Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/0Fa4NosSQ9XBETZsn53WYqLTLG0.roa
File: 0Fa4NosSQ9XBETZsn53WYqLTLG0.roa (raw, json)
Hash identifier: bZvxQMF4cZzLAvXHTOfV8mqjSjZruHiAkGmiF6OuKHg=
Subject key identifier: D0:56:B8:36:8B:12:43:D5:C1:11:36:6C:9F:9D:D6:62:A2:D3:2C:6D
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019F4377102D5586EEDF997CDB94E2F2D8FD
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/0Fa4NosSQ9XBETZsn53WYqLTLG0.roa
Signing time: Wed 08 Jul 2026 20:41:44 +0000
ROA not before: Wed 08 Jul 2026 20:41:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219255
IP address blocks: 2a06:9801:7f0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:43:77:10:2d:55:86:ee:df:99:7c:db:94:e2:f2:d8:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jul 8 20:41:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d056b8368b1243d5c111366c9f9dd662a2d32c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:21:94:72:da:fe:4f:6f:55:30:82:e8:b4:d5:
f3:37:10:6c:e1:e1:b9:b7:94:4a:c8:22:63:9d:b9:
1a:58:b6:a2:81:16:5a:b8:df:46:9d:8f:29:86:08:
21:86:ee:ae:cb:b4:11:cb:d9:d9:5d:6f:d9:19:ad:
6a:2d:fd:04:4d:ac:83:18:95:ad:35:6e:2c:41:94:
84:1b:1d:dc:2e:55:2b:76:9d:91:5c:95:54:44:35:
df:6a:76:d9:a7:77:16:22:f9:a1:2e:ad:0d:18:d8:
da:78:c9:7c:48:79:40:f2:40:8f:4b:39:b2:be:19:
03:9c:07:32:a6:bd:af:9a:33:b6:98:b2:45:fe:74:
50:3e:ca:db:45:35:1a:b9:ab:e7:59:0c:48:8d:4d:
c8:4a:ae:39:f4:a8:67:08:45:05:a3:06:d4:2a:0c:
cc:b0:0f:ca:b2:e3:07:9c:99:bc:ac:13:3e:6b:e7:
60:12:64:75:62:1b:49:c5:80:d9:2d:6e:9c:d1:46:
35:ec:75:73:98:46:32:e8:ae:d9:0e:48:f5:66:4f:
a9:96:13:9f:92:19:fd:7a:9f:4b:3c:bf:ad:cb:9a:
03:b3:ec:a6:cf:3a:9d:6a:27:a5:86:d2:3e:a9:57:
18:d2:69:c9:8e:19:c0:55:68:e5:ee:3f:5a:0f:a0:
4e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:56:B8:36:8B:12:43:D5:C1:11:36:6C:9F:9D:D6:62:A2:D3:2C:6D
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/0Fa4NosSQ9XBETZsn53WYqLTLG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:7f0::/48
Signature Algorithm: sha256WithRSAEncryption
3b:8e:4c:af:64:79:ce:1d:a9:29:31:76:88:e1:99:a8:b2:80:
79:0b:e7:db:84:97:c2:09:3c:f2:b8:d9:10:e9:5d:c7:a9:2c:
4d:49:35:1d:c2:6a:17:21:17:a9:1a:c9:30:97:1e:f7:11:00:
be:cd:8b:85:0a:5d:fa:fd:e4:8d:18:4b:51:ea:96:c0:ca:64:
7b:73:50:c4:75:01:aa:ba:cc:fb:c1:22:25:d4:88:1d:f7:f4:
56:e3:08:67:82:9e:3b:a5:bb:f7:90:51:d1:df:78:99:68:4b:
97:2b:dc:5f:ea:31:74:db:f9:9f:77:9e:b4:d8:1e:14:cb:e0:
fb:1d:78:ad:28:d3:e2:70:0c:2c:d1:4c:db:f1:00:97:f0:1b:
91:2e:7f:c4:a0:8e:ac:c5:00:66:8a:81:45:f0:ab:17:70:01:
b5:14:4f:63:ff:22:b5:94:7d:56:26:69:2c:a3:9d:51:68:b4:
0c:e9:11:54:4a:df:53:71:fa:19:15:4f:19:cf:9c:61:fc:75:
b1:8c:aa:0c:2f:84:54:33:44:c1:8f:a5:a7:d8:ab:0d:b5:b6:
c4:5c:f4:96:f7:ab:26:b6:06:af:b9:73:0f:35:56:02:e0:b4:
03:f7:8e:6e:f7:d4:b7:61:72:de:57:6a:46:87:ca:57:86:3c:
1f:b3:11:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:26:55 2026 by rpki-client