Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/eV6xVqmWdwm9eV3ac9jOZ7y5tO0.roa
File: eV6xVqmWdwm9eV3ac9jOZ7y5tO0.roa (raw, json)
Hash identifier: ujulw6kp+PqjACs56AneW0yy/gpVNdzlLjoh7FURzls=
Subject key identifier: 79:5E:B1:56:A9:96:77:09:BD:79:5D:DA:73:D8:CE:67:BC:B9:B4:ED
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A02E4A2DC5F1E311280A26457B1A3706F1
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/eV6xVqmWdwm9eV3ac9jOZ7y5tO0.roa
Signing time: Sun 23 Aug 2026 11:03:28 +0000
ROA not before: Sun 23 Aug 2026 11:03:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213302
IP address blocks: 2a06:9801:2000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:2e:4a:2d:c5:f1:e3:11:28:0a:26:45:7b:1a:37:06:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Aug 23 11:03:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=795eb156a9967709bd795dda73d8ce67bcb9b4ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4d:68:da:15:43:11:cf:52:61:48:1c:da:05:
3f:72:97:a0:15:72:a2:ce:ad:1c:23:c2:44:f8:da:
1b:bf:78:40:13:cc:63:70:4a:fc:11:39:2b:d4:7a:
7c:6c:94:4b:88:ec:f7:75:db:dc:17:91:44:a5:08:
e6:08:0b:a8:b0:74:b5:5a:a4:74:d7:5e:59:4b:f3:
ca:4c:fd:21:d3:62:97:84:d6:0d:06:be:33:f1:a9:
9d:90:a2:24:fc:19:f8:c5:e7:ac:96:ae:ef:8a:7e:
4a:d3:df:17:30:b1:38:32:5a:91:36:4d:61:4b:6e:
82:7e:66:a1:ee:fa:ad:d2:b4:54:61:0e:7b:5b:ed:
a3:0e:4b:ba:50:75:55:03:9e:1d:d7:52:a3:8d:e4:
6a:74:44:be:84:c8:97:e5:00:55:80:6d:88:77:65:
74:83:4d:48:b4:d0:79:1a:ec:6f:1f:e4:23:88:c1:
a1:84:ff:74:f8:13:58:3e:d3:56:7d:90:2e:f8:51:
08:82:42:a4:49:90:c7:b5:de:b1:d0:18:21:bb:71:
f6:d3:73:d0:bf:86:1e:95:6f:39:f8:1b:c5:bb:e3:
2e:cd:b3:d3:44:c7:3b:81:5d:49:ce:f6:e8:f5:f7:
55:3f:80:9d:55:d7:9c:38:09:68:7d:da:de:7b:29:
33:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:5E:B1:56:A9:96:77:09:BD:79:5D:DA:73:D8:CE:67:BC:B9:B4:ED
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/eV6xVqmWdwm9eV3ac9jOZ7y5tO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:2000::/36
Signature Algorithm: sha256WithRSAEncryption
34:52:55:5b:bf:a5:1b:98:dc:71:96:b0:19:07:58:83:64:e6:
51:c8:b8:11:eb:e2:a6:43:67:99:fb:98:46:90:e4:fc:4c:36:
7e:28:b6:50:38:d2:f8:93:39:f7:ee:ed:c7:03:56:2c:49:9f:
82:b7:78:c3:96:20:01:96:13:2d:5f:ac:f2:96:95:80:f5:8d:
76:5f:93:7e:82:f6:4f:ee:e0:de:3a:12:58:dd:7a:1a:87:6b:
10:43:d9:b9:42:a2:f0:b2:67:dc:c2:5e:5a:b3:1d:21:53:f2:
18:07:42:ea:9e:51:be:25:a4:49:48:c5:e3:55:30:fd:c5:71:
03:8f:4f:54:72:6b:48:0f:0e:02:46:76:ba:a6:d0:eb:16:88:
d5:fe:1d:a0:33:b6:fb:b1:b5:a1:48:f7:e5:71:3e:ac:31:f2:
85:3f:35:fe:ff:e0:c2:f9:d1:ab:6d:d7:9d:10:ab:85:36:18:
0b:fb:a2:00:7d:c6:c8:93:80:c3:e5:95:3e:a6:8c:bd:f5:9a:
b1:5e:f3:1f:3d:81:f0:23:65:0d:1d:43:a3:a9:a9:c5:9f:6c:
de:8f:06:88:b9:1c:83:2c:4f:61:55:ae:89:1b:89:35:26:20:
8c:d1:0a:a0:bd:28:b3:86:ba:0c:4c:f2:67:db:c7:f4:f8:81:
8e:3b:da:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:03:44 2026 by rpki-client