Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/l6ccZAJ4RMpEii4LqwxM4G4Mm78.roa
File: l6ccZAJ4RMpEii4LqwxM4G4Mm78.roa (raw, json)
Hash identifier: HRgdTCAcl6L1NFrPseBWMwz/zDbFdDIu8YWnqeuIy5c=
Subject key identifier: 97:A7:1C:64:02:78:44:CA:44:8A:2E:0B:AB:0C:4C:E0:6E:0C:9B:BF
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A086A84ADD9597AC6C2E131389822254FD
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/l6ccZAJ4RMpEii4LqwxM4G4Mm78.roa
Signing time: Wed 09 Sep 2026 14:52:51 +0000
ROA not before: Wed 09 Sep 2026 14:52:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218722
IP address blocks: 2a06:9801:1516::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:a8:4a:dd:95:97:ac:6c:2e:13:13:89:82:22:54:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Sep 9 14:52:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=97a71c64027844ca448a2e0bab0c4ce06e0c9bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:63:fa:dc:33:70:8b:64:cc:ce:72:4c:6a:72:
53:1c:cf:79:5e:9c:bd:c4:60:a2:f1:55:8a:e7:f1:
67:02:58:25:c8:73:c6:4f:b5:5e:2d:31:8f:8a:2b:
1b:20:d4:c4:34:2e:c7:65:0a:fd:d3:02:7d:09:85:
ba:42:e6:ae:ae:9c:d9:ce:b9:4f:91:79:1d:2e:e9:
04:1a:07:71:47:5a:76:01:92:ce:80:f4:59:2a:66:
2c:39:1a:4c:01:22:6b:49:65:ab:40:33:19:b6:b5:
2e:07:59:e9:00:04:89:cd:e8:7a:d8:9c:66:a6:16:
1c:3d:05:af:7a:8f:66:5a:71:5c:55:f9:61:85:86:
26:d5:c2:ed:a5:0d:1f:6e:87:07:4d:12:cd:a2:d0:
48:5a:53:75:c3:e1:4f:27:0a:96:ac:b8:cf:77:d2:
ee:d0:4f:e6:e3:2f:41:d2:65:18:55:c6:60:ce:7c:
95:9e:f1:ed:09:59:7f:4b:1c:a0:fc:28:e3:9d:a7:
51:5a:ce:a0:6b:5b:3d:11:c5:b0:7c:47:11:75:f5:
12:83:32:89:99:53:0d:51:40:3f:5a:ca:b2:46:97:
9f:eb:b5:b8:9d:ac:81:8a:3d:80:0b:da:d6:ec:76:
9e:4c:53:c4:76:01:68:2d:e3:6f:4e:d8:94:64:8c:
58:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A7:1C:64:02:78:44:CA:44:8A:2E:0B:AB:0C:4C:E0:6E:0C:9B:BF
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/l6ccZAJ4RMpEii4LqwxM4G4Mm78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:1516::/48
Signature Algorithm: sha256WithRSAEncryption
c5:c2:8c:74:85:40:75:3d:04:80:43:82:29:dc:0e:be:25:cb:
c2:b4:98:4b:af:b5:c1:c6:95:0d:65:07:83:46:71:52:af:b6:
ea:23:4c:ee:85:db:a9:ec:e1:5f:6a:51:d0:71:08:be:72:68:
cd:cf:ad:4a:50:cf:8c:e7:31:4c:ce:6d:be:42:de:8b:09:bc:
2e:1b:1c:2e:b2:fb:f4:65:a8:83:7f:14:a0:7a:05:93:87:3c:
61:10:41:92:0c:77:3c:45:9f:1d:8f:33:57:f8:b9:aa:f5:2b:
0c:58:0f:01:9c:fc:76:9c:e9:ef:9e:e8:32:1b:87:26:2a:d0:
06:a7:ea:c6:35:65:6b:5b:10:b8:2d:c1:4f:f4:6a:2c:b4:56:
fe:95:7f:84:05:80:28:b9:96:a8:2c:ed:78:f8:99:1d:29:ce:
9e:c3:84:be:a5:8d:91:de:3e:90:75:50:d4:a4:02:5f:49:ee:
e5:e0:92:15:d3:a3:ce:cd:f4:88:cb:b6:ec:c9:f9:85:1c:70:
70:a4:c2:fa:fd:5d:98:da:74:de:8e:32:90:72:dd:c8:f0:dd:
13:2e:d0:00:20:c0:f3:b6:ae:a5:38:c1:9d:b9:c2:b3:6b:8a:
29:7e:68:19:8b:1f:61:bd:cd:22:1a:bc:d3:c6:d6:5e:dd:28:
63:76:3b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:03:45 2026 by rpki-client