Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/Xf6hOKX7m7PVIxbI6aChHknIk_8.roa
File: Xf6hOKX7m7PVIxbI6aChHknIk_8.roa (raw, json)
Hash identifier: 7jGIJiCfEC4IaRX8SS/biEi53trcy6EbTb4qIppEj40=
Subject key identifier: 5D:FE:A1:38:A5:FB:9B:B3:D5:23:16:C8:E9:A0:A1:1E:49:C8:93:FF
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019E2BBC3C8E8FAFF4E789A27CD03847EBC9
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/Xf6hOKX7m7PVIxbI6aChHknIk_8.roa
Signing time: Fri 15 May 2026 13:03:37 +0000
ROA not before: Fri 15 May 2026 13:03:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199890
IP address blocks: 2a06:9801:21f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:bc:3c:8e:8f:af:f4:e7:89:a2:7c:d0:38:47:eb:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: May 15 13:03:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5dfea138a5fb9bb3d52316c8e9a0a11e49c893ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:db:3b:fa:36:36:c3:38:79:4b:13:51:4d:6f:
ed:96:35:74:85:5e:6a:6a:df:23:7c:0b:b2:28:d7:
11:d9:8f:2d:fc:98:f2:db:d4:24:a5:ff:03:9d:77:
2e:34:42:43:5f:c2:ac:37:87:fc:01:9a:cc:e2:a3:
24:80:8c:8e:05:be:0b:a4:a2:c7:72:44:df:9d:f2:
22:13:6d:23:21:22:60:c1:e9:c3:4b:df:1c:89:a7:
0f:07:95:13:93:5f:f7:0f:51:09:13:59:23:a9:e3:
26:15:d6:a4:6e:ae:f7:d7:71:86:00:34:60:ea:8f:
75:56:1f:0e:f5:77:31:7e:65:0d:bb:f2:5a:f6:18:
f3:b2:d3:7f:70:f9:51:5f:45:5f:b6:be:9a:b7:3f:
ed:32:35:c5:46:3b:30:36:a8:42:20:9a:15:df:23:
80:37:42:1a:9e:9e:a3:bc:92:f3:bd:88:c6:9a:b4:
74:80:62:14:93:84:de:d6:b0:ea:01:7d:7f:75:2f:
8b:0b:bc:a6:36:e3:45:f4:85:bb:85:ee:8e:0b:95:
e1:d0:12:da:02:7c:01:d5:9f:b4:3c:de:87:fb:27:
a5:57:8c:06:ec:56:bc:2d:af:4a:95:15:72:5e:9b:
b4:1f:4b:35:01:c9:2f:2c:ad:c5:9f:49:4d:9b:d3:
7b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:FE:A1:38:A5:FB:9B:B3:D5:23:16:C8:E9:A0:A1:1E:49:C8:93:FF
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/Xf6hOKX7m7PVIxbI6aChHknIk_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:21f::/48
Signature Algorithm: sha256WithRSAEncryption
8b:06:9d:42:7e:aa:2e:0f:8e:4c:5a:07:02:90:e5:e0:be:18:
54:70:0c:7e:e3:28:d5:bf:63:b9:55:03:45:18:fb:f0:4e:a4:
72:7d:28:55:17:ac:90:23:ac:62:85:65:3c:ec:14:2a:89:0d:
67:fe:69:0b:93:38:5a:9c:a2:ea:44:59:48:80:d1:0d:45:32:
37:2f:5d:1c:e4:6a:43:b8:5b:fd:f9:08:95:bc:7d:ec:c3:26:
5c:17:5e:67:f4:dd:32:55:a0:31:7d:df:e3:dd:56:74:4a:52:
a7:f5:ad:cc:70:94:b4:d7:32:92:61:94:38:23:80:2e:e5:52:
9f:bb:45:d4:e0:27:df:7f:29:ff:5f:fa:46:b5:de:3b:e7:6c:
f6:e3:5f:61:6b:b3:b3:c1:3f:8c:ae:38:5b:de:9a:28:32:59:
8a:1c:6d:6d:c3:9f:9a:d2:29:58:82:1b:6f:91:72:c6:86:c9:
20:b6:93:f9:b7:05:db:2c:95:f5:d3:b1:cc:48:67:fe:c6:6e:
c6:e9:3f:7c:02:b4:27:58:af:f1:fb:5d:92:62:03:54:67:f0:
d0:d7:51:45:79:65:96:1e:47:3f:47:86:64:91:fd:58:b8:e9:
07:50:dd:b2:77:7f:7d:60:69:56:5b:33:d0:47:55:9b:ff:16:
36:71:e9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:03:07 2026 by rpki-client