e:9f:49:87:3b:6c:af:ca:5e:bf:d4:53:b9:76:7e:
b6:0c:b8:fc:d4:af:52:90:32:d8:5f:2e:c3:d4:68:
2e:34:4f:b8:00:26:08:b4:ff:c0:72:47:d0:73:48:
9d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:BC:D7:6C:FB:A1:0B:8A:EA:5B:C8:65:5A:03:CF:12:AF:E3:79:99
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/RLzXbPuhC4rqW8hlWgPPEq_jeZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:799::/48
Signature Algorithm: sha256WithRSAEncryption
59:91:19:4d:71:cd:3e:10:22:80:f3:b6:19:80:51:2f:b0:7e:
c1:7e:dc:4c:cf:3d:ca:dc:e5:21:5d:9b:73:18:bb:eb:01:36:
b0:8d:b4:df:93:d6:04:f8:dd:69:e6:4c:81:eb:ea:e2:de:0c:
78:2b:34:5c:87:05:28:39:5e:3c:31:eb:1c:3f:ef:1c:35:09:
6a:bf:a7:52:67:51:17:ae:08:8e:2d:89:40:6c:27:3c:c5:57:
71:a4:55:19:b0:46:ed:39:c3:10:4e:7e:6f:b5:37:b2:c6:b7:
59:bd:41:d0:07:e0:05:ab:b7:20:ae:98:68:7e:83:1a:fe:70:
09:50:b6:f5:5f:be:d8:d5:60:4d:b6:dd:a1:24:77:f4:5f:31:
db:5d:46:e5:16:17:94:bc:e7:9f:ea:d3:a2:32:ff:e4:47:1c:
84:3b:b6:d8:fd:8e:73:56:21:00:cf:08:23:57:21:e7:08:20:
ca:27:59:f4:80:0d:22:b8:b9:7d:ee:f0:e2:89:e4:b6:ef:d8:
50:07:0e:fa:e1:11:af:b5:06:5a:33:70:ce:30:5f:67:28:05:
dd:4d:ef:d7:71:38:da:6e:30:e2:aa:a7:bf:46:a5:61:72:fe:
82:0c:e5:3c:fa:b2:38:2a:84:36:fd:34:0e:73:a3:96:6c:f8:
6a:74:ad:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:16:29 2026 by rpki-client