Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/Ud5fkMn1PNqB3R3y82aaaFp_faA.roa
File: Ud5fkMn1PNqB3R3y82aaaFp_faA.roa (raw, json)
Hash identifier: /zbcYAPF7RzX1OVM/gFDw4innIZd9XqJ2CNbsm8fR2A=
Subject key identifier: 51:DE:5F:90:C9:F5:3C:DA:81:DD:1D:F2:F3:66:9A:68:5A:7F:7D:A0
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A067EFC19AD334EBB0000130DA33A5EA71
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/Ud5fkMn1PNqB3R3y82aaaFp_faA.roa
Signing time: Thu 03 Sep 2026 15:42:40 +0000
ROA not before: Thu 03 Sep 2026 15:42:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218771
IP address blocks: 2a06:9801:f99::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 00:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:67:ef:c1:9a:d3:34:eb:b0:00:01:30:da:33:a5:ea:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Sep 3 15:42:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51de5f90c9f53cda81dd1df2f3669a685a7f7da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:69:d1:3f:bd:bc:27:54:36:01:b9:f0:55:c4:
30:ec:f9:43:4e:d1:9a:92:fb:e4:d4:93:23:10:8d:
71:38:72:04:68:ad:1e:6d:de:62:71:4c:f9:a5:7c:
4d:c1:1a:61:79:d8:48:86:c0:86:01:14:8d:af:bc:
da:c2:ee:73:d4:b4:c1:c4:b0:22:aa:7d:db:64:7d:
cd:a8:01:d0:b2:25:cd:99:07:67:3a:cb:70:69:ad:
be:e7:68:53:63:05:33:3f:94:c5:5b:ed:59:40:50:
c9:e1:e9:67:b4:95:e6:df:89:56:b9:5b:e8:df:fa:
4b:27:78:5a:f8:1f:2b:62:e7:bf:cb:a6:69:bb:7c:
2b:e9:c7:6c:a4:1e:9b:ac:3f:a5:6d:6d:12:91:6d:
2e:9a:86:b5:dc:ef:14:5d:90:aa:d1:44:7a:e9:fb:
66:e6:a2:6a:09:56:7d:38:3d:5d:1d:93:86:6f:06:
53:f3:54:7b:42:48:89:46:a5:bd:e8:1e:a3:39:c5:
28:8f:39:33:b7:f3:c0:1b:b4:21:dd:20:4d:a2:ec:
0f:44:65:8d:51:4a:ae:3a:b7:25:f6:86:6b:5b:7f:
9d:8c:67:5c:6b:49:21:66:a8:b2:01:3e:c7:40:51:
da:56:67:43:eb:e2:ec:3e:48:bd:2d:0d:d0:f7:a2:
76:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:DE:5F:90:C9:F5:3C:DA:81:DD:1D:F2:F3:66:9A:68:5A:7F:7D:A0
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/Ud5fkMn1PNqB3R3y82aaaFp_faA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:f99::/48
Signature Algorithm: sha256WithRSAEncryption
29:a2:a7:06:13:c3:d0:96:65:29:d5:14:bc:be:72:c5:47:27:
65:93:0e:49:45:3f:1c:05:76:c0:6f:6d:5d:e0:cd:5a:77:ca:
4c:a9:ef:bc:0b:3c:88:bb:a6:b0:1c:06:1f:06:69:a9:01:3e:
43:4d:01:51:92:76:95:65:97:d8:92:44:5f:6f:9e:16:7c:a4:
dd:31:ba:f8:31:75:7e:d0:a8:a1:65:7e:3b:12:75:f0:58:1c:
e8:f8:0c:02:3e:06:eb:85:e1:ee:d6:4a:99:36:25:1c:3a:55:
38:49:9f:fd:1e:4e:39:a8:71:c8:5f:9f:b8:63:eb:04:be:0a:
85:19:ea:e7:ff:d0:e6:e2:53:02:8b:2a:2d:ca:30:69:8e:34:
fd:01:e9:8c:32:ce:99:ba:0a:56:4d:26:c2:70:a6:b6:81:86:
b5:bc:12:76:c4:ef:0c:35:27:ba:78:a8:bd:53:93:ec:c8:c2:
92:32:66:30:fa:52:80:b2:52:ed:09:35:58:91:8f:30:69:18:
65:23:17:71:2d:0d:32:d2:7d:35:a4:1c:1e:7f:6e:81:23:18:
7f:db:bb:aa:87:8c:78:5e:0a:4d:3f:74:e3:72:22:e4:43:de:
8e:9b:73:ef:07:c3:44:3d:50:7f:89:ec:28:97:e1:9f:4e:52:
a9:03:e6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:50:49 2026 by rpki-client