Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/SeuIwwPbW-chjT6bVLaQbYEHXIY.roa
File: SeuIwwPbW-chjT6bVLaQbYEHXIY.roa (raw, json)
Hash identifier: b39dBEw/f6XbSIhi2TBzn/jX1FUXlKCHMXQ/D5LlJPU=
Subject key identifier: 49:EB:88:C3:03:DB:5B:E7:21:8D:3E:9B:54:B6:90:6D:81:07:5C:86
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019C923F49825F33FF4948A9C1DDA590C7D7
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/SeuIwwPbW-chjT6bVLaQbYEHXIY.roa
Signing time: Wed 25 Feb 2026 00:42:26 +0000
ROA not before: Wed 25 Feb 2026 00:42:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200677
IP address blocks: 2a06:9801:8c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:92:3f:49:82:5f:33:ff:49:48:a9:c1:dd:a5:90:c7:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Feb 25 00:42:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=49eb88c303db5be7218d3e9b54b6906d81075c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ed:1a:1d:b4:23:78:73:51:75:31:a1:85:26:
7c:fb:ca:ff:79:d3:b4:24:60:49:82:56:e6:bf:df:
49:b5:ec:45:f1:7e:90:f0:ed:b6:fd:a3:72:d0:2c:
34:a4:4e:41:3f:89:76:a3:0c:f2:1f:60:55:0a:ca:
d3:f0:27:0b:5a:df:c6:11:b3:06:78:7f:de:a4:e2:
8f:7a:2f:8d:94:ab:dc:5b:40:da:60:f6:5b:9f:36:
3f:98:b7:85:58:bf:6f:37:98:56:7d:fc:bd:a8:85:
50:b6:79:99:fa:95:a0:20:16:19:92:1a:db:8d:1a:
72:98:bf:67:14:c5:65:66:4a:1d:ee:31:c9:2c:a3:
0e:41:41:ab:3c:8b:93:fb:3e:0d:7d:e6:96:93:05:
33:9a:bf:6f:8f:b5:b1:0f:35:cb:b7:56:50:c0:65:
dd:99:3f:9c:ad:51:54:08:04:2a:30:ba:c7:07:09:
d5:a8:2f:3a:1f:92:b7:4c:e8:f8:1b:0a:da:09:a6:
7c:01:14:5c:da:9a:4c:98:2b:be:09:b0:6d:5a:f0:
f0:88:c7:b3:14:62:b9:25:35:61:08:4f:5a:bd:b6:
b0:91:23:ad:3f:52:73:4d:9b:78:51:20:3c:5d:89:
5c:30:55:49:36:4a:8a:ad:c1:15:bf:a3:6b:2e:27:
30:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:EB:88:C3:03:DB:5B:E7:21:8D:3E:9B:54:B6:90:6D:81:07:5C:86
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/SeuIwwPbW-chjT6bVLaQbYEHXIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:8c::/48
Signature Algorithm: sha256WithRSAEncryption
ad:b6:49:28:5c:2f:7f:ac:67:96:52:3f:59:40:b7:e2:33:cb:
c9:45:dc:40:f6:d1:16:48:20:b4:e7:7f:68:11:b7:b8:2f:50:
0f:90:50:d6:ba:84:2f:b1:26:67:21:2c:05:41:86:5b:bb:de:
70:a2:96:6d:8f:8f:55:04:04:b7:b5:62:d6:af:b6:89:db:b0:
e3:28:1a:4f:47:b3:a8:79:12:ec:df:05:5f:eb:5a:9f:b3:a1:
8d:6b:ef:13:e9:67:f3:ec:a8:2f:17:75:52:aa:74:5c:b6:a0:
04:54:dc:cf:58:ea:d2:ff:e6:cc:11:ed:06:2a:fb:78:b9:f9:
ba:f9:be:05:b3:96:c2:1f:86:fa:ab:23:57:6a:c6:ba:11:9e:
d9:b7:d9:44:3c:da:e5:7f:56:d1:24:f3:d7:2f:91:f0:fd:ac:
da:96:87:29:3a:39:de:5e:37:4c:37:13:94:dd:f7:5d:f5:97:
24:33:03:28:4b:6b:ab:bf:94:68:4f:95:ba:fb:37:86:f6:f3:
99:64:19:ab:b8:a3:0c:bc:dd:b5:31:31:e6:b6:d3:1d:c0:36:
a7:a4:a3:1c:6a:fe:a7:bd:e3:21:6e:a5:96:9e:ab:bf:3e:b8:
45:82:17:f0:0b:cd:2a:5d:be:ee:79:59:3d:cf:e3:6e:3f:42:
35:5a:ca:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:37:48 2026 by rpki-client