Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/v7PPmvExanJpSAYnl_PIoKnw8cI.roa
File: v7PPmvExanJpSAYnl_PIoKnw8cI.roa (raw, json)
Hash identifier: B56F8g5282MgGs03cG7nYTBAib6Ukr9eK/eC64dEjN0=
Subject key identifier: BF:B3:CF:9A:F1:31:6A:72:69:48:06:27:97:F3:C8:A0:A9:F0:F1:C2
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A00624781F1C9F44CE4A4F8BE49023E3B9
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/v7PPmvExanJpSAYnl_PIoKnw8cI.roa
Signing time: Sat 15 Aug 2026 15:57:28 +0000
ROA not before: Sat 15 Aug 2026 15:57:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199686
IP address blocks: 2a06:9801:260::/48 maxlen: 48
2a06:9801:fa0::/44 maxlen: 44
2a06:9801:fa0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:06:24:78:1f:1c:9f:44:ce:4a:4f:8b:e4:90:23:e3:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Aug 15 15:57:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bfb3cf9af1316a726948062797f3c8a0a9f0f1c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:39:96:dd:8e:7d:78:ea:b1:34:9f:be:f6:46:
b7:30:dc:c0:21:1f:67:2c:c0:a6:1c:3d:7d:c1:f0:
6e:6f:1b:ad:d3:49:81:28:11:63:9b:97:5e:f0:e1:
26:e9:d7:2c:ba:be:17:33:7a:67:e0:cc:f3:80:0f:
f3:6b:d8:dc:77:88:97:68:44:c2:7e:7a:6b:af:f8:
ec:c5:43:ef:94:6e:59:5a:c4:0d:7c:e5:3b:46:c3:
92:b2:d6:fd:f5:e8:a9:e9:25:3c:9a:37:87:53:2c:
41:cc:09:38:a6:36:80:a6:b3:de:f8:ca:56:86:77:
8c:c6:9f:88:f6:d6:98:c6:e0:13:b5:e4:28:83:1d:
51:5a:79:1a:4a:c1:f8:c2:0a:cc:a1:4d:0b:78:8f:
03:33:3d:f0:90:71:49:2f:e4:34:00:e4:c7:48:4b:
00:eb:85:c3:fa:45:96:70:93:da:ec:38:82:4d:64:
a6:f6:33:7a:0a:5d:d3:df:0b:cd:07:6c:a2:20:77:
d2:3e:bf:10:e0:6a:a4:2f:62:16:b5:c3:d6:67:05:
cf:a1:d8:e9:dd:d7:f1:30:a9:63:7c:0c:55:40:fa:
37:78:b9:9d:ed:56:6c:78:7c:f3:92:8d:54:8d:8d:
18:9b:9b:8e:50:75:39:48:a7:f8:1e:c1:7d:07:c6:
73:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B3:CF:9A:F1:31:6A:72:69:48:06:27:97:F3:C8:A0:A9:F0:F1:C2
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/v7PPmvExanJpSAYnl_PIoKnw8cI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:260::/48
2a06:9801:fa0::/44
Signature Algorithm: sha256WithRSAEncryption
b6:ea:30:44:05:6e:65:a2:8b:67:4f:a9:f3:5a:fb:ce:bc:d4:
17:13:7c:10:d3:33:1c:f1:d8:c0:4c:a7:97:c6:ce:f0:dd:de:
c4:f5:06:35:c4:98:f8:e9:0f:73:fc:81:1f:52:e1:ac:4f:d9:
6c:92:d9:04:94:32:56:2d:a5:34:0a:5d:c8:6d:44:f6:19:bf:
ff:e3:c2:11:52:f0:9b:16:b5:f5:03:26:df:fa:bc:99:77:ba:
9d:71:fc:e1:03:3d:66:d1:5b:fe:55:67:06:80:27:d7:df:b2:
ef:77:ab:0b:dc:ad:a0:9d:7a:c0:2b:de:3d:ce:99:ee:68:08:
79:50:10:a4:96:3b:d9:3a:ff:d5:c6:a4:f4:2d:20:9b:10:1e:
72:7a:f6:8b:45:02:fd:db:ca:3e:1d:b5:fc:82:55:e6:bd:cf:
31:9b:c3:bf:c0:47:f3:f6:95:06:04:43:35:7c:df:85:73:f6:
80:78:06:e8:0f:ac:8b:d1:41:25:47:80:c9:8b:2f:cc:67:9f:
97:cd:f0:48:31:c5:b5:98:01:ca:90:e0:5b:f2:a8:95:dd:7e:
95:e4:4d:7f:8e:44:1f:f0:f2:ca:02:ac:6c:4c:ac:cd:b0:56:
47:77:33:4c:86:70:0a:a6:a7:42:6c:34:1e:92:ce:03:a1:46:
25:7a:11:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:49:38 2026 by rpki-client