Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/_JkDjlZ0UqTaVVVES9XgNg4SMy0.roa
File: _JkDjlZ0UqTaVVVES9XgNg4SMy0.roa (raw, json)
Hash identifier: 6j4IUF3mGmPZmN/3LkTq0Mp0Q0M4GgpTWXWftzVTGBQ=
Subject key identifier: FC:99:03:8E:56:74:52:A4:DA:55:55:44:4B:D5:E0:36:0E:12:33:2D
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A01093105F2A1A1C1BE437478A2BD31DA6
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/_JkDjlZ0UqTaVVVES9XgNg4SMy0.roa
Signing time: Mon 17 Aug 2026 16:34:28 +0000
ROA not before: Mon 17 Aug 2026 16:34:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218938
IP address blocks: 2a06:9801:f7e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:10:93:10:5f:2a:1a:1c:1b:e4:37:47:8a:2b:d3:1d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Aug 17 16:34:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc99038e567452a4da5555444bd5e0360e12332d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f4:c7:4e:37:0c:35:d5:4a:a4:0e:4b:37:d8:
cc:47:87:41:c1:ec:47:be:b4:14:52:92:bb:51:c7:
12:e6:bb:e6:07:46:59:3e:b1:92:ff:36:cb:8f:b8:
f3:61:bf:6a:54:a9:f4:0a:4f:3e:a0:95:5a:7c:6d:
99:c5:4b:7a:ab:97:df:39:af:2a:0a:e7:63:68:04:
18:68:30:8e:53:83:21:dd:8f:70:17:f7:0b:dc:83:
53:48:c9:c1:2f:7c:4c:a4:83:29:90:f8:17:a2:be:
9a:cf:de:af:cd:df:b6:84:90:5f:0f:d6:03:fc:f1:
bc:2f:ce:0e:60:b4:eb:49:93:f3:8d:7c:c5:69:f2:
21:ec:45:ac:38:54:a0:06:2b:de:96:4b:10:22:ae:
0c:3e:e7:1c:2d:1d:f3:1c:f4:49:e0:ad:33:3f:cb:
53:61:71:ce:83:81:e5:d2:7f:5a:ee:e0:3f:0c:45:
4f:5e:85:14:ca:d7:ae:23:05:f2:4f:c2:f2:1b:0f:
f8:42:aa:62:ad:eb:4f:93:24:83:3a:63:8f:f2:24:
77:71:34:12:ab:24:84:0c:84:db:1d:2d:8d:7f:1a:
d5:72:78:5f:f0:8f:55:48:e5:c6:6b:6c:aa:f7:6c:
26:9a:38:e3:ef:6b:bb:6e:8b:94:9c:f5:fc:b8:f7:
c5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:99:03:8E:56:74:52:A4:DA:55:55:44:4B:D5:E0:36:0E:12:33:2D
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/_JkDjlZ0UqTaVVVES9XgNg4SMy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:f7e::/48
Signature Algorithm: sha256WithRSAEncryption
9e:25:0c:fa:e2:ce:41:13:39:e2:6e:5f:b4:7b:6a:fb:17:a0:
f6:3c:8e:41:19:ba:b3:d3:3f:1e:ce:c2:12:84:8a:14:ba:b2:
b0:48:69:b3:12:c2:d1:b9:4e:1e:d4:63:d7:f2:a1:15:b0:ce:
37:63:4b:db:4f:72:1a:fd:61:ce:ef:5e:33:a6:01:6f:65:ca:
85:ec:51:87:3f:cf:b6:cd:d5:47:d1:f0:55:a7:4c:56:fd:2d:
51:9d:7b:11:bb:f7:bb:08:61:de:63:82:96:2a:93:9a:e3:d9:
0e:f1:3e:bc:01:68:5d:22:26:b5:44:48:7c:62:09:90:86:c8:
e9:09:49:ad:db:5a:09:72:47:f9:6c:a7:f5:96:fb:af:cd:59:
65:8d:97:59:41:7f:16:b0:52:aa:70:92:9f:d8:e6:0c:52:37:
dd:df:2e:80:c5:ef:48:5e:74:79:9d:30:22:dc:61:19:6c:a9:
53:0f:a6:1f:8e:ff:e1:eb:cc:3d:91:7a:32:48:75:73:38:6c:
6a:3d:e5:3d:db:e5:a1:9f:53:e6:79:a7:6d:14:47:55:f7:0c:
49:c5:61:83:c2:46:a4:ca:2d:91:d1:24:5c:ff:5b:5b:2b:c9:
cf:a4:a8:1c:4f:67:7d:20:f1:ea:61:e3:c2:ec:a0:00:8c:62:
89:25:95:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:12:26 2026 by rpki-client