Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/__EhIn9aID-0M9vCmNKVDROKEQQ.roa
File: __EhIn9aID-0M9vCmNKVDROKEQQ.roa (raw, json)
Hash identifier: 0qAoSTZ3aJh9gL22nrtQ8aVMAck6LEhl9C00mXWDrGA=
Subject key identifier: FF:F1:21:22:7F:5A:20:3F:B4:33:DB:C2:98:D2:95:0D:13:8A:11:04
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019C690B492FDE927E3211475C385628D345
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/__EhIn9aID-0M9vCmNKVDROKEQQ.roa
Signing time: Tue 17 Feb 2026 00:41:13 +0000
ROA not before: Tue 17 Feb 2026 00:41:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201033
IP address blocks: 2a06:9801:5a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:69:0b:49:2f:de:92:7e:32:11:47:5c:38:56:28:d3:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Feb 17 00:41:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fff121227f5a203fb433dbc298d2950d138a1104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a3:82:9a:6c:78:73:da:64:34:51:a3:ce:d3:
88:b5:43:8e:29:81:29:23:61:98:f2:57:85:49:a2:
50:33:8f:fe:39:13:e1:a6:d1:ab:19:bd:24:cc:5c:
4b:6f:86:2c:e6:98:ac:37:a1:5d:ab:bc:b6:23:eb:
f0:d0:64:54:55:12:ec:f0:39:3e:69:09:51:c0:58:
9b:16:82:19:a9:57:ab:d3:28:f8:48:75:7e:a2:8c:
30:2f:c4:9b:88:15:cb:83:d6:3a:b6:e8:24:8e:c5:
f7:2b:4f:92:1b:a1:b5:70:1b:09:4c:02:66:c8:ca:
62:b9:3b:53:21:cb:38:32:6e:0d:11:24:74:1e:fc:
ad:1e:b1:8a:df:34:0d:2d:10:0c:75:1d:57:be:0b:
c0:d6:ff:1c:b2:1b:3f:c0:0c:8e:b1:0f:84:2d:9d:
27:82:44:a5:a0:9f:be:ff:aa:ba:1b:45:f2:48:c1:
cd:8c:e2:ef:e7:19:00:59:32:17:1c:ea:c0:c2:60:
39:de:a2:c1:e4:b8:fc:5d:34:e7:02:30:3a:73:e1:
0a:93:bf:7f:cf:71:1b:2c:65:79:a8:6f:79:f2:90:
b1:5d:31:33:ea:50:8c:76:96:d1:7c:54:c3:49:5c:
00:f1:df:35:fb:4c:70:61:53:99:d4:49:9f:6a:1c:
20:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F1:21:22:7F:5A:20:3F:B4:33:DB:C2:98:D2:95:0D:13:8A:11:04
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/__EhIn9aID-0M9vCmNKVDROKEQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:5a::/48
Signature Algorithm: sha256WithRSAEncryption
3a:50:68:e5:fe:94:0c:be:43:a9:11:86:60:6d:3c:a3:05:31:
a2:28:fa:a7:67:e1:98:6a:bf:29:6a:0b:0f:76:46:ef:7e:cc:
bb:d8:a1:fa:87:c3:e6:fe:bf:f4:33:cf:91:c9:1c:93:92:e1:
3c:2e:0f:3c:e6:57:ef:ea:de:bb:85:c7:69:a4:a6:06:e5:57:
56:b1:3d:d4:a0:5a:72:e1:2b:3a:3a:d6:38:1f:5a:cb:36:da:
a9:fa:f1:f3:34:95:52:42:db:c8:46:33:e9:19:15:be:ea:36:
e2:cc:55:88:ee:56:e4:1c:b0:83:2a:0b:a3:12:37:12:7a:d4:
d6:77:f9:08:32:8b:a6:91:4a:76:2e:45:f1:7a:39:bc:fb:86:
9c:b8:8e:bd:ab:01:29:45:5f:bf:57:1d:2f:7b:87:93:0b:0b:
8c:e9:d9:f2:6f:a3:49:ed:3b:d8:15:37:fd:44:80:e9:0c:21:
b6:89:b9:42:0b:74:1e:25:b0:cf:25:f3:fa:29:7b:72:ac:36:
1d:d0:5e:d6:20:71:85:68:91:21:cf:73:80:03:ef:e9:bd:f2:
c9:8e:63:04:2c:26:44:fa:cd:d6:0b:cf:72:9a:d4:9e:22:45:
a7:96:fd:1b:a2:2f:05:b6:5a:95:9c:d5:1b:f0:d3:6a:14:33:
90:ec:b4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:03:15 2026 by rpki-client