Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/TAcFQk20Y4VtMuV__VqvdvntiRc.roa
File: TAcFQk20Y4VtMuV__VqvdvntiRc.roa (raw, json)
Hash identifier: 4mUN3gbJXADViXcbdWg40KZdfgcMCkHoeYYa+qLA7nk=
Subject key identifier: 4C:07:05:42:4D:B4:63:85:6D:32:E5:7F:FD:5A:AF:76:F9:ED:89:17
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A17D13B630A2C27A332A1CF72F2FFA1867
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/TAcFQk20Y4VtMuV__VqvdvntiRc.roa
Signing time: Tue 27 Oct 2026 11:16:46 +0000
ROA not before: Tue 27 Oct 2026 11:16:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218293
IP address blocks: 2a06:9801:15c1::/48 maxlen: 48
2a06:9801:15d0::/44 maxlen: 44
2a06:9801:15d0::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:13:b6:30:a2:c2:7a:33:2a:1c:f7:2f:2f:fa:18:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Oct 27 11:16:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c0705424db463856d32e57ffd5aaf76f9ed8917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:58:d4:4e:4e:ae:90:a4:1d:8d:99:63:37:fd:
ea:fa:8f:89:2d:ef:e9:54:65:3c:02:d5:5d:ee:7c:
47:64:05:df:88:85:8a:00:e1:a8:89:e4:8e:44:27:
ce:42:36:aa:de:3f:08:4b:31:36:62:59:4f:64:cb:
74:2e:a1:36:24:12:11:76:a3:89:c7:ec:01:3c:51:
eb:44:4c:73:a1:e1:36:e1:68:d5:99:57:e6:d6:2c:
93:43:e9:7e:4f:a8:a1:c9:5f:e5:a7:cf:c6:19:c4:
19:a1:4f:63:95:c2:ac:76:52:54:19:4c:ed:3b:87:
5c:67:c5:4f:e8:ff:4a:76:04:a6:65:eb:f4:07:25:
00:bb:aa:3b:4a:3c:45:f2:8c:13:83:db:51:e6:a2:
83:4f:e0:36:e0:c1:ab:04:ef:d5:6d:bf:39:82:46:
4f:ba:17:09:94:ba:b1:f7:c6:f5:41:4d:80:ba:ec:
c9:c9:dd:ff:a0:b7:9d:b2:5e:c2:e4:ae:64:5e:32:
da:fb:e1:fb:26:33:a1:77:87:85:68:ff:91:9c:94:
13:ce:25:3b:db:47:d5:91:90:a2:0b:dd:03:2b:2f:
bc:34:34:36:b5:bc:8a:a2:23:3d:9f:08:59:a2:e5:
7f:a3:8c:09:19:71:23:6e:26:22:17:37:1d:ab:d9:
26:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:07:05:42:4D:B4:63:85:6D:32:E5:7F:FD:5A:AF:76:F9:ED:89:17
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/TAcFQk20Y4VtMuV__VqvdvntiRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:15c1::/48
2a06:9801:15d0::/44
Signature Algorithm: sha256WithRSAEncryption
b4:0e:84:c0:9d:36:b6:01:02:12:97:82:7b:f0:d8:34:75:77:
a1:97:49:19:58:27:50:8b:69:02:79:a6:1b:6f:c6:32:c8:e4:
7c:eb:7f:5c:08:d9:84:e1:d6:54:15:d3:e5:9f:b3:c0:ea:43:
ee:1a:68:02:00:6a:07:c0:42:37:66:9d:ad:c2:e5:e7:38:6c:
e4:a9:00:85:4d:d7:16:af:ea:80:64:87:05:fd:13:e4:52:86:
92:c0:74:06:c2:56:c1:0d:57:d1:e5:b8:2b:e0:26:22:83:38:
4d:55:27:40:d7:0d:a6:6d:0e:ef:8c:59:81:f8:ea:34:02:7b:
0e:77:43:0f:e5:5c:4a:e1:38:38:43:bd:df:c5:c8:ae:fa:ed:
1e:14:6a:e8:d0:b8:f1:3c:54:96:49:19:51:9e:cc:af:21:bb:
d1:4b:82:90:05:82:1b:de:5b:58:b2:c4:f2:7c:73:da:3a:95:
24:c8:7c:2d:d1:2a:f0:17:ad:e1:63:95:51:05:a8:00:32:af:
67:dc:08:c6:ff:d2:6f:c0:5e:79:28:b8:4a:75:49:79:ac:e4:
c3:34:4c:35:f1:52:b2:47:fc:a9:8e:63:5a:40:5a:58:0c:6a:
2d:c2:09:5b:aa:fc:1c:67:6c:d0:6c:73:49:9c:4b:c4:2d:c2:
69:5b:69:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:36:26 2026 by rpki-client