Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/tNbT5jj9o07MWgerz6Dr_Ac3SOI.roa
File: tNbT5jj9o07MWgerz6Dr_Ac3SOI.roa (raw, json)
Hash identifier: ym+YZT/x3F+NpCca5LvwQPepA8tfptBn4wXCU5Kb3bc=
Subject key identifier: B4:D6:D3:E6:38:FD:A3:4E:CC:5A:07:AB:CF:A0:EB:FC:07:37:48:E2
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019EB5D05D56A4970124BD713CE84D3BC04C
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/tNbT5jj9o07MWgerz6Dr_Ac3SOI.roa
Signing time: Thu 11 Jun 2026 08:33:11 +0000
ROA not before: Thu 11 Jun 2026 08:33:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219480
IP address blocks: 2a06:9801:2ba::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:d0:5d:56:a4:97:01:24:bd:71:3c:e8:4d:3b:c0:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jun 11 08:33:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b4d6d3e638fda34ecc5a07abcfa0ebfc073748e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:69:d7:68:87:af:1c:9b:e3:ba:9c:ac:0d:a2:
20:14:f7:02:ec:8c:db:5d:b7:9a:9c:ae:22:99:cd:
6e:96:36:77:d7:c2:f7:74:04:7a:5e:17:3d:ee:62:
37:51:ad:89:0c:f1:4b:aa:57:b6:eb:f9:96:bc:b9:
89:b2:f7:93:f3:e6:1c:b6:09:3c:c1:d2:71:5a:d3:
87:11:30:57:8a:1c:a7:30:cd:25:c0:5a:65:0a:10:
b3:6f:81:32:d8:f3:d1:76:d7:2c:2e:bb:9b:cc:bc:
b0:d5:59:76:2b:1b:57:32:d8:31:69:ae:29:32:64:
aa:1a:52:6d:77:0b:ce:d5:05:e8:20:fd:9d:b6:21:
74:4b:a7:3f:18:bf:3e:f3:c7:5b:fc:aa:4c:fc:34:
b9:a0:9d:e3:f7:ad:ae:5e:32:78:c5:c8:5c:ef:30:
5e:9d:0c:a7:9d:db:df:a7:71:7f:4b:27:cb:a3:ac:
6b:06:d9:db:36:a1:1d:ea:ba:09:c7:bc:7c:4f:83:
23:78:ce:28:03:de:df:4d:7c:8b:c7:b9:18:5b:d3:
62:e6:3f:4b:06:e9:af:07:73:9b:4c:5e:55:ba:75:
b5:48:d8:f4:69:d7:b6:87:f1:e7:62:67:07:f0:4c:
fc:86:9a:c1:19:75:c5:16:88:53:da:b4:93:46:4a:
32:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D6:D3:E6:38:FD:A3:4E:CC:5A:07:AB:CF:A0:EB:FC:07:37:48:E2
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/tNbT5jj9o07MWgerz6Dr_Ac3SOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:2ba::/48
Signature Algorithm: sha256WithRSAEncryption
23:e0:a3:e4:20:dc:94:53:6e:4b:cb:c1:cc:1f:5d:e6:40:13:
36:c7:42:c6:24:eb:c0:f4:06:c4:dc:6a:c7:e0:cc:45:e2:7e:
27:eb:ff:1c:02:95:57:74:76:95:6c:60:88:a7:8a:09:26:c5:
f4:f9:84:a5:f9:e0:fa:d2:1a:ae:37:24:bf:1c:1b:67:ec:63:
df:cf:87:ef:20:da:4b:79:8a:60:f9:88:ba:2e:eb:f8:a0:16:
f9:3a:ff:1d:71:fa:28:01:27:b3:3a:17:01:3c:f7:4e:41:28:
1c:d5:b2:73:62:cd:98:41:46:4b:0f:56:09:48:f3:ac:fa:b2:
76:ce:46:09:c1:84:23:e8:b9:fd:e7:3d:48:18:bf:07:e1:ee:
20:f0:e5:d7:14:17:eb:b9:75:be:85:39:80:c2:7f:a7:01:ed:
a2:1d:0e:d4:28:4e:8a:b2:60:5e:a4:2c:47:59:8b:1c:17:e5:
6f:92:d2:51:89:dd:83:c5:fe:7f:2e:7b:d0:f4:40:f1:25:45:
23:e3:44:fd:2a:b2:fc:de:0b:82:fe:3f:30:57:d6:f0:d5:84:
be:35:27:6f:05:dc:f2:cd:c5:5c:0e:79:f0:0c:53:a0:a0:a4:
f4:25:c1:88:14:7d:0e:40:64:68:b5:83:37:3f:ed:25:bc:c2:
f7:c8:7c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:20:40 2026 by rpki-client