Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/vqilan6R2NOMKoUYyxAabjpZjTw.roa
File: vqilan6R2NOMKoUYyxAabjpZjTw.roa (raw, json)
Hash identifier: Rft0YvV/oFIMUpD6/ftuQXHc0oXwVX9WJEpZzwSPbac=
Subject key identifier: BE:A8:A5:6A:7E:91:D8:D3:8C:2A:85:18:CB:10:1A:6E:3A:59:8D:3C
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A0AFF24F969E89BCA3E7A113EC9A38E662
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/vqilan6R2NOMKoUYyxAabjpZjTw.roa
Signing time: Thu 17 Sep 2026 15:18:07 +0000
ROA not before: Thu 17 Sep 2026 15:18:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218646
IP address blocks: 2a06:9801:1560::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:f2:4f:96:9e:89:bc:a3:e7:a1:13:ec:9a:38:e6:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Sep 17 15:18:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bea8a56a7e91d8d38c2a8518cb101a6e3a598d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a8:96:e8:91:ff:b9:20:7e:fd:e4:c5:bf:56:
8d:d3:20:51:e1:fa:2b:fe:f7:f8:b4:34:ed:7b:8e:
f0:a4:3c:4a:2a:4b:db:7c:19:83:79:9e:3b:95:71:
20:b7:85:d1:1a:0a:5d:4c:b5:8b:9d:06:be:c6:c1:
74:35:9c:b2:c5:8f:db:a5:f6:39:39:85:20:02:4f:
23:7f:bb:47:58:b5:51:b4:07:4f:50:d9:b3:cc:ef:
ba:58:60:95:bb:bc:e7:2c:2a:20:98:d7:99:bf:b6:
d8:32:02:94:ab:7e:dc:c3:16:87:c5:60:c9:86:9c:
ce:55:ae:1b:db:db:14:02:de:2f:a7:7d:ea:5d:76:
52:72:0a:7c:4f:48:5d:99:d1:00:93:12:88:b6:c0:
48:87:49:33:ed:db:e7:39:f6:a6:52:69:24:bf:12:
c9:ac:d3:e8:ad:4c:00:95:bb:49:f8:a7:29:be:a8:
35:5b:c8:ee:09:07:a0:64:3b:d4:77:c8:57:3b:3b:
24:0f:89:d9:97:57:db:07:33:13:fc:5f:3f:8c:7e:
cb:e7:26:90:87:df:38:61:87:d6:c0:93:fd:2e:24:
fd:b6:85:ed:7b:e1:83:c7:ed:25:e9:70:9f:51:06:
e1:07:90:77:cf:d8:4d:6b:b8:b0:35:0a:4a:53:a6:
df:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A8:A5:6A:7E:91:D8:D3:8C:2A:85:18:CB:10:1A:6E:3A:59:8D:3C
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/vqilan6R2NOMKoUYyxAabjpZjTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:1560::/48
Signature Algorithm: sha256WithRSAEncryption
98:93:00:c5:39:73:51:0a:14:04:17:21:67:ab:5c:48:81:3a:
76:c7:16:30:73:8a:60:c9:02:37:92:11:d8:ed:48:01:f5:4e:
40:ba:f6:9b:47:53:8b:47:7c:25:8c:8b:46:7e:01:76:1a:a6:
5a:3b:ff:39:d6:08:98:4b:71:f2:34:73:e9:95:a7:39:c8:05:
cc:38:27:95:be:e4:4f:be:26:d5:b8:7e:7a:0c:f8:24:0f:50:
e8:11:2a:95:74:56:a0:fc:f2:f4:9b:8c:f7:53:89:88:5b:42:
56:cf:b9:fe:a7:fd:ca:f9:67:b7:cb:df:90:a4:f7:ce:9c:38:
a7:e6:59:a4:8b:bf:72:b4:db:c7:58:95:e8:42:d8:eb:dd:85:
38:4b:0a:cc:d7:46:8e:5b:67:d5:70:2c:49:95:90:f4:ac:60:
f3:8a:5e:9d:4e:57:08:2e:31:6e:9a:c2:da:4e:6e:4d:55:29:
36:28:16:17:45:e6:9c:5c:cc:ae:69:00:28:50:15:7a:04:ca:
00:dd:a1:ca:1b:87:57:6e:95:6d:9b:45:eb:e9:5a:fd:a6:78:
f3:45:16:98:fd:fd:f4:2c:2c:14:08:dd:a1:3d:44:09:be:35:
74:1e:91:b0:2a:9a:f4:39:9d:cc:96:63:ae:0a:93:22:17:a5:
35:2e:56:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:07:17 2026 by rpki-client