Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/ULHQ4XjQ4tWyhhH0mgYHFky_Vgc.roa
File: ULHQ4XjQ4tWyhhH0mgYHFky_Vgc.roa (raw, json)
Hash identifier: /BcJbwT0vIpgnNB+dvEz0rxnQE+Yg+1p6ZJWAYFPD+Q=
Subject key identifier: 50:B1:D0:E1:78:D0:E2:D5:B2:86:11:F4:9A:06:07:16:4C:BF:56:07
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019EB87CE84F206C590123D72889407DB9C9
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/ULHQ4XjQ4tWyhhH0mgYHFky_Vgc.roa
Signing time: Thu 11 Jun 2026 21:00:53 +0000
ROA not before: Thu 11 Jun 2026 21:00:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198189
IP address blocks: 2a06:9801:2b6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 00:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7c:e8:4f:20:6c:59:01:23:d7:28:89:40:7d:b9:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jun 11 21:00:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=50b1d0e178d0e2d5b28611f49a0607164cbf5607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:29:42:45:b7:db:e3:e1:ed:16:24:a7:68:65:
d7:e9:c2:c1:cf:a1:52:b3:4c:f0:2d:72:67:29:46:
10:45:55:db:45:6f:3f:2e:68:55:83:b8:d8:f5:ef:
3b:e3:00:2c:a0:75:49:d0:63:42:01:d3:df:67:fc:
08:f9:6a:d1:75:28:76:33:4a:59:bc:42:49:03:af:
a3:9d:79:52:6d:0f:78:41:33:2d:7d:a1:5d:ec:4e:
18:83:f8:f8:ee:87:73:a5:dc:76:05:73:0a:6d:01:
07:3f:21:bf:24:af:2d:2e:3a:06:64:d1:8d:4e:bc:
63:89:0e:f3:5c:30:69:fe:fe:2d:af:ec:75:a1:b4:
0b:8b:79:19:1b:e8:d8:fe:91:21:33:ed:a6:46:81:
82:17:76:04:f5:8c:d7:b0:07:ac:db:46:c4:0a:d8:
df:9a:90:5f:9e:89:7e:76:bc:5a:e4:86:fd:4f:7e:
76:91:68:23:52:67:b2:90:41:1e:52:64:94:80:2f:
ca:27:14:4f:5f:75:dd:5c:72:72:70:b1:80:7c:81:
c1:8a:f1:0c:86:7b:db:4d:8c:ff:ba:4e:a8:3e:c6:
c8:c1:11:ab:80:c4:49:7f:32:bc:f0:47:6c:93:eb:
fb:53:72:7e:d0:21:66:32:a9:06:11:9f:33:d3:e5:
7b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B1:D0:E1:78:D0:E2:D5:B2:86:11:F4:9A:06:07:16:4C:BF:56:07
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/ULHQ4XjQ4tWyhhH0mgYHFky_Vgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:2b6::/48
Signature Algorithm: sha256WithRSAEncryption
00:9b:99:bf:a2:39:e4:02:3f:8d:ee:f1:d5:49:29:44:3a:1c:
a6:08:8d:17:a3:38:f8:30:52:5c:91:b0:b0:9f:e8:f2:2d:bc:
47:db:18:b4:2a:76:d4:b9:e9:97:e7:2c:34:93:0a:a7:b9:db:
9d:02:dd:2a:ba:fc:00:c1:35:52:bb:de:87:dc:a8:d2:95:1b:
40:83:1a:ca:77:44:3f:d5:9c:21:98:59:0f:4f:a2:bf:b9:c0:
2c:fc:60:d3:87:34:6f:30:94:38:83:c9:98:08:7e:d7:e5:58:
2c:83:ef:b6:7a:89:3a:58:f7:69:e6:92:c2:af:f2:21:ec:c9:
3e:ff:8f:d9:36:5d:4f:7c:39:17:f7:bf:6a:ce:f3:57:a5:9d:
61:ce:db:7b:14:d2:a7:67:0b:47:69:a0:a4:3e:fb:cd:6c:c2:
46:06:87:3f:aa:3f:78:fc:10:e9:94:e0:16:10:bb:c8:7d:00:
c5:4d:38:51:ee:ac:e9:88:f8:1c:6c:e4:87:4e:52:ce:48:04:
00:50:d1:86:04:88:ed:ab:27:71:5b:6a:f3:ce:18:41:e2:41:
11:54:9a:bd:23:35:0d:6c:a9:c4:bd:c5:55:24:e1:1c:64:a0:
d1:fe:68:dd:5b:2f:71:ea:43:29:16:1a:1e:15:90:71:2b:c3:
3a:07:e1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:06:07 2026 by rpki-client