Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/VKkvssM161qas9Lc73mf_1zuy4s.roa
File: VKkvssM161qas9Lc73mf_1zuy4s.roa (raw, json)
Hash identifier: 9j4BXYyuD5qa0uEbhJ1yuOcfOboEDmrBroKtzModrKE=
Subject key identifier: 54:A9:2F:B2:C3:35:EB:5A:9A:B3:D2:DC:EF:79:9F:FF:5C:EE:CB:8B
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019E70B6CA2375AF40695D537A0B9114BF2C
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/VKkvssM161qas9Lc73mf_1zuy4s.roa
Signing time: Thu 28 May 2026 22:31:27 +0000
ROA not before: Thu 28 May 2026 22:31:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197319
IP address blocks: 2a06:9801:748::/48 maxlen: 48
2a06:9801:792::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:70:b6:ca:23:75:af:40:69:5d:53:7a:0b:91:14:bf:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: May 28 22:31:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=54a92fb2c335eb5a9ab3d2dcef799fff5ceecb8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:f1:6a:0f:09:0f:a4:36:29:44:fe:ad:27:50:
36:ec:a3:a5:0f:3f:0e:5d:ea:80:a8:d7:68:8f:47:
df:ec:25:33:30:bc:f9:53:08:68:b1:06:d6:19:e3:
f3:73:11:80:13:eb:d8:41:38:2a:74:8e:6c:1d:52:
bc:c6:e0:59:a8:8e:7d:41:10:26:42:6a:ae:00:a9:
80:8e:dd:dd:73:34:b4:fc:e0:96:fe:b0:ea:56:9f:
a6:e0:4d:ca:34:ea:5c:51:2c:6b:99:6d:fb:17:4e:
a4:bb:5e:f2:b7:74:40:b3:99:5b:e9:a6:9d:73:ed:
fb:89:4d:7f:8d:48:f9:59:6d:88:2c:4c:36:c6:9b:
5a:7d:f0:b3:16:30:5f:a6:85:fc:11:9a:c3:27:47:
2e:f0:6b:29:49:27:1b:da:34:ef:9c:f4:08:23:63:
a9:a4:5f:30:76:1e:c7:77:e2:09:2e:81:31:63:5c:
85:d4:ae:df:db:15:c9:0b:7f:73:9b:01:03:0b:5a:
93:8f:fb:55:b6:d4:8a:62:15:6b:24:c7:be:15:c5:
dd:c0:9e:d4:00:db:ae:a9:c9:1b:71:d6:dc:24:b7:
4c:39:ab:75:78:0f:41:50:56:75:c1:e7:48:c3:cc:
74:3b:ef:b3:ac:16:5a:6a:df:ec:a2:8c:02:5e:0f:
35:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A9:2F:B2:C3:35:EB:5A:9A:B3:D2:DC:EF:79:9F:FF:5C:EE:CB:8B
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/VKkvssM161qas9Lc73mf_1zuy4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:748::/48
2a06:9801:792::/48
Signature Algorithm: sha256WithRSAEncryption
11:a5:a3:c5:88:af:d6:68:6e:36:33:5d:ec:1b:67:f4:0d:8e:
e1:ec:a6:df:e0:de:36:bb:52:cd:30:7c:f4:48:17:e6:f4:7e:
f2:95:dc:11:b3:08:27:23:7e:92:7e:70:a1:f9:11:d2:e4:80:
1d:42:00:e7:b6:ff:3e:88:54:ba:8b:30:83:6e:92:64:8f:fd:
ff:e2:39:a3:1f:cc:ed:62:3e:c5:50:04:36:05:4e:44:f6:b3:
d8:d3:af:62:45:5f:08:0c:1f:bb:73:47:ac:27:2b:44:9f:69:
3d:e7:8f:bc:96:1b:45:1a:26:66:04:33:fe:3b:00:05:1c:a9:
48:ed:05:f6:6e:6e:dd:a3:20:b6:54:90:d6:62:71:11:d5:64:
c3:81:6a:0f:ea:59:3a:b6:ba:37:6d:52:cb:00:97:ca:f2:f1:
a2:9f:38:eb:2d:d6:34:3e:c5:bd:6c:65:5d:f7:23:7e:16:e6:
93:ed:15:5c:67:5d:42:e8:a3:8c:3b:81:b1:52:ef:7e:7e:09:
19:e0:f4:2c:ab:7c:18:2c:16:c8:9a:97:f6:eb:82:16:f2:62:
ae:90:8d:22:df:77:29:af:69:94:a7:00:16:aa:5a:63:e1:8e:
f2:a1:5b:d5:d1:42:bf:02:ac:ac:a9:73:2f:e7:ed:b2:ef:25:
65:6d:95:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:20:36 2026 by rpki-client