Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/jGQ-yVaYGGDRh9vNDuLL6fpUpm0.roa
File: jGQ-yVaYGGDRh9vNDuLL6fpUpm0.roa (raw, json)
Hash identifier: JEFHDdYAK0iVT6Q7NAPNrGsxjRc0wjYOQmwK2LoSTqE=
Subject key identifier: 8C:64:3E:C9:56:98:18:60:D1:87:DB:CD:0E:E2:CB:E9:FA:54:A6:6D
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A0EF1A68E1D1EDC9E7BB08C500509DCF31
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/jGQ-yVaYGGDRh9vNDuLL6fpUpm0.roa
Signing time: Tue 29 Sep 2026 21:38:00 +0000
ROA not before: Tue 29 Sep 2026 21:38:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218545
IP address blocks: 2a06:9801:1581::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ef:1a:68:e1:d1:ed:c9:e7:bb:08:c5:00:50:9d:cf:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Sep 29 21:38:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c643ec956981860d187dbcd0ee2cbe9fa54a66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:80:58:b1:c8:87:8b:eb:e9:cc:e6:81:ca:df:
bd:65:5a:1f:1a:fd:38:25:3b:75:7b:59:f0:77:ed:
ed:70:24:c4:cc:89:30:8d:f6:54:45:9f:54:03:f9:
6f:63:53:8c:fb:3f:54:b3:b2:85:b9:10:af:82:23:
5f:f8:61:fb:84:0f:2e:67:6e:e8:4f:cc:5b:01:6d:
88:50:4c:d2:2f:82:6e:b0:f1:4a:96:bb:a8:3a:53:
a7:a0:7f:6a:76:55:43:62:ba:13:24:f5:e6:d5:14:
b2:6d:c0:c6:c1:2b:44:8d:31:51:19:78:93:d9:ed:
13:b0:c3:62:23:29:97:30:7e:94:81:ba:b3:2c:bf:
a5:0c:84:b3:b7:17:30:68:6f:ed:33:2b:90:eb:3b:
20:96:f0:60:88:2d:70:1e:8f:23:42:52:45:2c:09:
e8:57:41:ac:49:ed:26:05:a3:28:eb:de:60:0d:d1:
b5:34:a2:ca:9c:a7:8e:fa:94:df:3a:b7:b1:91:0b:
62:6b:87:9b:b8:94:52:b4:b1:91:e9:46:6f:13:fb:
17:dd:17:cd:8f:54:cf:ad:bf:57:27:dd:45:da:ae:
be:21:11:4c:fe:11:c9:88:9a:a6:ac:6c:7b:bb:47:
ae:81:97:7a:d1:82:29:a0:c1:93:60:59:38:41:41:
7c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:64:3E:C9:56:98:18:60:D1:87:DB:CD:0E:E2:CB:E9:FA:54:A6:6D
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/jGQ-yVaYGGDRh9vNDuLL6fpUpm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:1581::/48
Signature Algorithm: sha256WithRSAEncryption
c1:66:d0:ec:9d:67:a2:84:19:8e:8f:a5:a0:6e:b8:9a:55:55:
dc:3f:ba:9b:9d:ec:b2:41:ee:f4:da:1c:f1:02:2c:ed:23:0e:
21:48:49:d8:a3:23:13:93:d7:77:ca:48:0e:3d:23:91:29:cf:
62:43:76:fc:35:fa:2a:21:2f:a8:62:57:94:92:6e:a6:ee:0d:
bd:33:af:87:1d:03:6c:30:22:b5:d6:5c:25:8c:fb:54:d3:26:
72:f9:a1:91:92:68:ed:90:96:51:d9:69:c6:8f:5b:c4:36:e0:
da:87:67:87:79:8e:28:24:58:42:27:8c:6f:7c:9b:3a:dd:ff:
4a:8f:95:71:df:ba:7b:cb:95:82:c5:47:96:cc:1a:93:d1:ef:
de:33:6c:01:f5:54:4b:9b:07:5c:ce:cb:66:65:e4:a6:3c:62:
b9:65:23:1a:5b:48:ac:14:81:29:59:d2:2d:e1:ce:d5:ab:c1:
36:41:f9:be:66:35:2b:dd:e8:55:26:f7:32:cf:9f:74:f5:b3:
c4:13:cf:02:70:e3:97:4d:d8:b9:be:9f:b3:9c:03:d0:c2:ac:
4b:60:e5:0d:05:82:33:f1:07:ca:88:0e:7e:ee:4e:9f:44:13:
5c:b9:88:8a:17:ea:fb:f5:2d:fa:20:06:0a:da:42:dd:8a:96:
ca:b3:84:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:44:21 2026 by rpki-client