Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/_cmcenKjWYkf_XMuIvCa6vB5rOU.roa
File: _cmcenKjWYkf_XMuIvCa6vB5rOU.roa (raw, json)
Hash identifier: UyqndFICT9lYof1P/e63YQ3G56ZbYU+n5hNVX44yzBM=
Subject key identifier: FD:C9:9C:7A:72:A3:59:89:1F:FD:73:2E:22:F0:9A:EA:F0:79:AC:E5
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A0B5D6321CB0E85CCA4120AB24B2C2E1EC
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/_cmcenKjWYkf_XMuIvCa6vB5rOU.roa
Signing time: Fri 18 Sep 2026 18:45:08 +0000
ROA not before: Fri 18 Sep 2026 18:45:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218645
IP address blocks: 2a06:9801:1563::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:d6:32:1c:b0:e8:5c:ca:41:20:ab:24:b2:c2:e1:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Sep 18 18:45:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fdc99c7a72a359891ffd732e22f09aeaf079ace5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:35:7c:ee:6d:1e:6c:e2:5d:fe:9a:31:38:31:
14:fd:04:fe:d2:fe:02:fe:62:49:7f:f5:c5:f1:90:
ff:b5:f7:83:fa:99:d0:dd:aa:6b:1b:ef:77:ef:a5:
71:6d:09:63:35:61:ba:99:a9:40:13:a6:8e:62:86:
9f:4a:42:9b:10:f5:7e:83:0d:53:ef:c9:e3:1c:3a:
a5:57:dc:1f:dd:96:6e:96:07:10:4a:90:da:aa:79:
12:8b:dd:7c:47:2b:7e:7c:63:10:31:32:19:37:bf:
54:02:a2:43:75:7c:c1:fd:c7:e3:da:7c:29:f0:7e:
c3:e3:39:b7:df:70:a3:c6:f0:55:8e:ec:43:73:70:
a3:19:3d:14:91:f8:fc:04:f8:b1:53:ba:a3:3a:aa:
d7:fb:a2:e7:6b:b3:af:46:d3:ab:48:53:39:7a:cf:
fd:05:47:de:c0:e6:04:07:d5:ec:11:c6:f8:76:d7:
17:7d:f2:e5:29:cd:1b:60:e3:90:3d:16:fc:b9:94:
89:61:87:ad:86:c8:c3:b6:2b:9b:60:7b:2b:2d:3e:
d1:fe:bc:00:5d:d4:88:22:dd:15:54:94:8f:c6:e1:
a8:be:97:13:1b:36:3c:ac:d6:55:14:76:a0:23:fa:
30:58:98:8b:b9:8f:9a:01:9d:84:7e:cb:0c:bf:65:
e8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C9:9C:7A:72:A3:59:89:1F:FD:73:2E:22:F0:9A:EA:F0:79:AC:E5
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/_cmcenKjWYkf_XMuIvCa6vB5rOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:1563::/48
Signature Algorithm: sha256WithRSAEncryption
a5:57:eb:3f:bc:61:06:6e:ff:f6:b5:d1:90:4c:b8:b3:71:21:
ef:01:a5:10:5e:fb:ec:4e:6b:06:a7:d5:0c:12:6a:94:64:35:
84:6b:b0:57:5c:be:79:e4:ed:3a:49:dd:a5:26:eb:c0:71:44:
1a:ee:91:f3:ff:25:70:59:99:be:bc:b2:6c:62:e7:66:59:bc:
7d:4c:99:5f:9e:60:9b:3a:9c:62:69:f8:c0:18:59:6b:4c:f2:
ee:ac:7d:46:f0:13:0c:1f:40:6a:3e:81:c2:76:52:2e:cd:9e:
67:f8:a7:25:72:5b:32:f4:6e:7c:df:95:35:c0:e7:78:40:eb:
1c:96:3b:0a:57:97:fe:f5:fd:2a:36:fb:6d:06:06:78:cb:34:
52:f5:59:fb:bf:ca:08:55:d2:fe:00:23:ec:36:db:88:ed:2e:
ce:da:33:58:5f:ec:df:af:f7:be:49:48:b7:ad:fc:e0:ca:28:
73:26:92:76:98:a1:f8:00:16:b1:8e:df:b8:a6:28:9e:4f:cd:
d9:ae:c9:41:92:93:c1:55:b0:a6:cc:72:45:40:37:46:70:2d:
49:7d:42:50:3c:23:1f:7c:1f:a6:ee:f6:3c:4a:c1:5e:aa:88:
15:84:25:e4:86:7e:5b:28:68:66:56:96:ea:0a:87:e6:0c:18:
fb:95:c9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 02:44:04 2026 by rpki-client