Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/mVD9QaNF9-jutmTKwoOznKJX0vY.roa
File: mVD9QaNF9-jutmTKwoOznKJX0vY.roa (raw, json)
Hash identifier: hV8AQkPUrhgGtsKpZeQ1OoYVbTnobmnVXvNEoqDQlUo=
Subject key identifier: 99:50:FD:41:A3:45:F7:E8:EE:B6:64:CA:C2:83:B3:9C:A2:57:D2:F6
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019E9F3F5DC2659A84B64D45D35F10676B54
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/mVD9QaNF9-jutmTKwoOznKJX0vY.roa
Signing time: Sat 06 Jun 2026 23:23:10 +0000
ROA not before: Sat 06 Jun 2026 23:23:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209735
IP address blocks: 2a06:9801:741::/48 maxlen: 48
2a06:9807::/48 maxlen: 48
2a06:9807:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9f:3f:5d:c2:65:9a:84:b6:4d:45:d3:5f:10:67:6b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jun 6 23:23:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9950fd41a345f7e8eeb664cac283b39ca257d2f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0c:e5:3f:0f:4f:30:6d:0d:6a:cf:71:92:b8:
32:cd:92:87:b3:21:6e:d0:d0:ba:8c:99:b5:1f:1d:
7e:ea:51:6e:cf:43:b5:b0:6f:89:69:2e:da:18:b0:
9c:87:48:c3:81:7c:85:33:a1:66:99:ba:9d:3f:d5:
87:c6:2c:8f:91:2d:39:80:7b:48:18:2b:81:b3:24:
c2:8b:1b:7b:3a:89:ac:86:5d:84:e7:ba:c6:56:65:
17:38:dd:44:57:d5:48:a5:1a:f0:a6:cb:a5:d0:71:
c3:dd:e9:2f:eb:70:2a:76:76:98:61:9e:80:c4:f8:
02:84:f1:6d:66:e7:0a:83:36:b6:f9:9f:e4:16:77:
2f:df:32:57:e6:75:75:c1:07:82:d4:13:0f:cf:f1:
4f:17:d9:af:45:fa:a9:3d:f9:84:06:b2:3f:06:93:
a9:0c:18:27:44:3e:0f:ee:14:84:e7:58:ce:f5:e6:
23:8b:0b:b2:2e:d3:0d:aa:34:05:39:f8:6d:58:69:
aa:0f:fa:a6:f4:0b:ec:28:42:0a:84:09:af:0b:c9:
0e:df:1c:a4:3f:ca:07:78:de:4b:67:92:25:a7:68:
ab:39:50:fb:10:82:cc:3c:fd:a0:07:9d:d2:cd:26:
e2:16:39:f6:86:81:53:12:f0:3a:da:77:cc:0e:1c:
60:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:50:FD:41:A3:45:F7:E8:EE:B6:64:CA:C2:83:B3:9C:A2:57:D2:F6
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/mVD9QaNF9-jutmTKwoOznKJX0vY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:741::/48
2a06:9807::/47
Signature Algorithm: sha256WithRSAEncryption
a7:b1:e7:b3:84:9b:34:ef:cc:d8:6e:47:ab:a4:d9:6d:8f:12:
cf:c2:cb:bb:14:61:63:a0:45:35:be:c8:9f:09:17:d4:35:57:
c7:8f:1a:b7:4a:bd:e2:50:9a:16:cb:ad:7f:f5:be:b3:b2:8d:
17:96:9e:15:a8:f9:33:f4:1d:82:5c:c1:e3:16:a8:0b:c5:2a:
31:d1:54:fa:20:d4:99:7c:0f:85:c0:f5:e6:31:57:66:c6:41:
91:d8:d5:6e:03:c8:11:b9:4a:be:dd:41:b5:a3:96:a6:d7:24:
19:77:4e:63:f7:3c:50:a2:31:f5:e3:1d:a2:9e:d1:a6:55:e5:
bd:aa:7e:71:85:8d:65:fa:f5:6b:7b:c1:6b:3d:41:84:53:dc:
14:e0:45:3e:ec:f6:eb:dc:45:97:98:4d:84:44:9b:4f:2f:67:
b6:3f:6a:32:59:4b:fa:c9:1c:6a:11:41:d1:0f:9c:fc:97:6e:
7d:aa:df:80:f0:53:c0:37:68:16:13:02:e0:b1:7d:ce:1f:0b:
f9:92:e3:a1:8b:e3:a4:1a:f7:4b:ef:b8:cf:5e:b9:06:ed:9c:
48:50:e4:c1:e1:42:a9:f9:e1:c9:0b:0b:06:87:e2:f8:4e:80:
0d:9f:b7:eb:a3:91:c8:30:c1:ea:e0:c0:db:00:93:52:98:4d:
20:48:80:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:27:56 2026 by rpki-client