Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/Y6LuH-vIdxY2SZnRvj5Lbs_sLxY.roa
File: Y6LuH-vIdxY2SZnRvj5Lbs_sLxY.roa (raw, json)
Hash identifier: 0gIdWElz5a0YAYhvj73pb2Ie9YhfjYbfVMJuiN6O6LA=
Subject key identifier: 63:A2:EE:1F:EB:C8:77:16:36:49:99:D1:BE:3E:4B:6E:CF:EC:2F:16
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A06D2031AC1906E879C8ABC9FC508EE57F
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/Y6LuH-vIdxY2SZnRvj5Lbs_sLxY.roa
Signing time: Fri 04 Sep 2026 15:53:41 +0000
ROA not before: Fri 04 Sep 2026 15:53:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197174
IP address blocks: 2a06:9801:74d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:20:31:ac:19:06:e8:79:c8:ab:c9:fc:50:8e:e5:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Sep 4 15:53:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=63a2ee1febc87716364999d1be3e4b6ecfec2f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5c:0c:39:78:16:2d:8a:e4:8c:3b:47:b6:0c:
27:e6:24:7f:57:9c:92:67:5e:12:89:4e:d0:53:cf:
66:a4:53:5a:67:cb:93:87:6d:18:6f:93:0f:f2:f0:
56:2b:c5:ee:61:20:0f:59:0c:27:39:9e:5f:92:43:
8b:9d:68:4d:55:60:1d:09:c5:67:61:ff:6f:49:14:
41:b7:fd:4c:81:75:bb:7b:5d:f6:1f:6b:f5:2d:4d:
a4:0e:36:34:57:f4:a8:54:13:c4:4a:2f:24:ca:34:
1f:3d:13:b5:17:84:21:86:ab:2e:26:8b:18:b0:0a:
a5:af:2d:6b:14:ee:ff:45:fc:b8:96:97:36:0c:18:
a6:dd:7d:e7:8a:e2:9c:b8:52:f7:80:f7:65:f6:ee:
ef:ca:1c:e4:65:ef:65:38:74:a3:5a:cf:62:e8:85:
bb:cc:65:6d:4c:4e:01:13:49:f2:2b:02:44:69:61:
ff:aa:9f:44:4c:63:ef:0e:6d:9c:d2:55:39:21:f0:
5e:6c:9c:68:a7:49:8a:a3:a9:63:02:2b:1f:4d:e2:
65:ca:5c:0a:b1:54:16:f4:77:12:6c:73:34:a3:56:
2d:84:0b:85:b5:c4:7a:12:ed:0e:b6:3e:98:31:28:
70:78:77:41:5d:70:20:6f:72:f9:4d:f5:a5:2e:fa:
0e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A2:EE:1F:EB:C8:77:16:36:49:99:D1:BE:3E:4B:6E:CF:EC:2F:16
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/Y6LuH-vIdxY2SZnRvj5Lbs_sLxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:74d::/48
Signature Algorithm: sha256WithRSAEncryption
7e:d3:52:21:90:4b:ec:74:20:ac:eb:6e:cc:51:af:eb:79:d6:
cb:f0:21:73:99:ba:17:a4:64:74:f1:6f:f6:33:38:b4:34:c7:
60:ea:09:2b:e2:29:89:95:fc:7f:3f:0a:72:9e:9f:17:90:91:
2f:b6:3d:a0:0c:fe:37:ab:6c:cc:c3:9a:d3:c6:76:b5:92:3e:
dd:8c:1d:7f:d1:29:ad:76:8d:00:4b:64:ad:f2:b1:f9:45:9d:
95:99:12:6b:ce:5a:c5:8e:9a:80:f5:06:42:34:7d:38:8f:ba:
53:1b:b8:84:40:ae:d1:0e:d4:88:8d:c1:3f:dc:8f:0d:09:17:
4d:f8:93:d7:38:da:53:93:8f:7a:01:59:4a:c3:67:47:e9:0f:
e4:68:66:5c:6a:44:90:01:6c:84:10:24:28:34:3c:09:b0:c9:
ec:fc:78:ce:3e:05:85:e0:be:0b:79:df:a3:ad:aa:2a:0b:95:
c8:b2:3b:a7:4a:74:c7:ac:37:c8:5d:33:98:2e:68:b8:35:49:
59:66:ca:76:83:79:3e:22:42:4c:bb:01:51:e9:31:02:e4:06:
0e:23:9f:f7:28:2b:3b:62:85:59:19:ee:5b:d6:8b:ca:25:14:
29:ca:0d:68:59:68:76:0a:1d:e5:1f:06:a2:e2:06:bd:04:6c:
e8:1a:54:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:08:36 2026 by rpki-client