Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/fEyMo2soz11-LziSV2BlVrUmFTM.roa
File: fEyMo2soz11-LziSV2BlVrUmFTM.roa (raw, json)
Hash identifier: N1wOD5UO1FGqLIDJmCe1Ntrsic0UlWFxPWLL0qjlf50=
Subject key identifier: 7C:4C:8C:A3:6B:28:CF:5D:7E:2F:38:92:57:60:65:56:B5:26:15:33
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A087322EECD5A5E682D93BE94180D25B21
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/fEyMo2soz11-LziSV2BlVrUmFTM.roa
Signing time: Wed 09 Sep 2026 17:23:28 +0000
ROA not before: Wed 09 Sep 2026 17:23:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209735
IP address blocks: 2a06:9801:58::/48 maxlen: 48
2a06:9801:741::/48 maxlen: 48
2a06:9801:7f6::/48 maxlen: 48
2a06:9801:f18::/48 maxlen: 48
2a06:9807::/48 maxlen: 48
2a06:9807:1::/48 maxlen: 48
2a06:9807:10::/44 maxlen: 44
2a06:9807:100::/40 maxlen: 44
2a06:9807:100::/44 maxlen: 44
2a06:9807:100::/46 maxlen: 46
2a06:9807:100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 00:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:87:32:2e:ec:d5:a5:e6:82:d9:3b:e9:41:80:d2:5b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Sep 9 17:23:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c4c8ca36b28cf5d7e2f389257606556b5261533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f2:d6:d5:61:cd:20:f6:08:56:d2:7d:cc:5c:
b9:af:63:f5:2c:db:6b:ed:23:a2:5c:e9:bc:f2:c6:
17:f6:4b:80:6f:f8:ea:7b:a6:02:83:b2:ca:57:86:
0b:f5:7f:2d:4b:b5:a5:fb:02:9d:28:73:b6:ce:39:
18:53:e3:36:27:69:24:66:87:35:4c:ab:06:ae:df:
74:04:78:3a:f2:57:8f:1f:ad:08:f4:28:4a:b4:db:
5c:87:fd:5b:b5:89:51:2c:2c:8b:af:95:6e:57:1c:
d6:b8:3e:b7:4e:b3:fb:f3:67:62:2a:69:fd:d6:e2:
c8:d0:47:c9:2b:ee:62:6c:78:f7:bb:85:c4:de:2d:
e3:8b:3c:e2:d1:c6:c1:22:f1:0a:cd:aa:ff:0a:7d:
fb:a4:30:5b:d3:6b:f4:36:ce:f6:c5:17:1a:16:b1:
58:6f:82:56:39:5c:a4:89:f6:29:f9:00:52:69:e6:
10:71:9d:95:b7:c2:b4:1f:21:7d:f4:84:6a:ad:d4:
87:81:dd:da:8e:e0:55:c7:87:50:f4:f8:56:f9:76:
18:1a:22:3e:d8:7e:f6:71:f5:99:df:4e:26:bf:2a:
be:2b:75:73:1c:19:42:85:01:d0:96:3f:07:1c:f2:
8a:90:6c:f2:7e:d9:51:49:40:e5:5c:14:b8:e8:a5:
3c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:4C:8C:A3:6B:28:CF:5D:7E:2F:38:92:57:60:65:56:B5:26:15:33
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/fEyMo2soz11-LziSV2BlVrUmFTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:58::/48
2a06:9801:741::/48
2a06:9801:7f6::/48
2a06:9801:f18::/48
2a06:9807::/47
2a06:9807:10::/44
2a06:9807:100::/40
Signature Algorithm: sha256WithRSAEncryption
85:0a:3a:13:8b:dd:5c:ba:d2:06:6f:44:0f:be:23:27:1f:ae:
22:22:3c:05:57:31:dd:4e:b5:32:4e:f3:38:02:b0:cc:83:d3:
fb:fb:96:63:2c:75:14:c3:0b:80:7f:63:94:31:02:61:9b:e2:
eb:47:ca:36:39:d0:63:a5:6d:71:19:7c:56:15:15:0f:70:aa:
47:8b:3c:9c:d6:7d:e1:3f:60:09:e1:ab:cd:d5:c5:c8:04:62:
56:2b:c6:5c:58:3f:4e:e8:1b:f6:2d:da:4f:37:33:41:ed:bb:
07:8e:59:7c:cf:de:92:2b:a3:be:1e:2f:38:fa:6b:93:8e:62:
8a:be:dd:3b:eb:a0:d4:89:f3:08:70:41:5d:37:f0:a8:ef:0d:
ef:b3:de:63:7c:b3:4c:61:76:3a:07:d1:2c:fa:bd:ce:30:f7:
ab:62:d0:17:db:bc:83:8c:10:51:cc:bc:7e:99:e9:68:5f:3e:
2c:0e:5b:00:cb:38:27:1f:30:64:29:bc:40:c6:e7:61:d3:1d:
cb:c3:38:c4:42:32:c5:fd:73:f1:df:bc:05:19:52:2d:40:fe:
3b:02:e6:29:2f:49:5b:8d:df:42:fd:a2:28:cd:dc:cf:7a:b1:
c1:0c:6d:81:d0:40:e9:67:62:4d:16:ef:02:58:59:32:81:ab:
1f:37:02:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:50:57 2026 by rpki-client