Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/XXLwfd_R7pIqrDScphd9Wq6r6xg.roa
File: XXLwfd_R7pIqrDScphd9Wq6r6xg.roa (raw, json)
Hash identifier: YXuorgbvMUJ8cHbhawlK0Ksm32PgxA9KQqtIk1cQjPA=
Subject key identifier: 5D:72:F0:7D:DF:D1:EE:92:2A:AC:34:9C:A6:17:7D:5A:AE:AB:EB:18
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019E773F73DA37B653CD019DE6E2D4CF77FC
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/XXLwfd_R7pIqrDScphd9Wq6r6xg.roa
Signing time: Sat 30 May 2026 04:58:27 +0000
ROA not before: Sat 30 May 2026 04:58:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198599
IP address blocks: 2a06:9801:28c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:77:3f:73:da:37:b6:53:cd:01:9d:e6:e2:d4:cf:77:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: May 30 04:58:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5d72f07ddfd1ee922aac349ca6177d5aaeabeb18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2a:72:94:0b:11:3d:47:c0:b4:00:4a:36:73:
2e:6d:64:97:96:a8:45:1c:47:4d:2d:c8:6e:72:55:
b3:d9:1a:fc:22:a9:10:7e:0f:43:08:f8:28:4a:88:
92:95:8b:e6:54:07:66:22:ae:a6:83:be:e1:64:8e:
84:77:d1:37:fb:16:26:99:4a:e4:38:6f:66:ed:4c:
f7:dc:6f:e6:f0:f1:a6:6a:af:a9:00:1e:95:2a:21:
ad:8e:b6:dd:b1:35:ef:17:83:bd:ce:5c:d0:53:a0:
99:34:5d:2a:cf:0b:68:a2:be:93:80:db:6b:07:2f:
4e:57:58:31:35:c1:53:fb:e3:38:35:c7:10:3c:01:
cd:56:76:6f:30:a5:8b:e0:a7:84:f1:8f:18:7e:fa:
be:41:b7:a7:01:c5:bb:02:7a:76:41:68:14:d6:fc:
2d:f7:11:ac:4f:18:8d:23:ed:c2:82:d5:ab:a5:ee:
ed:64:4e:26:3c:db:78:7a:88:d4:c7:62:83:c9:c9:
ad:36:26:a4:01:df:d3:4a:d8:cd:24:ad:40:8c:39:
d6:bb:49:4b:9b:d3:f0:3f:b4:cd:e0:8b:83:64:c0:
bb:95:71:6f:7c:db:2c:cb:9c:de:ea:ce:77:ed:3b:
66:19:3a:50:e7:2b:30:ff:7d:c3:22:a2:ce:26:be:
75:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:72:F0:7D:DF:D1:EE:92:2A:AC:34:9C:A6:17:7D:5A:AE:AB:EB:18
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/XXLwfd_R7pIqrDScphd9Wq6r6xg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:28c::/48
Signature Algorithm: sha256WithRSAEncryption
36:5d:c3:5c:97:b7:d3:14:e5:f4:48:c7:55:de:0f:83:dd:7c:
6b:c0:9a:d3:4b:0f:7d:60:8f:47:fc:23:1f:40:51:0c:71:07:
90:6b:21:08:23:a2:c4:b2:a9:bb:07:e2:40:a8:3b:bf:6a:cc:
6b:89:8e:48:f3:51:57:1c:ec:e2:2e:72:39:1d:2b:f0:73:9c:
af:42:52:69:d2:46:52:63:7c:3f:64:e7:a2:12:da:a5:e6:21:
96:36:26:ed:d0:4b:8a:f3:7c:5c:fa:0b:38:34:c4:9a:73:bf:
80:88:ac:53:3b:de:74:6d:9a:bb:a9:47:a7:80:46:11:39:f1:
bf:a4:2c:4c:0f:75:51:bf:33:17:c5:c4:c2:e7:1e:e9:59:2c:
99:7a:7b:0c:a4:21:6f:07:5c:60:d4:85:c8:19:9c:7e:37:05:
ac:b0:26:74:6c:a5:87:f5:f1:89:fe:2b:37:85:1f:fe:92:35:
df:e7:78:af:62:d8:a2:79:5a:e8:ae:4e:0d:b7:cb:8d:36:ca:
09:03:3e:9a:1a:a9:e5:f9:ea:4f:11:55:aa:2d:a2:b3:4b:4e:
9c:f6:c1:90:99:bf:ca:dc:5a:cc:b4:08:c9:58:c9:45:f4:f7:
4a:f3:62:7f:44:d4:42:8f:99:2b:2d:cc:db:52:19:a0:fa:88:
46:e9:b6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:39:19 2026 by rpki-client