Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/507vCIDlwxACeQywQIricjcdjCM.roa
File: 507vCIDlwxACeQywQIricjcdjCM.roa (raw, json)
Hash identifier: ajVRklECUsSpeoIl2tE8LKsUEPna6TuGZlaLJmYOq6w=
Subject key identifier: E7:4E:EF:08:80:E5:C3:10:02:79:0C:B0:40:8A:E2:72:37:1D:8C:23
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019F80C580A3E1FC692BD7E9B598F961F536
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/507vCIDlwxACeQywQIricjcdjCM.roa
Signing time: Mon 20 Jul 2026 18:24:14 +0000
ROA not before: Mon 20 Jul 2026 18:24:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198624
IP address blocks: 2a06:9801:26e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:80:c5:80:a3:e1:fc:69:2b:d7:e9:b5:98:f9:61:f5:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jul 20 18:24:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e74eef0880e5c31002790cb0408ae272371d8c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d7:e7:5c:0e:21:64:b0:14:fd:69:0e:8f:68:
5c:cf:0a:02:22:09:6d:82:97:d3:c9:01:43:a9:46:
72:4b:44:ae:43:69:49:0f:27:86:4c:34:95:2c:f3:
17:ca:17:b3:97:0c:3e:27:4b:33:d1:ba:91:a4:79:
9c:31:6b:ce:51:1e:58:09:7e:2c:74:99:43:71:66:
cd:6b:fe:82:72:ea:7f:3f:01:34:05:e4:08:ad:2e:
0e:ea:31:e0:72:79:df:d6:90:38:20:9c:c9:0f:68:
94:3c:1a:23:6d:ae:f3:54:fe:31:ab:34:3f:b6:33:
7a:7d:42:41:7b:9f:be:9c:be:5d:bd:d9:77:44:46:
2c:70:35:a7:af:05:8e:e7:da:80:dc:cb:71:18:94:
27:b5:00:e3:fe:ca:1b:b8:07:e4:f3:b6:f0:0c:5a:
53:2c:cb:b4:a5:24:43:5c:05:46:5b:df:3f:93:1d:
a8:6b:0d:39:31:d3:b4:52:81:2e:83:16:1e:d3:30:
26:b8:25:3d:34:cf:5d:f5:09:8b:7a:54:6f:03:04:
9b:87:f4:92:e9:ff:26:d6:20:55:df:6a:5c:fc:aa:
53:70:86:bd:78:9d:4c:e6:dc:48:bc:96:f8:39:66:
a8:57:f0:de:11:34:48:7e:88:dd:46:e6:48:4d:d2:
05:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:4E:EF:08:80:E5:C3:10:02:79:0C:B0:40:8A:E2:72:37:1D:8C:23
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/507vCIDlwxACeQywQIricjcdjCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:26e::/48
Signature Algorithm: sha256WithRSAEncryption
c6:77:5b:a0:2c:de:6c:e3:12:cd:bf:f8:3c:4b:7d:b3:6a:6d:
dd:0c:3b:7d:da:0e:0b:7b:5c:84:7b:5f:26:0c:60:ff:63:f6:
fd:57:dd:3d:78:36:c9:64:42:c8:bf:5f:48:bc:f9:a5:9b:0c:
3e:97:76:f4:b6:ab:25:03:42:e3:78:86:48:af:7d:2e:e2:bd:
3a:a3:47:de:ed:71:bb:81:9e:c4:cb:51:d3:23:6c:c7:9c:66:
8e:88:07:ca:8d:cc:81:18:64:df:a4:57:43:a5:dc:cd:b8:41:
8f:57:40:5f:66:c8:52:95:67:b6:04:85:12:a6:79:41:96:31:
51:0a:fe:86:49:f8:5c:78:70:09:75:8d:29:3f:dd:de:96:77:
2c:19:26:87:e8:d8:4c:4f:48:e2:0b:8f:aa:5e:b4:10:c9:c5:
53:83:da:ac:33:23:f8:1e:bb:66:a6:18:91:b9:07:dc:1e:91:
5d:3b:ec:9a:2a:ab:4f:ff:7f:13:8c:0e:6e:f6:c5:fd:a8:53:
65:1a:2f:fc:93:79:ef:a4:f1:ef:3a:7c:d7:74:21:66:3f:e4:
f5:f3:6c:5d:86:9e:9c:11:b5:d1:82:d6:51:44:39:00:4a:cc:
05:4c:7f:3a:ad:72:10:3d:67:c2:36:98:44:1c:ff:49:13:16:
21:f0:ee:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:17:43 2026 by rpki-client