Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/0s2Agfm9hvKF9pauh1-dtG5nAd4.roa
File: 0s2Agfm9hvKF9pauh1-dtG5nAd4.roa (raw, json)
Hash identifier: gXVFxPHMHyDrjomNMMlyjx8zNaSAPQTYSyEhKS41rUs=
Subject key identifier: D2:CD:80:81:F9:BD:86:F2:85:F6:96:AE:87:5F:9D:B4:6E:67:01:DE
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A18804ED4A7DD0E26765141E8DF38E1ED4
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/0s2Agfm9hvKF9pauh1-dtG5nAd4.roa
Signing time: Thu 29 Oct 2026 14:16:26 +0000
ROA not before: Thu 29 Oct 2026 14:16:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218242
IP address blocks: 2a06:9801:1598::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:88:04:ed:4a:7d:d0:e2:67:65:14:1e:8d:f3:8e:1e:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Oct 29 14:16:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d2cd8081f9bd86f285f696ae875f9db46e6701de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1a:55:f1:7a:2d:13:33:58:3c:91:f8:9e:a4:
25:e5:fc:eb:ef:76:90:64:0a:fa:3e:3e:94:ce:94:
3b:8e:a9:41:5e:58:34:28:6a:d3:06:8b:ed:7a:0d:
9b:77:5d:07:a4:44:01:33:8f:7a:1a:94:e1:04:b9:
5d:4a:15:04:85:01:90:63:2b:1e:9f:92:c3:e3:30:
86:31:94:3e:e1:04:50:b2:50:a9:53:1d:5a:80:18:
92:67:4b:19:7d:d1:76:1b:bf:37:3d:29:9c:ed:9f:
b3:81:be:e8:c1:e6:22:27:e1:a1:f3:db:a5:14:9f:
e5:7b:ab:0f:f5:af:2b:e1:be:06:72:1f:69:34:81:
f9:bb:df:b4:79:f9:29:f0:4d:bb:e6:12:09:1c:20:
6c:c4:f0:a9:16:b6:06:65:3c:43:18:5c:37:1b:c7:
2a:65:a7:f0:c6:fb:a5:28:e1:1a:2b:f9:fa:7e:1c:
dc:fb:6c:7e:74:43:b6:47:ef:e8:23:ec:af:a7:01:
dd:0d:28:dc:ae:d9:b7:d4:b2:04:e3:b0:21:e1:e0:
f9:26:9c:12:33:23:22:33:cf:02:47:43:fc:3d:ea:
98:5a:06:27:80:f4:65:70:2d:10:2b:34:53:0e:23:
37:88:ea:36:a5:36:82:dd:91:16:b5:e7:53:52:b0:
f3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:CD:80:81:F9:BD:86:F2:85:F6:96:AE:87:5F:9D:B4:6E:67:01:DE
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/0s2Agfm9hvKF9pauh1-dtG5nAd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:1598::/48
Signature Algorithm: sha256WithRSAEncryption
8d:14:21:be:74:aa:7b:3a:42:74:a6:22:4b:43:e2:74:88:09:
5d:53:6a:32:fe:b8:36:dc:d4:a6:3c:b7:0f:1a:65:e3:a0:98:
1d:32:ff:6b:a7:c0:c0:05:e7:5d:a3:01:a3:03:ae:59:0e:4e:
34:1f:d2:8e:5e:55:34:59:38:15:c1:63:50:c1:cd:b6:4e:bd:
8a:5b:a4:c7:73:34:db:d6:21:46:56:e5:52:d0:af:1f:5b:57:
6b:49:97:fd:7f:9d:79:1b:75:43:7a:97:84:e3:8b:ff:0e:c3:
94:28:18:f2:fa:35:10:89:a1:78:40:59:fc:14:5e:2d:29:dd:
30:c4:65:f6:1d:6a:1c:93:86:76:07:8c:c6:0f:64:44:ad:8b:
41:c1:0d:4c:c7:af:e5:9a:c6:3f:88:52:89:c2:7d:84:a8:00:
3f:38:d1:51:3f:73:a2:52:00:17:1b:1e:37:bf:46:4f:e1:fe:
01:3c:8e:3d:cf:39:34:04:c6:5f:65:ea:80:40:3e:e3:03:9b:
c2:b8:b8:82:af:af:72:13:ea:01:fc:69:b7:dd:ea:96:44:9c:
54:25:4c:f6:53:7a:48:b0:35:f4:22:1b:af:cb:ca:43:58:4b:
66:53:d5:af:d1:9c:65:be:87:e3:5c:87:57:6c:9f:7b:4b:62:
c6:03:28:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:48:03 2026 by rpki-client