Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/s6XMkURCgmG5FSjpeQBy93fqJyw.roa
File: s6XMkURCgmG5FSjpeQBy93fqJyw.roa (raw, json)
Hash identifier: 346HFXhfe5tCcwXWrjSsejWlBqRm1Vv8MxgAZcPx2Kg=
Subject key identifier: B3:A5:CC:91:44:42:82:61:B9:15:28:E9:79:00:72:F7:77:EA:27:2C
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019C690EF37C52C35C24E994E926EC899EC0
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/s6XMkURCgmG5FSjpeQBy93fqJyw.roa
Signing time: Tue 17 Feb 2026 00:45:13 +0000
ROA not before: Tue 17 Feb 2026 00:45:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201300
IP address blocks: 2a06:9801:a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:69:0e:f3:7c:52:c3:5c:24:e9:94:e9:26:ec:89:9e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Feb 17 00:45:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b3a5cc9144428261b91528e9790072f777ea272c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8e:ae:18:f3:aa:55:4a:e4:5d:f8:14:7e:15:
aa:02:0a:d0:9a:84:4d:95:19:a9:c1:a4:63:26:1a:
5c:45:c5:db:b0:4a:6e:ee:93:da:7f:0b:55:34:02:
18:12:76:8d:78:2c:1d:01:a5:d1:fa:99:63:6c:ce:
3d:8f:3f:87:8a:28:05:33:9f:9c:c7:5c:c5:d2:42:
2e:e3:6d:73:cc:7c:59:8f:01:c2:46:53:5b:ed:59:
4c:4a:9a:e8:97:c5:ee:4a:67:a3:f9:d3:d7:c0:61:
9c:b0:00:cb:f5:a8:8c:dd:a3:81:e8:1a:c9:50:14:
14:e3:48:66:70:3c:ea:de:98:d9:01:85:7b:92:98:
40:7b:a6:df:66:b9:c5:05:21:a2:e1:bb:f0:13:ff:
04:df:6a:dc:e8:69:00:0b:10:dc:81:de:79:2d:f3:
78:b8:9b:0f:4a:8c:af:06:10:70:e5:81:34:38:9a:
00:8c:78:f5:2c:dc:42:7e:ee:c5:7c:af:e8:3a:a9:
0f:94:95:f4:86:26:dc:61:fb:01:a3:3b:6b:4a:78:
77:84:a7:46:a6:32:bc:33:31:9b:e5:de:83:08:e4:
65:d5:6d:f3:dc:db:63:13:2c:fc:fd:e5:6b:65:d1:
fc:bd:86:5d:1c:e7:f1:90:4d:c2:fc:0c:08:ec:7f:
26:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A5:CC:91:44:42:82:61:B9:15:28:E9:79:00:72:F7:77:EA:27:2C
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/s6XMkURCgmG5FSjpeQBy93fqJyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:a::/48
Signature Algorithm: sha256WithRSAEncryption
5d:15:18:08:dd:e8:f8:f9:0e:c5:d3:cc:f3:7a:94:70:97:47:
78:bd:0e:3b:65:da:6c:38:b1:00:5b:7d:4c:fc:ae:32:a5:21:
09:45:f0:7d:cb:ae:b7:8b:3d:1b:5d:13:8d:69:84:45:94:98:
9b:48:11:01:77:8e:f5:08:b4:89:22:c8:50:ec:8b:29:8d:b7:
1c:df:f8:e5:a0:f5:37:62:0e:ee:29:b3:74:93:27:43:8e:2b:
9c:e4:db:b9:da:87:d8:fb:37:1e:e7:3b:58:8d:4e:3e:07:31:
90:cd:bb:e6:f6:d8:2b:9f:36:35:96:a9:06:40:f6:6c:ae:fd:
a9:0e:d7:24:d3:b7:8b:5d:85:a7:6f:15:48:95:c7:d1:3b:ff:
c9:3e:99:b5:ed:21:64:49:16:d7:a3:a1:63:4d:de:9d:2d:1c:
3e:60:8b:24:3a:80:c6:cf:bb:42:bc:10:91:cb:6f:b5:a9:d5:
16:8b:1a:6c:1b:ec:f3:74:ec:7e:3a:d5:64:19:fb:1e:1d:3b:
09:81:99:9f:06:58:51:5b:3d:61:40:84:4b:f2:3a:59:41:f5:
c1:2b:e7:83:61:e0:5f:13:03:25:cf:df:25:c2:52:ef:56:ff:
c2:c8:6d:26:0b:d0:48:ed:50:0e:77:99:3d:cf:af:20:f2:59:
d1:c1:09:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:06:35 2026 by rpki-client