Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/T-V082OPDERoi2i1jxWgaV0zNFc.roa
File: T-V082OPDERoi2i1jxWgaV0zNFc.roa (raw, json)
Hash identifier: 4ElwtHVOEebyRjNUlZ9P1JY9rksFZGW69b0/wBz4MXs=
Subject key identifier: 4F:E5:74:F3:63:8F:0C:44:68:8B:68:B5:8F:15:A0:69:5D:33:34:57
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A011D728D6D641B901306C99E9D500C319
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/T-V082OPDERoi2i1jxWgaV0zNFc.roa
Signing time: Mon 17 Aug 2026 22:28:28 +0000
ROA not before: Mon 17 Aug 2026 22:28:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219239
IP address blocks: 2a06:9801:7fb::/48 maxlen: 48
2a06:9801:f96::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:11:d7:28:d6:d6:41:b9:01:30:6c:99:e9:d5:00:c3:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Aug 17 22:28:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4fe574f3638f0c44688b68b58f15a0695d333457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5e:dd:b3:48:82:e8:2e:82:c2:db:3c:b8:f5:
c7:c7:4a:b8:27:6d:26:71:6c:03:0d:22:f9:ed:a9:
4a:f3:21:5f:22:35:52:fc:65:ce:ae:58:52:ef:d9:
60:48:67:10:86:47:bc:30:60:d5:3f:40:bf:dc:ab:
e5:86:d8:ab:6c:a7:88:d9:a3:1e:b6:3d:76:b2:e1:
43:4e:63:23:7e:bc:d8:a0:34:05:68:33:dc:a2:5c:
7e:3e:72:32:09:86:fc:72:64:97:54:63:31:7f:7e:
ce:59:18:59:34:94:45:69:92:99:75:49:af:33:a3:
42:82:47:87:3e:37:52:a8:14:27:b2:46:91:90:78:
a0:01:85:43:91:c5:6d:91:d8:21:17:07:5d:06:58:
37:2a:57:41:fa:78:22:5c:d0:8d:91:08:da:ec:fd:
71:1a:4d:ca:b3:94:23:45:b1:54:a8:5e:04:58:51:
24:4c:a7:93:20:a0:96:31:fa:48:89:b5:cb:ca:76:
c8:87:08:60:3d:f7:a4:26:43:d9:fe:33:b1:4c:cc:
c0:8d:82:2f:9f:2a:a0:3f:ba:47:4e:2d:10:7a:13:
bd:f0:0c:de:19:1d:47:db:02:8c:06:30:b2:93:0c:
a1:52:d7:4a:8f:8d:42:72:3c:64:f6:e6:4b:06:62:
05:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E5:74:F3:63:8F:0C:44:68:8B:68:B5:8F:15:A0:69:5D:33:34:57
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/T-V082OPDERoi2i1jxWgaV0zNFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:7fb::/48
2a06:9801:f96::/48
Signature Algorithm: sha256WithRSAEncryption
34:2e:7e:37:ee:1a:31:da:c1:bb:c3:d6:ec:7a:15:4a:e4:60:
a5:8b:e4:95:d9:0a:4f:8c:cb:13:65:3e:e4:6e:5b:71:66:67:
0e:87:74:57:05:5b:c3:97:89:d4:00:67:a7:ec:ed:54:da:4c:
cc:2d:a2:c9:6a:c6:6c:8c:d5:09:09:16:95:ff:54:29:93:4f:
76:bf:d8:4e:c8:fb:75:e4:d8:3e:aa:88:15:d3:6e:eb:99:f3:
02:84:aa:ba:3a:56:5c:8c:a4:13:74:9f:0a:0f:93:11:56:90:
d3:d5:1f:a1:5c:c2:e8:24:de:15:53:19:f7:b3:d9:f2:2f:e1:
9d:21:98:6b:15:8c:86:9a:69:ad:98:12:58:54:f0:1d:12:c6:
2d:55:6a:67:e4:7f:af:d2:88:72:db:c4:23:2d:46:d4:da:a0:
d6:02:ad:ff:0e:fc:42:cf:dd:be:f4:d6:2e:18:7c:5c:34:cd:
35:30:07:fa:4a:a7:3e:1f:8b:9e:82:f0:43:7d:c1:da:6e:d8:
2f:7e:a9:8e:b4:b9:44:43:a6:ae:25:3d:b6:8c:fd:f1:55:2d:
82:5d:8e:70:ef:4e:8b:95:ee:2f:c4:ba:06:43:79:5f:b9:8a:
f0:9e:20:f5:2b:c6:89:00:ac:f5:42:c3:01:32:44:0c:90:16:
5a:d8:d0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:01:57 2026 by rpki-client