Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/dy88sjnUVbdljtUTlDHmE6qlVCQ.roa
File: dy88sjnUVbdljtUTlDHmE6qlVCQ.roa (raw, json)
Hash identifier: aHTwjHXRj9YVglFrN78vXO8TXMO0tQQLa8nsVruA2Bo=
Subject key identifier: 77:2F:3C:B2:39:D4:55:B7:65:8E:D5:13:94:31:E6:13:AA:A5:54:24
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A09C4DA0747FA4BCC5A1ECF0110AE3C78C
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/dy88sjnUVbdljtUTlDHmE6qlVCQ.roa
Signing time: Sun 13 Sep 2026 19:45:28 +0000
ROA not before: Sun 13 Sep 2026 19:45:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218730
IP address blocks: 2a06:9801:151b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9c:4d:a0:74:7f:a4:bc:c5:a1:ec:f0:11:0a:e3:c7:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Sep 13 19:45:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=772f3cb239d455b7658ed5139431e613aaa55424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:95:5d:79:bd:c9:f1:d9:e4:cc:9c:f4:f8:48:
fe:8e:53:dd:78:01:72:e1:bf:bd:ee:c1:07:1b:32:
cf:ef:7a:bb:00:43:14:5b:e0:a0:4d:3b:dd:f5:08:
5a:40:7f:16:b2:c8:63:3d:99:53:d8:0b:5f:d6:06:
f1:a0:d2:ee:e7:39:92:b6:21:83:ac:39:fd:94:1d:
2a:19:55:07:4b:b9:f4:6b:2e:73:12:02:61:7a:b5:
6d:50:19:32:2a:b7:ad:2e:26:fc:27:9b:70:ba:e1:
45:b7:09:d1:2c:4f:5d:d0:24:08:ad:cc:0c:ab:52:
2d:bf:38:29:1c:bc:19:cd:fb:cf:a4:67:ef:fd:da:
ee:92:11:e8:5a:53:d9:33:38:2a:e5:05:28:91:31:
b8:cf:af:a2:8c:7c:7c:78:33:98:ae:e1:fd:64:85:
22:e9:99:69:5a:f4:df:dd:6e:a6:84:c1:e4:a9:d0:
ea:3f:0f:a5:00:3e:97:20:cc:ba:1d:e7:56:cd:82:
87:55:34:d6:1d:4e:7c:16:2f:a2:e8:4f:b0:b2:4f:
26:bd:06:ad:5c:e6:1d:b5:a9:40:9a:9c:44:5c:2c:
d5:67:03:a8:f0:6e:0a:ee:e7:75:95:a8:12:d9:3c:
b1:92:a9:56:ec:72:1b:c5:0e:e7:ee:5c:2d:64:99:
80:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:2F:3C:B2:39:D4:55:B7:65:8E:D5:13:94:31:E6:13:AA:A5:54:24
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/dy88sjnUVbdljtUTlDHmE6qlVCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:151b::/48
Signature Algorithm: sha256WithRSAEncryption
bc:59:a1:61:f5:02:db:be:c8:71:65:37:60:7a:b3:1b:2a:1c:
db:7e:4b:f0:79:34:4a:b0:da:67:5f:2a:1e:2b:38:40:65:2d:
a3:c2:54:a2:b9:87:5f:8e:d1:2c:61:55:33:00:97:74:0d:41:
30:b1:6b:ba:a3:c8:82:5c:7e:17:94:87:c3:ba:09:f9:7e:83:
79:50:82:5d:92:d1:ef:fc:9b:c8:32:08:64:a2:91:fa:57:8b:
69:01:be:b3:a2:00:ee:35:9c:79:27:8c:08:14:73:23:e5:91:
12:1c:12:f3:47:a7:4d:9d:20:b8:55:da:31:7d:ed:d4:84:f9:
93:05:19:f4:21:55:2f:77:d6:59:61:0a:40:9f:d3:d3:12:0a:
3b:c8:d6:4a:ee:5a:f8:92:b3:85:5d:ee:b1:df:9a:f4:43:0b:
2d:87:fb:d6:75:7d:5a:13:98:60:50:04:a5:6e:6b:2a:6d:f6:
8d:0f:64:6b:14:14:8f:25:43:67:d9:42:60:db:85:a5:a2:38:
1c:0a:97:0f:a5:b8:23:cb:63:cb:8b:ca:d8:90:f4:91:b0:09:
cd:52:e5:99:fe:32:1c:ee:11:67:45:80:0e:06:62:96:9e:fc:
d8:0b:7c:ba:74:b5:b7:0b:c7:68:2f:9e:f8:b9:f9:90:f6:9d:
20:c4:15:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:36:02 2026 by rpki-client