Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/lNpczjPhJ9Uh7S_kE71otmwE7A0.roa
File: lNpczjPhJ9Uh7S_kE71otmwE7A0.roa (raw, json)
Hash identifier: W9qL4UmZT0AkDQMaJJhZP96+InUPskhx5DwhcIYP/rA=
Subject key identifier: 94:DA:5C:CE:33:E1:27:D5:21:ED:2F:E4:13:BD:68:B6:6C:04:EC:0D
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A090DB06713A3664DE8EED190FE5EB8730
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/lNpczjPhJ9Uh7S_kE71otmwE7A0.roa
Signing time: Fri 11 Sep 2026 14:24:28 +0000
ROA not before: Fri 11 Sep 2026 14:24:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218707
IP address blocks: 2a06:9801:151c::/48 maxlen: 48
2a06:9801:1540::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:db:06:71:3a:36:64:de:8e:ed:19:0f:e5:eb:87:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Sep 11 14:24:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=94da5cce33e127d521ed2fe413bd68b66c04ec0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7d:e6:42:4b:8a:76:3d:ec:31:59:49:8d:6d:
e7:f0:76:29:73:50:39:59:94:77:18:72:ef:b2:95:
1f:5f:5e:d6:87:52:8e:1d:ba:bd:4d:a4:c8:b6:15:
a9:ce:c9:75:6f:6e:ef:07:0d:f4:32:fc:a7:e9:3c:
e3:40:ea:11:2e:0b:1e:85:13:f1:5b:f2:68:fb:06:
d8:fe:d3:4e:fa:05:e2:b8:8e:b9:3a:7b:4d:85:30:
04:c7:db:0c:ee:01:5d:b0:c4:a9:75:f4:85:32:03:
2b:a3:46:9b:f1:b7:3c:e3:67:40:d2:58:f5:2f:e9:
05:74:7e:52:c3:32:f6:ec:22:12:e9:d2:01:c5:00:
f3:2f:0e:45:79:d3:0e:51:2b:7d:1f:df:a2:28:f4:
32:c9:81:48:8c:15:09:91:8f:34:2d:d0:54:5c:ce:
6e:ce:ee:f1:f8:21:a5:06:de:80:3f:fb:ec:00:e6:
b9:62:38:a7:56:00:70:1c:8c:60:d8:2b:79:03:f8:
75:20:7d:f8:74:b7:34:9f:4d:1c:bd:42:3a:06:c6:
91:5e:82:69:20:92:de:fc:f3:e8:ef:dd:61:4e:6b:
59:9a:a3:1e:33:b1:03:62:f8:e3:1e:b6:45:37:50:
22:98:61:1d:89:aa:58:82:51:97:9c:3e:80:41:5d:
d6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:DA:5C:CE:33:E1:27:D5:21:ED:2F:E4:13:BD:68:B6:6C:04:EC:0D
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/lNpczjPhJ9Uh7S_kE71otmwE7A0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:151c::/48
2a06:9801:1540::/48
Signature Algorithm: sha256WithRSAEncryption
44:40:33:53:38:c2:6b:cd:23:4d:16:8d:13:5b:db:43:e4:a4:
ef:91:6c:ca:79:7d:54:f4:aa:24:2d:2f:22:3b:f7:50:0a:63:
1f:17:1c:7a:15:08:a9:94:91:07:dd:c0:c9:3d:83:e2:fb:07:
ab:f3:34:01:03:93:37:93:b9:29:75:42:e7:c6:5c:09:54:bf:
bc:c3:48:62:a5:3b:95:e8:10:1b:88:43:10:de:b1:6c:9c:f5:
e3:a1:7b:f6:64:07:ae:b2:a4:41:f0:d7:c0:f0:c7:47:89:22:
0b:43:b3:9d:e8:4d:04:e5:0b:a5:19:88:37:c8:93:6d:aa:24:
33:dd:05:d1:5b:b9:b2:2c:45:13:da:92:5d:7a:b9:ca:18:17:
79:d5:3a:cf:2c:0d:af:bd:e4:9c:1c:9c:6c:7a:55:5c:e1:4e:
0d:93:34:1a:a4:19:4c:23:08:65:9d:bd:0c:8a:bc:de:3e:3b:
7e:f0:b6:e5:4e:45:39:64:be:29:da:81:75:c9:fe:2a:7f:75:
e7:1f:19:13:19:1c:24:2a:e9:16:ce:b0:d3:28:5b:7a:d8:0e:
63:81:78:d6:dc:6a:c0:f5:c2:c9:8b:2f:12:4f:12:25:71:1e:
d2:dc:87:c3:cc:6c:b3:24:2d:31:31:d0:ad:3d:24:98:e0:d4:
d2:0b:54:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:53:03 2026 by rpki-client