Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/vyeVXrLPVXu4tGzezp7G5xKoDGs.roa
File: vyeVXrLPVXu4tGzezp7G5xKoDGs.roa (raw, json)
Hash identifier: yKM95w2sSmel20pa7Sf9ualAeYcDSx0JYcRPA5ZwL+o=
Subject key identifier: BF:27:95:5E:B2:CF:55:7B:B8:B4:6C:DE:CE:9E:C6:E7:12:A8:0C:6B
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019D74E901A831256F9CEDBBD6ECAA3E0853
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/vyeVXrLPVXu4tGzezp7G5xKoDGs.roa
Signing time: Fri 10 Apr 2026 01:02:00 +0000
ROA not before: Fri 10 Apr 2026 01:02:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199257
IP address blocks: 2a06:9801:26d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:74:e9:01:a8:31:25:6f:9c:ed:bb:d6:ec:aa:3e:08:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Apr 10 01:02:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf27955eb2cf557bb8b46cdece9ec6e712a80c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:45:19:15:6a:d0:c4:9b:ad:da:2a:f3:b0:cb:
6e:a6:cb:b6:84:2c:0b:34:73:8f:cf:3b:92:80:d2:
95:f6:28:cc:fe:a0:85:e8:74:c2:b2:58:d8:19:32:
78:a4:5a:7b:47:22:10:50:bd:c7:8d:17:c9:ec:1a:
17:73:39:ad:c5:25:f2:b0:65:74:a0:93:cf:55:7f:
c3:35:0c:6b:e3:ff:6c:1d:4a:b7:17:80:23:87:3e:
5a:ba:42:a4:72:e6:3b:9e:e6:cc:58:ce:3e:4a:db:
cf:f2:9d:16:79:78:2f:33:a0:78:29:37:51:e2:75:
a8:ec:a0:1a:2d:d8:c6:11:aa:7e:0d:4e:00:7f:3e:
4a:82:29:01:b6:0c:ee:2b:ff:4e:ad:dd:a7:33:e3:
3d:40:45:5d:c3:65:13:e8:81:b1:d7:b2:87:6c:2e:
27:b0:2f:db:ec:42:a7:24:15:24:a4:72:fb:1a:f2:
04:7d:92:fe:47:4c:a0:6c:8f:08:3a:35:a2:ed:29:
64:cf:48:e4:5c:dc:c2:a0:38:96:9d:ba:2e:66:be:
fb:8f:e4:5b:94:8d:53:32:1f:e6:9e:64:05:91:10:
32:c6:e7:b9:10:82:9d:3d:bd:ab:d3:82:c7:08:55:
af:4a:95:ea:cc:c4:93:9f:3d:25:d5:1a:a8:36:8e:
26:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:27:95:5E:B2:CF:55:7B:B8:B4:6C:DE:CE:9E:C6:E7:12:A8:0C:6B
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/vyeVXrLPVXu4tGzezp7G5xKoDGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:26d::/48
Signature Algorithm: sha256WithRSAEncryption
16:b4:d5:4d:1f:c4:17:4c:8a:73:d3:96:29:ac:5f:35:c8:e3:
99:9d:90:78:25:53:73:45:c4:35:38:e9:0c:0f:45:5a:61:7b:
ac:ad:4a:da:90:de:fb:5c:0b:3b:a1:c4:f1:d4:d9:6a:5c:fe:
40:c5:31:a2:f7:3c:b5:1a:16:56:59:89:a9:8f:fa:6b:1d:bf:
78:8d:a1:3b:dc:3b:0a:d9:66:57:88:60:7b:20:01:5c:ad:29:
f4:15:d9:5c:1e:dd:df:f9:65:2e:9a:4e:a3:46:39:73:a4:f4:
ab:c1:b6:97:49:31:71:d9:94:0f:15:35:61:f0:79:79:c8:84:
69:b8:60:88:26:62:13:01:b0:3d:7e:65:37:d3:50:e7:9d:e8:
2b:e2:6e:ba:d7:91:31:d8:52:d0:a7:9c:40:85:2c:2c:b0:0b:
9b:d0:f5:9c:83:52:b5:d5:d1:4f:0c:d8:0a:d5:35:dc:8e:23:
38:ea:17:0a:6f:7e:53:64:86:7f:a4:de:99:65:35:eb:37:fa:
03:5f:88:21:13:51:18:40:5c:71:f8:18:e1:d5:12:47:4e:aa:
54:f7:05:66:30:d1:df:ab:4c:e1:f7:0d:18:c3:36:fc:4e:b7:
6a:76:aa:19:4e:93:18:55:56:44:8c:fe:5b:4f:0e:e8:e8:6c:
ef:74:a4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:28:44 2026 by rpki-client