Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/yTSVahWaE1ECius6--vEleBY6zE.roa
File: yTSVahWaE1ECius6--vEleBY6zE.roa (raw, json)
Hash identifier: JRTbC2xcp6XvdvfHVa9v+C7Htd2MXSCMtZZs7v4crcM=
Subject key identifier: C9:34:95:6A:15:9A:13:51:02:8A:EB:3A:FB:EB:C4:95:E0:58:EB:31
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A0AF102E7188234F19A9C39E69288035D9
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/yTSVahWaE1ECius6--vEleBY6zE.roa
Signing time: Thu 17 Sep 2026 11:11:08 +0000
ROA not before: Thu 17 Sep 2026 11:11:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198756
IP address blocks: 2a06:9801:27a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:10:2e:71:88:23:4f:19:a9:c3:9e:69:28:80:35:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Sep 17 11:11:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c934956a159a1351028aeb3afbebc495e058eb31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:39:f0:58:1e:12:66:dc:e3:a5:31:95:2f:4a:
8e:ac:37:7b:3f:bb:d1:01:0e:db:76:15:e5:94:de:
14:cd:da:e5:94:aa:db:c1:e2:79:aa:36:2f:a4:33:
8b:66:5c:c6:f9:e3:c7:37:8e:77:ce:9f:4a:e5:1f:
25:cd:d4:7f:51:a1:65:f7:df:7a:d5:83:68:60:1f:
ea:b5:dc:24:39:69:64:e1:46:27:53:9a:2a:a2:59:
2f:c9:e3:fe:03:e3:e0:19:91:b0:ff:d8:2f:d4:fa:
1a:7b:5c:50:50:2c:e1:50:78:e7:41:e6:31:b3:a5:
e7:fb:97:58:f1:a9:d2:76:6e:25:8e:36:96:c1:1c:
8a:88:c1:5f:3b:03:00:c7:0e:57:8b:c5:2c:cd:84:
9b:dc:48:4f:68:0b:01:71:64:9d:7b:71:bf:2f:a4:
0b:b4:2f:be:a3:8d:5a:34:8e:d8:1b:70:ea:d6:d9:
ad:e2:5b:d4:34:f9:1a:d8:0f:ed:cc:e3:43:9a:83:
fd:b9:9e:0b:d6:7e:b4:fb:f4:00:15:fa:6c:27:92:
36:0d:0c:b8:94:d5:63:59:ca:8e:49:ca:d1:11:59:
52:16:5b:f0:28:25:ed:1d:7b:79:43:21:11:1c:84:
ed:41:e2:ff:36:15:ff:c7:90:90:c1:07:8f:bf:de:
3b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:34:95:6A:15:9A:13:51:02:8A:EB:3A:FB:EB:C4:95:E0:58:EB:31
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/yTSVahWaE1ECius6--vEleBY6zE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:27a::/48
Signature Algorithm: sha256WithRSAEncryption
c0:9e:86:97:51:99:12:33:46:62:ea:90:b6:c9:41:cc:fb:f2:
4e:8a:35:e8:2f:90:46:4d:8d:c2:c3:62:df:68:da:8a:52:db:
ff:fe:70:ff:f8:95:45:d7:31:2a:51:b1:5c:d6:d5:27:4c:8d:
65:95:2c:fb:c5:e0:ae:df:88:1b:d8:1f:9c:c7:32:80:86:98:
d3:ed:4b:06:61:0e:8c:52:92:9d:e6:af:17:13:cf:4c:dc:f1:
b2:a0:fb:c0:3f:10:72:e6:db:f7:b2:e3:9a:ca:a7:76:5f:49:
3b:b4:04:f8:72:9d:0f:72:8f:69:4a:5f:a3:23:02:37:ee:35:
1e:3b:22:2f:5f:e5:1d:61:fb:ab:de:46:25:71:9a:da:7b:24:
b0:0c:05:2d:b5:a1:52:81:8f:c3:fc:0f:2f:b1:1d:b2:f0:08:
36:21:70:a9:39:ba:7b:cd:59:7c:b9:e6:a6:7d:44:58:6d:d3:
26:67:cc:08:10:22:bf:f2:3d:93:87:b2:0c:9d:59:c8:f2:1b:
18:7c:c6:02:ab:47:da:6e:75:23:8a:fa:50:92:c3:15:a5:3f:
f7:e5:79:00:c2:9c:ca:58:20:52:e4:8d:01:a5:2b:da:d9:24:
e3:70:2a:f8:36:0c:50:9c:0d:91:20:83:51:02:ba:f6:63:df:
29:a4:9e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:01:06 2026 by rpki-client