Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/jXHDfgLvmjhRZqzlXBrBmSaqJv0.roa
File: jXHDfgLvmjhRZqzlXBrBmSaqJv0.roa (raw, json)
Hash identifier: /QahqDptifQjioUyXRVcFr4eJScJhM6uNPeVMo+csXs=
Subject key identifier: 8D:71:C3:7E:02:EF:9A:38:51:66:AC:E5:5C:1A:C1:99:26:AA:26:FD
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019F92CBC30D0FA423C44325879D3A16D72F
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/jXHDfgLvmjhRZqzlXBrBmSaqJv0.roa
Signing time: Fri 24 Jul 2026 06:24:14 +0000
ROA not before: Fri 24 Jul 2026 06:24:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219522
IP address blocks: 2a06:9801:791::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:cb:c3:0d:0f:a4:23:c4:43:25:87:9d:3a:16:d7:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jul 24 06:24:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8d71c37e02ef9a385166ace55c1ac19926aa26fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:45:e8:46:1c:63:1b:15:61:ad:d8:5d:48:5c:
c6:b6:00:53:ca:84:89:4e:41:7b:46:6a:8f:c8:04:
76:82:d6:61:4b:ca:9b:f7:bd:26:d8:ea:6e:28:b4:
6c:e5:33:e0:b7:24:ae:fb:a1:7a:1d:e2:4c:c8:4a:
3a:8f:91:59:5c:8c:c8:85:e7:60:64:b3:9f:e2:aa:
cd:7d:db:43:61:c4:e8:41:04:ac:d0:49:72:5c:36:
84:bc:df:c8:d9:40:a2:5e:98:ed:c1:14:f8:a2:0e:
84:56:ae:26:cd:9f:a8:b6:80:01:16:0a:f5:a4:2c:
8e:44:7b:0e:32:96:a3:4d:32:07:10:6d:3a:26:89:
f5:d4:75:ff:07:e8:26:99:41:0e:f1:82:89:49:60:
91:e8:1f:b0:f2:ca:c2:1f:14:4a:8f:48:0c:b2:7c:
40:7c:0b:27:4e:23:98:61:53:b3:45:7c:5c:5c:27:
c3:3d:b7:e3:06:ce:cb:5d:95:ee:99:79:1a:25:7d:
2e:87:3c:27:33:b9:32:a2:76:b7:8c:f1:fc:f2:3c:
1a:ca:f1:8b:45:a7:70:12:5c:2f:c1:45:e9:66:0f:
8a:5b:58:87:35:b3:72:4b:8e:37:90:84:c9:a0:7b:
cd:9a:ec:1e:7a:6f:cc:99:ff:2e:23:43:3d:81:cc:
4c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:71:C3:7E:02:EF:9A:38:51:66:AC:E5:5C:1A:C1:99:26:AA:26:FD
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/jXHDfgLvmjhRZqzlXBrBmSaqJv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:791::/48
Signature Algorithm: sha256WithRSAEncryption
0b:8d:9a:18:aa:73:54:ac:45:90:07:2d:f4:13:cd:ae:65:f4:
b1:21:32:06:ea:5b:ed:c6:f9:48:13:df:bd:bd:a7:f5:65:0d:
9c:23:d3:18:b1:10:19:aa:3e:22:63:cd:86:81:42:70:d9:1d:
c8:b5:72:33:b0:4a:48:d0:f9:99:69:43:59:e3:eb:b0:2b:be:
40:9f:e4:79:8a:63:15:b8:46:90:80:66:5f:8d:dd:e3:40:d2:
5f:4e:05:72:4b:56:61:2b:eb:da:d6:77:57:51:29:85:58:36:
c5:59:89:84:81:72:fd:69:94:ae:18:b7:61:d7:0d:d5:65:4a:
4a:c7:d8:d0:9f:ac:18:50:ca:b9:6c:8e:76:8f:af:46:9a:ff:
41:35:94:7b:b5:3e:5b:54:03:39:5a:72:14:e2:3f:5c:23:99:
85:88:e1:be:0f:90:9d:c5:a3:f8:e5:ea:b7:00:63:ec:35:57:
64:5a:98:2f:bf:03:c7:6e:15:bb:54:25:b0:65:db:23:de:80:
da:c7:d7:7b:c6:79:47:5c:a1:9c:b7:16:8c:51:94:9c:a4:39:
15:37:63:fe:22:d7:51:3f:e2:a1:11:bd:80:0e:51:3c:ba:fa:
05:59:41:53:3f:3f:e6:3a:f4:20:9d:f4:43:e7:96:44:1a:9c:
f9:44:df:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:33:15 2026 by rpki-client