Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/SE0WZdmF51ajCA3h0X75ny4WkPw.roa
File: SE0WZdmF51ajCA3h0X75ny4WkPw.roa (raw, json)
Hash identifier: Dh7jq2wzjBnMFjCoMLsgg+sH1F9t8a8ql1/ej/pxbo4=
Subject key identifier: 48:4D:16:65:D9:85:E7:56:A3:08:0D:E1:D1:7E:F9:9F:2E:16:90:FC
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A0591ADE8546F0531FF59E4A59AE0A374E
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/SE0WZdmF51ajCA3h0X75ny4WkPw.roa
Signing time: Mon 31 Aug 2026 18:35:28 +0000
ROA not before: Mon 31 Aug 2026 18:35:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218807
IP address blocks: 2a06:9801:fc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 01:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:59:1a:de:85:46:f0:53:1f:f5:9e:4a:59:ae:0a:37:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Aug 31 18:35:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=484d1665d985e756a3080de1d17ef99f2e1690fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:f4:76:d5:41:d2:cd:55:6a:17:f6:75:47:45:
60:0b:e1:ba:9b:a2:a7:42:93:1e:d6:ad:a7:14:92:
c8:f6:0f:51:ae:2f:e6:7f:b2:6c:59:df:5b:bd:79:
85:f4:81:8a:bf:2d:eb:3f:73:8b:05:03:e4:06:29:
3b:57:9f:7b:cd:8d:d1:b9:bc:7f:a8:bc:17:d1:8a:
d4:6f:c7:12:e0:db:34:70:c3:23:fd:cc:b1:9f:51:
f2:37:7e:f6:7c:7c:c6:43:59:6d:b9:85:c6:90:d8:
58:ee:2c:17:a3:9e:10:31:b7:ba:9d:ef:61:4d:79:
f4:aa:a1:a1:21:43:62:db:87:1b:04:d6:76:5e:43:
74:db:18:e2:1c:fa:1f:2b:11:2d:05:dd:ca:62:4b:
4c:ed:84:c8:6b:80:b7:22:01:67:5c:62:36:52:9c:
5a:e2:c4:33:58:38:8b:ee:68:38:54:42:7f:8a:fc:
32:e2:47:5d:99:a4:96:54:df:a4:41:4b:d1:6a:e8:
89:57:eb:6f:30:41:36:f5:d1:cd:45:01:be:b7:6f:
5a:9b:6a:af:5f:f3:00:a2:7a:06:24:a5:66:3f:e5:
0a:4e:78:71:b9:ae:e7:ec:d3:0a:da:de:5f:af:6c:
4e:f8:da:8e:48:57:00:ff:94:c6:5e:1d:c2:f4:93:
6b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4D:16:65:D9:85:E7:56:A3:08:0D:E1:D1:7E:F9:9F:2E:16:90:FC
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/SE0WZdmF51ajCA3h0X75ny4WkPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:fc0::/48
Signature Algorithm: sha256WithRSAEncryption
21:61:69:74:46:bf:ec:1c:8f:7b:8a:81:fa:8f:3e:1a:01:b4:
48:1a:d1:b6:49:75:25:f7:bb:cf:b0:4f:b7:65:1f:78:67:98:
f6:4f:d3:5c:80:02:9a:5c:80:83:31:b4:2b:89:f6:d5:0e:f8:
f6:7c:87:87:f6:16:79:44:61:52:94:f5:94:4a:d4:5c:0a:4b:
dc:5f:90:21:75:81:d7:25:f3:06:02:ea:f6:b1:b8:c8:c7:f1:
71:28:77:77:70:e5:98:d6:b6:b4:f9:97:59:f2:43:af:3a:9a:
7b:e0:21:da:cd:49:60:3b:e5:3c:43:40:67:78:c3:93:55:07:
f1:5e:7a:32:f2:85:66:f6:b3:be:4a:de:f5:3b:c8:23:46:ef:
7e:4e:76:bb:9f:d2:55:26:cd:ae:4c:ad:d3:6d:7a:f6:fd:dd:
11:07:b3:49:0b:11:40:4d:04:2a:0b:58:26:48:92:0e:07:6e:
f6:a2:08:93:77:06:34:54:bf:7e:32:26:5e:68:58:cc:38:d7:
2d:1d:de:10:4d:85:7b:61:0a:94:4a:3e:69:84:6a:40:d4:dc:
4b:29:18:a2:53:1d:ea:52:c5:49:08:13:a3:62:59:a0:19:55:
d6:4e:6f:31:55:af:2f:79:f6:62:b2:99:06:1c:89:65:88:e8:
b3:1e:0f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:29:21 2026 by rpki-client