Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/UiFfb1w2Lu1bvFPOBAc31KyHj1w.roa
File: UiFfb1w2Lu1bvFPOBAc31KyHj1w.roa (raw, json)
Hash identifier: 83OZkcGWHSPkulEPi9xW0n3AgfjDdBFtubVdS50fexw=
Subject key identifier: 52:21:5F:6F:5C:36:2E:ED:5B:BC:53:CE:04:07:37:D4:AC:87:8F:5C
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A1752205006DDAA00E68C427DDDA9D0323
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/UiFfb1w2Lu1bvFPOBAc31KyHj1w.roa
Signing time: Sun 25 Oct 2026 22:15:26 +0000
ROA not before: Sun 25 Oct 2026 22:15:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218326
IP address blocks: 2a06:9801:15b7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 02:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:22:05:00:6d:da:a0:0e:68:c4:27:dd:da:9d:03:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Oct 25 22:15:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=52215f6f5c362eed5bbc53ce040737d4ac878f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:36:1e:72:e5:31:fc:57:d6:22:99:91:e9:fd:
e7:c1:63:ea:82:5f:2a:3b:9f:f9:7e:0a:2d:46:48:
7a:3a:a1:ff:25:33:5a:cc:b6:a5:8b:1d:c4:fc:d6:
9b:ce:30:ea:09:38:3f:f3:62:61:ea:94:cd:45:22:
a5:dd:a3:df:38:3c:f4:bb:12:bd:5f:06:9e:2f:93:
f0:2c:61:62:f2:01:55:8a:3a:38:8f:ab:0c:5b:2f:
22:59:b0:a6:32:bc:4b:87:e8:a2:05:39:80:d4:19:
5c:2b:35:55:17:14:85:33:5e:dd:b6:34:f5:ee:d8:
ff:3d:34:a4:a4:5a:dd:80:7e:e2:82:9c:b4:15:9c:
95:63:e2:5d:13:84:8f:48:59:f3:89:69:87:c9:73:
b7:ca:94:2b:bb:0b:b2:b2:50:d2:e7:61:9a:65:75:
77:df:be:d6:d6:ad:90:11:4c:2a:38:d5:d0:ea:9d:
87:b8:47:76:fa:b0:a6:d2:66:3c:ed:39:74:51:39:
fa:7a:53:e6:d6:91:26:f1:93:75:b0:ba:12:5b:e4:
39:ae:30:1c:cc:ce:43:40:cb:f8:56:0f:e9:5e:3a:
60:1c:21:bf:67:ce:f2:8a:a9:f3:ab:74:3f:ba:33:
ff:7b:44:87:a1:b8:54:d9:8a:d0:1e:0f:bc:f0:e8:
e3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:21:5F:6F:5C:36:2E:ED:5B:BC:53:CE:04:07:37:D4:AC:87:8F:5C
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/UiFfb1w2Lu1bvFPOBAc31KyHj1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:15b7::/48
Signature Algorithm: sha256WithRSAEncryption
b5:89:67:a2:fc:37:32:25:0c:59:ed:16:40:26:0d:e0:c2:e8:
24:df:c8:40:5a:0a:16:34:b7:fa:6b:de:4f:11:58:79:17:9f:
a2:da:59:67:01:27:dd:5c:4a:1c:54:dd:5a:f3:34:89:0c:81:
70:1f:a4:0c:2d:64:03:37:fb:53:75:32:7c:ac:e7:c9:83:97:
17:00:b1:a4:7c:29:bc:80:94:29:c2:3c:45:d3:55:a5:8c:f5:
92:af:41:26:3d:52:da:b9:4c:b7:4e:bf:cb:ce:5e:11:75:18:
c9:24:a7:98:f3:ce:4f:dc:6b:23:0d:b2:4b:f4:19:2b:32:89:
75:84:5a:ba:1d:4c:d1:a1:62:59:73:84:16:73:83:42:c6:b6:
78:35:07:79:2f:07:b9:78:cb:d2:b5:84:87:42:a2:d6:04:ef:
8f:16:4b:d9:56:d5:db:6d:1f:53:47:c8:cd:d8:37:43:5c:88:
c7:2c:2f:48:2f:72:78:7b:f3:e7:1a:c9:c3:7a:5f:f9:a1:af:
81:39:24:15:90:81:bb:c6:fb:4d:f0:25:9d:1d:89:d8:c4:29:
0f:c8:83:85:85:62:85:3b:3b:ad:ca:a8:7f:30:db:d7:d2:1e:
27:79:5a:11:c6:ad:40:f9:a2:e2:26:ea:89:b6:57:08:d9:e0:
16:5e:75:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 10:21:50 2026 by rpki-client