Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/XbF8H4pxq3p4cgjPRFc-0roVks4.roa
File: XbF8H4pxq3p4cgjPRFc-0roVks4.roa (raw, json)
Hash identifier: CV7t6j9oJkok5WILky2qhwtG95/ATReHKRQV2elDreg=
Subject key identifier: 5D:B1:7C:1F:8A:71:AB:7A:78:72:08:CF:44:57:3E:D2:BA:15:92:CE
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A09672E8BC08768F51A9F58BCF0D05EDC2
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/XbF8H4pxq3p4cgjPRFc-0roVks4.roa
Signing time: Sat 12 Sep 2026 16:28:28 +0000
ROA not before: Sat 12 Sep 2026 16:28:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218716
IP address blocks: 2a06:9801:1514::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:96:72:e8:bc:08:76:8f:51:a9:f5:8b:cf:0d:05:ed:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Sep 12 16:28:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5db17c1f8a71ab7a787208cf44573ed2ba1592ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:03:d6:e8:99:5d:07:c0:be:68:62:f5:0b:d4:
6c:b4:e7:73:6a:b4:18:31:d9:61:0a:58:b1:82:ae:
0e:cb:2b:6a:93:6c:d8:f1:d5:c9:1d:74:77:28:a5:
f2:53:15:ae:39:51:1e:53:b8:73:68:d5:d0:af:15:
d7:33:fd:53:c6:97:6e:ad:b6:77:58:8f:78:99:27:
8f:39:bc:a3:fa:3f:24:8c:cd:94:23:d0:36:38:c4:
91:4b:30:51:b4:c5:72:3e:11:27:c9:20:69:3f:29:
29:89:e3:e2:b4:c7:9b:7c:65:04:e5:63:3e:3b:f4:
7c:8c:ee:3b:91:78:b9:e2:68:67:e8:03:15:f0:15:
44:28:eb:c7:cc:de:6b:1f:26:9f:79:b6:5d:36:4d:
c1:37:21:2c:d5:b1:a0:bc:1f:63:6d:5d:b6:94:25:
bf:cc:c7:53:d7:1f:6e:bd:09:52:ac:b5:0c:74:cb:
9f:a5:c5:fd:ce:c4:d2:ab:69:e5:79:db:58:52:fe:
c6:02:ef:e8:c7:88:42:56:82:21:22:61:cf:7c:93:
33:a5:84:54:38:92:cc:3f:91:40:64:55:92:19:30:
79:a1:ae:64:0e:9d:56:43:0a:6a:17:99:8b:8d:87:
4d:0a:5e:ed:71:de:94:22:e9:c7:a9:f1:4b:67:41:
2f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B1:7C:1F:8A:71:AB:7A:78:72:08:CF:44:57:3E:D2:BA:15:92:CE
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/XbF8H4pxq3p4cgjPRFc-0roVks4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:1514::/48
Signature Algorithm: sha256WithRSAEncryption
68:85:9d:db:5e:0b:ec:37:09:63:f2:d4:a6:1a:ed:a0:7a:14:
6a:56:65:e4:22:dd:9f:42:3b:fa:53:4e:78:11:0a:c8:0b:82:
d1:85:2b:6d:e8:e7:34:ff:cf:db:82:75:68:e3:d4:97:e7:2a:
3e:e1:25:92:b7:ef:bd:1c:1c:71:41:6b:fc:71:b6:f7:5d:f9:
2a:ac:d9:f9:bc:6f:c0:2c:0a:c0:dc:59:e6:5e:0f:a1:9d:a7:
e1:46:5c:e4:88:13:97:3c:b4:ca:74:ec:e0:29:d0:fd:44:0a:
34:ad:5d:ce:ee:bc:79:15:25:bb:76:84:39:df:3e:59:ff:bd:
66:52:cc:a1:7c:fb:82:ae:d8:8d:f8:94:b9:b0:b1:f8:49:0c:
0f:aa:eb:d0:48:7b:3d:81:51:68:f4:bc:a6:49:15:b5:52:e1:
64:64:fa:f9:55:c1:7c:31:49:a5:09:08:e3:2f:40:54:78:fa:
7f:20:6f:a8:55:f0:b1:90:aa:e5:65:ab:f8:da:fb:4e:8e:09:
35:cb:b7:9c:36:de:9f:53:34:f4:09:03:8e:5f:6d:95:f5:54:
0a:40:2a:fe:26:04:56:7c:a5:c1:fd:d3:b2:10:56:7d:33:2a:
63:e8:fc:aa:27:8c:18:4e:b2:2e:32:7c:62:8f:e9:cb:d3:22:
f1:05:87:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:11:08 2026 by rpki-client