Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/rhHpDFUQWd-zDfDDoAEzIUOu1ds.roa
File: rhHpDFUQWd-zDfDDoAEzIUOu1ds.roa (raw, json)
Hash identifier: YGe46COe3a0fTmhwk3wAejdqQqucnCtUqUlV5v/SDlc=
Subject key identifier: AE:11:E9:0C:55:10:59:DF:B3:0D:F0:C3:A0:01:33:21:43:AE:D5:DB
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019FA92A6273F519BC2AB9048A1F58C16B51
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/rhHpDFUQWd-zDfDDoAEzIUOu1ds.roa
Signing time: Tue 28 Jul 2026 14:39:14 +0000
ROA not before: Tue 28 Jul 2026 14:39:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219110
IP address blocks: 2a06:9801:f43::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:2a:62:73:f5:19:bc:2a:b9:04:8a:1f:58:c1:6b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jul 28 14:39:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ae11e90c551059dfb30df0c3a001332143aed5db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fa:92:2e:11:4d:e2:1a:b6:4e:72:0c:e5:e5:
29:6e:0d:ea:66:78:01:4d:9e:c9:35:de:84:5d:d8:
5c:b4:e1:02:e0:ed:e3:68:3e:f3:80:bc:d5:00:d8:
b0:b4:48:15:5d:11:1f:4d:7e:63:49:ba:b6:25:09:
b6:0c:c7:b0:9a:2c:7b:be:07:fd:08:75:be:12:de:
c0:c4:6c:6b:d4:e0:ef:d2:c5:08:2d:dc:aa:9e:f1:
7e:b6:d3:d2:f1:f3:70:2d:39:b3:6a:de:b4:d3:33:
0c:a7:2e:aa:57:e6:b5:79:23:fa:cf:9b:0f:b2:4c:
b8:cb:18:84:82:a8:d8:06:6c:5a:59:fd:b5:28:26:
a1:c5:d3:63:a0:d4:3d:bb:ed:8c:27:8a:86:43:f7:
54:25:6b:7e:20:11:37:94:28:82:b0:61:8e:36:11:
76:02:2c:d1:c3:d6:8a:ed:a7:a8:ba:4b:87:b9:49:
06:7f:d9:b5:f4:74:92:0e:58:ca:ea:9f:fa:e0:f9:
88:04:d3:c5:df:76:ae:5a:d2:22:92:ff:05:c1:d2:
9e:3d:b9:51:0f:92:df:df:93:f5:65:e4:5b:fc:ae:
3f:09:12:67:0f:8c:16:98:55:52:f5:8e:53:1e:20:
c9:94:c1:51:48:48:59:78:ba:94:a2:4a:9f:b6:73:
37:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:11:E9:0C:55:10:59:DF:B3:0D:F0:C3:A0:01:33:21:43:AE:D5:DB
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/rhHpDFUQWd-zDfDDoAEzIUOu1ds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:f43::/48
Signature Algorithm: sha256WithRSAEncryption
9d:66:97:66:ab:19:0a:42:66:35:fc:3b:a0:09:cf:7b:54:49:
99:be:4a:43:b8:79:4d:17:e3:bf:07:85:8e:20:e3:8d:8b:8f:
39:85:03:50:46:88:dd:5f:10:c2:03:09:72:91:e9:25:57:d1:
40:33:b5:85:e4:fe:5a:2b:93:c1:2e:8a:3c:7f:0d:f3:88:41:
c1:ef:e6:aa:b4:ae:60:aa:e0:ad:4e:18:1a:0a:b3:bb:f6:09:
50:4e:95:eb:f2:4d:fe:8c:43:e3:60:53:3e:d0:7c:ef:9b:d0:
87:97:68:6e:3b:39:c9:53:91:9a:61:d6:09:33:6c:5a:94:e2:
63:e4:c4:32:85:b7:b7:d9:30:8b:09:a6:5a:4a:3e:19:f8:a8:
28:a8:1a:3b:49:f1:ad:4f:3e:27:40:1a:3c:83:cb:76:c9:11:
f8:18:67:f7:84:92:64:0c:84:da:49:72:6b:a7:fb:71:dc:ca:
9f:84:6c:2b:5e:87:85:9f:88:1e:e4:12:64:32:7b:22:16:74:
85:00:4f:bb:de:66:91:bc:f9:b9:31:05:dc:c4:a1:4d:e5:5c:
8a:1f:e9:e1:4c:0f:c5:36:b0:d2:16:8c:47:a9:ed:1f:b7:cd:
0b:8c:0f:61:46:d7:e6:b3:90:df:ba:9b:42:6d:b5:76:42:1c:
3a:e6:a2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:13:29 2026 by rpki-client