Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/uW4sysV8wnph-cMvpc-PEfFz0Ag.roa
File: uW4sysV8wnph-cMvpc-PEfFz0Ag.roa (raw, json)
Hash identifier: Cn+NXXfi0S3RZDnrcy/VN0+8OMrVKCyMWL87X+a/LC8=
Subject key identifier: B9:6E:2C:CA:C5:7C:C2:7A:61:F9:C3:2F:A5:CF:8F:11:F1:73:D0:08
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019C739F69E1261E6503841038A5C2684FA2
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/uW4sysV8wnph-cMvpc-PEfFz0Ag.roa
Signing time: Thu 19 Feb 2026 01:59:12 +0000
ROA not before: Thu 19 Feb 2026 01:59:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213650
IP address blocks: 2a06:9801:30::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:73:9f:69:e1:26:1e:65:03:84:10:38:a5:c2:68:4f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Feb 19 01:59:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b96e2ccac57cc27a61f9c32fa5cf8f11f173d008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:94:60:d5:13:c0:c5:1e:b5:3c:53:a1:69:66:
58:33:4c:d8:b3:95:f2:98:1b:cf:2f:45:6e:18:38:
ea:47:ca:2c:14:1f:79:ca:c3:16:51:46:fc:1f:07:
bb:31:a8:ab:2f:28:d5:dc:d0:ff:5e:d0:75:de:f8:
3e:9f:81:88:f5:17:b0:32:9b:e2:3e:44:24:77:13:
e9:09:d2:6f:fe:5a:50:93:7d:c6:38:a0:0d:49:99:
69:45:57:28:ca:4d:87:76:c2:b5:e7:ac:5a:19:13:
7a:9c:09:c8:79:ad:29:8f:3f:10:46:9a:c2:e5:62:
1d:1e:d6:e0:fd:85:cc:b0:45:33:a1:32:00:97:82:
a1:a8:bb:da:0d:e4:46:ef:86:d3:c4:61:1d:5a:a5:
5f:fa:f1:9b:23:b5:34:ff:68:32:78:2f:f8:c9:89:
f5:b0:af:22:29:4b:32:e6:11:94:24:43:ae:1e:18:
ae:dc:a9:e6:c6:13:37:a3:1b:1e:ec:20:bc:7f:63:
a0:10:e7:94:01:fc:a3:06:1c:e4:9f:d9:39:5d:0f:
cd:38:ca:f7:bc:92:f4:df:36:37:8f:36:e0:d4:41:
9f:da:5e:b4:23:d8:fd:01:69:f2:46:ef:d8:77:c7:
4f:9e:46:3b:60:00:ca:dc:be:3a:06:79:e5:cb:df:
3a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:6E:2C:CA:C5:7C:C2:7A:61:F9:C3:2F:A5:CF:8F:11:F1:73:D0:08
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/uW4sysV8wnph-cMvpc-PEfFz0Ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:30::/44
Signature Algorithm: sha256WithRSAEncryption
07:b9:ef:40:22:16:60:17:29:22:55:cd:f5:7d:25:81:4d:48:
54:fa:fa:36:d5:b1:b9:a0:15:1f:14:47:2b:3d:6f:6c:b1:5a:
96:09:bd:c5:a3:1b:32:30:29:66:f8:d8:f0:e7:80:5e:ee:71:
67:8f:1c:4b:f1:f4:2b:10:d4:92:98:e9:86:de:81:fa:82:b5:
19:4f:d3:fc:ce:76:71:df:4a:7f:d4:30:75:12:5b:a2:18:b4:
a0:8f:7d:5a:26:02:f0:0a:0c:91:2f:b4:80:12:bd:ff:6b:23:
d8:97:70:ca:a6:3a:8a:9c:45:f0:76:5d:43:51:49:fd:d9:64:
e9:27:e1:33:0a:6a:90:69:38:9d:e9:1b:82:bd:9e:46:96:10:
5a:35:b1:34:78:76:66:f1:fc:28:6e:cb:2a:61:e0:66:cc:aa:
d6:75:22:4d:d0:ea:63:f9:6e:07:75:c7:99:93:d3:7f:1a:a9:
a9:56:cc:37:4b:95:53:a6:db:39:ca:08:fa:b9:57:eb:36:b4:
bc:21:2d:12:72:43:8a:90:ea:16:21:b8:2a:09:ba:f3:35:01:
30:79:3a:01:43:41:9b:75:1f:79:1f:a6:95:9c:ad:2f:5e:c8:
5e:17:1e:98:eb:42:13:11:91:e4:f2:93:61:95:24:5c:51:b6:
d8:99:6c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:03:25 2026 by rpki-client