Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/TfdkYQlndioQX3EoSywRutLMzIA.roa
File: TfdkYQlndioQX3EoSywRutLMzIA.roa (raw, json)
Hash identifier: 3B6Px/7SI+Xjn+F9U3Q/Kw3b74v64o/8n2D2no2gqmI=
Subject key identifier: 4D:F7:64:61:09:67:76:2A:10:5F:71:28:4B:2C:11:BA:D2:CC:CC:80
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A1AD223B15A95842E706804124EDF604B2
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/TfdkYQlndioQX3EoSywRutLMzIA.roa
Signing time: Thu 05 Nov 2026 19:14:24 +0000
ROA not before: Thu 05 Nov 2026 19:14:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218164
IP address blocks: 2a06:9801:15b3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 16:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ad:22:3b:15:a9:58:42:e7:06:80:41:24:ed:f6:04:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Nov 5 19:14:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4df764610967762a105f71284b2c11bad2cccc80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3f:15:5e:cb:a7:00:95:88:be:e0:91:f5:54:
5e:84:78:89:42:2c:ef:4c:99:11:46:a6:23:a3:a2:
81:2d:eb:33:80:c1:bb:e8:93:de:52:b9:89:6a:1a:
08:03:15:e4:47:60:59:0f:3f:49:17:47:cb:da:4d:
a9:50:a6:31:c7:3c:18:92:79:e7:3e:9e:46:e7:ff:
91:5d:c3:c7:e9:4c:20:e4:12:df:88:01:d8:30:56:
c1:36:d1:28:38:aa:ab:77:1d:dd:74:19:0d:46:e3:
33:7c:d1:d5:21:c6:b6:49:25:a9:57:53:9f:5c:04:
e1:03:ef:76:c1:da:7b:16:d7:37:b0:92:13:88:6d:
0a:0f:39:32:4f:5c:59:3c:2f:c6:35:87:6f:7f:0d:
58:2b:e8:01:a4:ee:96:3f:66:49:89:41:6e:4d:f3:
48:e7:d7:f2:46:22:32:f4:bf:3d:df:9a:83:c7:89:
dd:93:b4:00:66:f1:4a:3a:8a:bc:33:b2:2e:5a:d5:
46:41:8a:f1:67:bd:70:a3:24:25:72:9d:fd:ec:cf:
a3:c7:26:8a:a5:df:5b:69:2c:ce:33:2d:4c:cc:b4:
d2:53:88:ea:de:f7:91:e5:f9:7b:1d:17:14:48:d5:
2f:22:19:52:1b:28:fd:fa:8e:a2:27:f6:7b:8e:4f:
81:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F7:64:61:09:67:76:2A:10:5F:71:28:4B:2C:11:BA:D2:CC:CC:80
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/TfdkYQlndioQX3EoSywRutLMzIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:15b3::/48
Signature Algorithm: sha256WithRSAEncryption
76:a1:33:6f:77:06:d2:17:17:83:fd:28:f6:82:b2:9f:36:7d:
3c:f3:f4:bb:f3:59:a9:80:cf:8b:de:70:df:98:04:bb:78:a8:
6c:fc:04:3e:08:72:e8:3a:1c:d2:78:a2:1e:29:35:f5:87:75:
9e:19:c3:2f:e4:a1:f8:e2:ce:07:50:e9:f9:c7:91:fe:52:4e:
f9:ba:20:6f:da:39:55:80:ed:1c:0b:67:a8:f0:6e:7d:96:05:
1e:98:49:88:6a:d5:73:0a:51:39:1b:c6:72:48:45:cc:c7:4e:
79:c4:5d:95:f1:c2:ae:44:ca:6b:e6:53:34:69:2f:0b:14:cd:
52:e3:80:60:04:b2:f2:a9:77:95:f1:f1:7b:54:cc:2b:9b:98:
18:ab:a8:c2:77:93:25:70:d8:54:9b:57:cc:31:e1:9d:e7:20:
5a:cf:7d:87:bf:a0:30:10:93:37:75:ad:31:27:6d:b2:e8:d9:
65:95:09:f8:f2:c4:eb:c6:e5:c2:11:6c:93:63:a0:7f:57:6c:
73:b0:6a:7f:a7:0e:75:4a:7d:e0:4d:2d:ab:b1:59:bc:c8:2a:
c3:48:eb:a4:19:0c:74:6e:17:b8:12:58:c9:5e:de:d1:fa:a0:
a3:87:2b:0f:80:8b:7b:a9:d8:07:fc:ce:4e:19:f6:2b:4c:54:
36:37:55:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 23:25:49 2026 by rpki-client