Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/R_wHhasYlmHPuzmZKqVr3baDrmk.roa
File: R_wHhasYlmHPuzmZKqVr3baDrmk.roa (raw, json)
Hash identifier: ETN87/np1JOZUgpR3OvZqz/qffCqzys3Gm7Qv79uc4U=
Subject key identifier: 47:FC:07:85:AB:18:96:61:CF:BB:39:99:2A:A5:6B:DD:B6:83:AE:69
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019D6ACEF26567ABF426B44AF2AD0939522E
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/R_wHhasYlmHPuzmZKqVr3baDrmk.roa
Signing time: Wed 08 Apr 2026 01:57:20 +0000
ROA not before: Wed 08 Apr 2026 01:57:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201422
IP address blocks: 2a06:9801:29::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6a:ce:f2:65:67:ab:f4:26:b4:4a:f2:ad:09:39:52:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Apr 8 01:57:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=47fc0785ab189661cfbb39992aa56bddb683ae69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cb:ba:f5:7c:bb:21:ea:29:13:a4:35:2c:12:
75:89:45:6b:5d:88:ab:20:bf:ca:93:2e:0f:48:59:
d0:84:c9:63:24:75:f1:e8:ef:ae:73:8d:ea:4b:c8:
0d:e9:d8:34:08:52:7e:52:1a:e4:1a:0d:c3:89:81:
df:71:21:ed:01:20:7e:0c:a3:87:51:76:b5:42:76:
6c:c0:85:8b:70:79:10:ca:72:fc:08:d3:93:b0:15:
a7:d7:65:bb:b9:60:26:d1:98:aa:df:6b:53:4f:cf:
bd:a0:06:ab:7e:15:d6:e2:df:6a:22:f5:3b:4f:a9:
58:f3:4d:5a:b6:d1:90:0f:82:29:72:31:b0:b3:96:
3d:b1:71:ee:3b:5d:68:a7:bf:76:b8:b7:82:cc:ea:
99:27:86:a0:c5:df:3d:a6:9a:ac:e4:7b:4e:9a:bf:
f8:df:8b:38:d1:cd:f1:bc:ca:38:f7:1b:80:e5:b0:
80:da:d5:95:ea:84:a4:ac:b5:38:74:bf:b2:d0:48:
c9:ad:67:3d:e2:df:04:3d:cb:68:32:b9:b2:8f:42:
1f:3e:cb:2c:34:1f:85:fe:a5:d9:78:1e:a7:ca:18:
59:fa:ea:2b:d4:be:f8:19:d5:a6:3c:4e:33:ce:d7:
1b:ec:b3:3f:35:60:87:f4:e7:7d:12:a9:c3:26:7b:
13:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:FC:07:85:AB:18:96:61:CF:BB:39:99:2A:A5:6B:DD:B6:83:AE:69
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/R_wHhasYlmHPuzmZKqVr3baDrmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:29::/48
Signature Algorithm: sha256WithRSAEncryption
90:8a:31:3b:df:b0:56:4a:c1:38:fd:76:bc:2d:6a:23:6e:60:
f4:6a:00:66:6b:ab:f0:0f:f6:7f:9b:25:d8:4e:30:d6:0a:62:
27:e4:0f:bc:cd:25:d0:23:d8:3a:16:76:9b:94:7d:2d:9a:c3:
3f:34:64:dc:2a:da:88:fb:62:43:8a:1f:ca:e2:ee:b5:8b:f3:
fd:3b:ad:72:45:2a:09:4b:be:76:c7:2e:00:d2:33:7f:17:73:
1a:b9:60:2a:ed:29:1e:fd:ed:3a:c7:fe:13:5c:83:b3:28:8b:
c5:3f:85:58:83:ff:1d:bf:15:b5:04:01:34:03:4d:42:49:0e:
85:45:65:2b:35:ac:c1:0b:48:9e:2b:8d:63:ed:b8:7f:ba:db:
54:f0:a8:3c:0c:ee:dd:69:0a:29:2d:ac:b7:db:cc:2d:71:d4:
8e:d2:37:79:e7:c6:b9:5b:3e:c3:f3:e6:ff:81:0b:c6:77:1c:
ae:1e:a3:45:01:5c:9b:fe:19:68:fc:34:65:44:a7:07:10:a4:
00:02:c3:9e:12:ef:bb:54:38:1d:06:82:4e:ad:c2:1f:30:67:
55:19:b8:af:ee:bf:53:1e:21:c2:aa:49:86:e4:63:5f:d4:32:
b9:08:8a:99:b7:2d:a1:97:03:44:dd:a8:77:79:b1:2e:47:1e:
e9:fc:2c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:29:58 2026 by rpki-client