Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/dZzQU6RoVXEAVMXGUp1Og0ZUXlM.roa
File: dZzQU6RoVXEAVMXGUp1Og0ZUXlM.roa (raw, json)
Hash identifier: RDVlX02CAc+qDPmcCr2qhVNkK2NXGCmimowp8kmqLEs=
Subject key identifier: 75:9C:D0:53:A4:68:55:71:00:54:C5:C6:52:9D:4E:83:46:54:5E:53
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A14AF1AD479B1098E3F632D77BF50B32A0
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/dZzQU6RoVXEAVMXGUp1Og0ZUXlM.roa
Signing time: Sat 17 Oct 2026 17:38:34 +0000
ROA not before: Sat 17 Oct 2026 17:38:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219481
IP address blocks: 2a06:9801:79c::/48 maxlen: 48
2a06:9801:1562::/48 maxlen: 48
2a06:9801:1e00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 05:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4a:f1:ad:47:9b:10:98:e3:f6:32:d7:7b:f5:0b:32:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Oct 17 17:38:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=759cd053a46855710054c5c6529d4e8346545e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:87:b6:7b:5c:6d:77:94:0e:10:68:e3:2b:7a:
0a:27:ed:66:41:a1:b7:f2:32:a4:88:f2:af:9a:fa:
a0:c9:d3:ab:7b:5c:1b:40:47:f3:b5:81:eb:a4:32:
0c:62:8d:cd:44:86:d9:cd:de:81:5a:ec:a4:63:84:
c7:f5:f2:00:7f:5b:d6:cb:3c:f3:f1:e9:dc:7d:d9:
93:c6:7e:7c:29:5a:dc:d8:f4:a6:c8:ba:93:a4:46:
18:f3:cb:86:64:02:95:93:08:1c:b3:ff:b8:e2:d1:
a0:01:e6:64:72:ec:bf:17:13:0c:72:bd:18:ef:2e:
4e:fd:c4:15:78:26:4a:25:cf:e0:28:49:56:fc:dc:
c5:27:87:36:c5:9d:1e:fd:d1:1e:fb:2f:9d:5e:8e:
2c:0e:a2:63:26:f0:79:de:85:45:d4:84:d4:96:db:
af:1e:1b:fd:69:e0:fc:5f:71:d8:aa:5c:1a:d1:d2:
e2:f7:46:78:43:9a:3a:4b:45:36:55:d5:ba:0a:5e:
73:01:2d:ab:4a:5a:3c:6f:ee:c4:3e:98:e8:61:14:
88:98:9b:4b:23:98:60:04:06:d7:ff:5a:2e:9f:9d:
ab:f2:69:9c:cd:00:44:50:2f:c0:1d:f8:6e:99:03:
c0:6e:7e:c9:59:55:a8:53:09:d5:5a:72:74:e7:5d:
b4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:9C:D0:53:A4:68:55:71:00:54:C5:C6:52:9D:4E:83:46:54:5E:53
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/dZzQU6RoVXEAVMXGUp1Og0ZUXlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:79c::/48
2a06:9801:1562::/48
2a06:9801:1e00::/40
Signature Algorithm: sha256WithRSAEncryption
09:c8:a7:be:43:a8:52:15:91:bb:8a:63:d6:c6:4c:53:ae:1d:
02:87:4a:78:f7:cc:48:cc:5f:78:20:f6:cc:b0:8c:1e:c4:a8:
5a:e7:1e:4a:ec:db:a1:2d:94:4f:e8:f1:5c:20:27:2d:c4:30:
2d:43:aa:59:64:a8:b6:9d:f6:1c:04:0f:6b:b7:00:66:7a:3d:
fe:5d:48:10:3d:77:5b:3b:7b:37:10:bc:83:48:43:53:f7:a2:
3d:9b:2b:c1:af:27:9d:49:c9:d6:e7:8e:41:25:ac:1a:30:7e:
d8:88:27:7a:e0:76:0f:dd:0f:7a:ca:f6:60:1a:e6:5b:50:73:
19:00:77:12:55:d8:ce:3b:21:91:50:ff:f0:3c:cd:22:d0:a4:
96:e5:cc:72:5b:27:41:9f:db:9f:35:95:16:1a:b5:ff:d9:73:
43:9c:28:ab:c0:cd:64:49:36:2c:a1:cc:ac:3f:13:7d:79:dc:
7a:20:45:8c:21:88:20:57:2b:8a:3b:46:f7:c4:93:83:99:82:
4f:a3:0a:c8:e4:ba:ed:3d:6c:8b:03:ad:67:fd:7c:b6:fc:5e:
0c:93:0b:d7:b0:57:b8:6f:23:c5:92:6b:fc:49:11:e4:a3:e5:
ef:cc:d9:23:de:0f:23:24:5f:3d:cb:b0:5b:c8:83:82:6e:32:
18:fe:92:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 15:30:01 2026 by rpki-client