Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/eYDPXUBT2lADIu74LQ5rDQpW8IY.roa
File: eYDPXUBT2lADIu74LQ5rDQpW8IY.roa (raw, json)
Hash identifier: z3hAwFRVvIuhL89Ke5oHGRXGj5g1/WsLR4s8M4VHikc=
Subject key identifier: 79:80:CF:5D:40:53:DA:50:03:22:EE:F8:2D:0E:6B:0D:0A:56:F0:86
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019C9C082B37326E3B97F6C4076B858D5495
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/eYDPXUBT2lADIu74LQ5rDQpW8IY.roa
Signing time: Thu 26 Feb 2026 22:18:26 +0000
ROA not before: Thu 26 Feb 2026 22:18:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200625
IP address blocks: 2a06:9801:8e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9c:08:2b:37:32:6e:3b:97:f6:c4:07:6b:85:8d:54:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Feb 26 22:18:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7980cf5d4053da500322eef82d0e6b0d0a56f086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0d:55:71:69:86:66:9a:f5:d0:1d:8f:a0:34:
3b:ed:1b:b1:8e:51:c1:8b:4b:ad:c4:77:92:87:a7:
e4:01:14:2c:c3:69:93:a8:e9:4a:8f:1c:3a:df:e9:
bc:c5:de:11:d7:74:b9:12:95:58:68:27:26:95:4a:
ac:fe:a3:e4:56:7b:a1:91:ac:73:10:b2:30:09:f2:
d7:4a:af:05:42:71:36:81:66:b0:fc:3c:43:4b:d3:
f1:6b:36:fc:ea:f2:6e:50:ad:dc:66:5f:e9:7e:7e:
72:e1:cc:06:d4:37:76:6a:a1:8e:b1:be:b9:36:b4:
e0:fa:11:1d:7b:b6:04:c4:b5:d3:05:40:6f:64:90:
26:6b:fa:bc:aa:ce:4d:01:e4:be:4f:3a:05:b1:28:
f9:89:e6:35:ca:44:54:9e:b7:19:2c:bc:ba:62:7b:
46:d8:fe:aa:3b:21:e2:f7:5e:84:a3:cf:08:b4:56:
6e:11:1f:01:d9:66:7e:e0:55:11:17:5d:29:a9:92:
9b:be:fa:d1:20:22:81:13:bb:a5:ee:09:00:5e:82:
af:c0:43:d3:bd:81:9b:a7:15:36:3a:ee:4c:cd:9e:
3e:19:df:f6:3d:1e:6a:53:4a:f0:fa:3d:01:a3:8b:
52:f5:60:e6:2c:01:94:85:97:9e:23:ad:4c:4e:08:
73:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:80:CF:5D:40:53:DA:50:03:22:EE:F8:2D:0E:6B:0D:0A:56:F0:86
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/eYDPXUBT2lADIu74LQ5rDQpW8IY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:8e::/48
Signature Algorithm: sha256WithRSAEncryption
41:d7:cc:c2:50:e9:52:e5:85:3a:5d:da:93:3a:80:a1:2a:84:
bb:4d:8c:62:af:ca:c5:51:ea:c9:da:26:dc:3f:7d:00:11:d8:
87:b7:df:55:4b:97:6e:cb:27:38:8b:df:7e:3d:d3:81:9a:b9:
5a:4b:cf:f9:49:20:22:1d:36:c3:af:93:84:39:4e:8d:2b:c6:
44:a6:9c:fe:95:29:ac:2a:2c:fe:dd:49:d0:d7:cd:6d:51:9f:
b1:7b:e5:e3:89:ac:35:5b:b2:be:af:85:1f:69:56:27:1d:84:
90:a7:3f:49:93:6f:bb:9f:79:6b:a2:d5:65:1f:b3:b0:36:d5:
8c:a8:00:02:bc:f7:e9:05:ab:57:ae:d2:e1:df:29:96:cf:1c:
70:e5:9c:cd:9d:d0:14:fe:0a:86:49:b2:9b:fc:89:84:df:e6:
21:25:eb:c8:89:c8:da:35:bf:fb:d0:8f:3c:a7:ac:4a:65:86:
0b:39:2b:12:54:93:48:b1:5b:d6:e5:d5:67:12:80:a6:b5:cf:
9e:02:b0:a6:17:50:4d:fa:11:12:cb:fe:ff:46:2c:e9:78:32:
90:bb:1e:ae:23:0d:b1:95:1b:f8:bd:03:07:14:7c:44:30:77:
ad:2a:b4:c4:d1:6d:38:06:95:6f:8b:48:9a:7f:70:a8:73:f4:
3b:75:cc:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:04:13 2026 by rpki-client