Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/y6tElv90tbI8yNDaDH25Vzstlj8.roa
File: y6tElv90tbI8yNDaDH25Vzstlj8.roa (raw, json)
Hash identifier: 576XywIdxdVQ2X2wB2BYi18eJp5uod/IMvKMukO+gaI=
Subject key identifier: CB:AB:44:96:FF:74:B5:B2:3C:C8:D0:DA:0C:7D:B9:57:3B:2D:96:3F
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019C4F7B19EDE6530C17C42FF6063FF70016
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/y6tElv90tbI8yNDaDH25Vzstlj8.roa
Signing time: Thu 12 Feb 2026 01:33:13 +0000
ROA not before: Thu 12 Feb 2026 01:33:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204261
IP address blocks: 2a06:9801:100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4f:7b:19:ed:e6:53:0c:17:c4:2f:f6:06:3f:f7:00:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Feb 12 01:33:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cbab4496ff74b5b23cc8d0da0c7db9573b2d963f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:68:4e:fc:e0:d1:0f:b7:c2:39:d4:d6:bc:fb:
78:22:42:55:e1:c2:8d:98:44:7f:87:90:3d:49:15:
68:5f:15:5d:1b:36:88:60:91:01:88:5f:28:01:c5:
a3:3c:1d:15:16:da:ae:08:b2:9e:68:f4:49:c0:a3:
11:dd:23:fd:a5:7b:9f:5e:f7:f0:99:16:7a:64:89:
18:c3:d8:c7:6b:f2:a8:9d:8b:60:ef:86:15:5f:02:
cf:ee:68:97:d6:5f:9f:85:1c:2d:20:b9:f7:c5:bb:
bc:a3:bd:77:50:ea:45:72:af:8e:b0:f1:91:21:0a:
a6:2b:c6:59:68:c4:44:c0:19:5c:f2:9c:3c:e9:47:
cb:61:4d:7d:8a:e7:37:c1:fc:de:62:51:e0:fc:b1:
a3:8c:bb:94:06:8f:b1:ef:9e:f0:2d:0c:25:da:fd:
7c:d5:9c:91:2f:dc:8f:7b:ec:ce:b5:66:ee:6c:ef:
bb:f5:32:81:ce:ab:24:09:5c:66:50:fb:2c:22:cd:
12:5a:46:be:21:f4:7f:92:84:6c:49:57:6d:34:a6:
89:2a:3a:c0:af:45:b0:53:8d:c3:77:48:0e:85:3e:
3d:8e:e0:16:59:ee:3e:de:f9:d9:f3:8e:1e:a3:96:
0f:9c:bc:93:f3:bf:8f:95:7a:e3:e7:7f:40:ee:04:
76:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AB:44:96:FF:74:B5:B2:3C:C8:D0:DA:0C:7D:B9:57:3B:2D:96:3F
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/y6tElv90tbI8yNDaDH25Vzstlj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:100::/40
Signature Algorithm: sha256WithRSAEncryption
0d:db:4c:85:c3:ec:d0:6e:70:f2:04:f5:6a:9f:ff:d7:cc:db:
65:c9:c7:01:ff:f8:9c:d4:97:d1:e9:dd:b2:62:b9:a8:c4:c2:
e9:1f:e6:40:d4:23:1c:a7:b0:29:c2:1a:4f:42:36:1f:f7:a9:
83:57:bb:45:ef:e1:e3:3e:99:6b:d7:70:4a:f6:f6:de:6f:b5:
18:ad:3c:95:76:59:c4:e3:bc:0a:b9:1b:36:c2:b4:19:2a:67:
43:23:d6:fb:c7:d0:a0:1b:d2:a7:a1:02:24:55:e5:84:32:4e:
8d:4f:43:ef:23:55:a8:59:4d:e4:41:b7:68:d3:e2:db:af:d9:
58:09:e9:05:ce:5c:ab:63:b2:64:60:4a:2c:6c:03:f4:02:ee:
30:d6:13:02:55:b8:f0:e3:d4:ce:7d:fc:97:ed:c4:d2:96:0c:
d1:2f:50:87:a4:75:cc:49:c8:a7:f1:5a:48:30:ed:fd:24:ec:
e6:49:a4:52:16:5e:c1:1a:78:33:cf:87:8a:df:4c:10:fd:ae:
39:32:d9:83:7b:dc:2a:9d:e2:ec:7c:a9:42:cd:0e:99:c4:3b:
42:be:3c:99:95:b2:69:04:3d:3a:44:f8:a0:2c:78:f7:a6:7e:
42:d8:b3:e4:ba:25:09:15:cd:f6:f3:9e:a1:2b:8f:ac:ce:52:
26:29:c7:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:53:20 2026 by rpki-client