Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/5tSHnZBcXwKiiag0vUY-EGEH0Ps.roa
File: 5tSHnZBcXwKiiag0vUY-EGEH0Ps.roa (raw, json)
Hash identifier: CATE1iumLNtOjIQZvjFbFxr/J5EFCXRdUnpSdvcM0MM=
Subject key identifier: E6:D4:87:9D:90:5C:5F:02:A2:89:A8:34:BD:46:3E:10:61:07:D0:FB
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A19C5819042B0CFDDED2D68035E407A37E
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/5tSHnZBcXwKiiag0vUY-EGEH0Ps.roa
Signing time: Mon 02 Nov 2026 12:59:41 +0000
ROA not before: Mon 02 Nov 2026 12:59:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213799
IP address blocks: 2a06:9801:15ca::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9c:58:19:04:2b:0c:fd:de:d2:d6:80:35:e4:07:a3:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Nov 2 12:59:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e6d4879d905c5f02a289a834bd463e106107d0fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:83:2d:48:bb:2a:10:fb:42:e0:a5:bf:bd:23:
2e:d0:68:5c:b2:09:48:6a:eb:f6:be:54:6c:01:2b:
0a:38:b4:31:10:4e:37:94:8d:58:59:c8:14:ce:68:
8c:59:cb:6d:b4:cf:81:31:65:e8:76:f9:db:26:ec:
5b:64:3a:a0:30:f3:02:d2:f9:cf:44:cf:ea:49:1b:
fd:69:6c:3c:e4:ff:30:ff:22:be:44:46:ad:dd:87:
c0:5d:94:12:0b:8f:1a:b2:1c:28:1f:b6:78:ab:80:
fe:d9:da:1f:64:d9:a7:40:70:bc:18:5d:d3:1d:79:
56:4e:c6:9f:32:72:41:3d:d7:56:7b:3f:eb:bf:49:
fd:7b:bf:ca:fe:a0:a3:5a:38:de:a3:eb:45:26:9f:
b8:9d:89:bf:7a:c7:28:37:76:03:98:ee:5f:b5:91:
de:37:1a:46:96:34:95:a6:fa:e4:7c:dc:f7:08:00:
45:6e:d4:a3:97:c0:ae:a6:79:db:aa:b4:a6:54:34:
ca:a6:71:21:3e:22:10:87:7b:85:3e:ba:7d:74:fc:
fd:3e:ae:ea:38:45:77:da:fb:4d:87:67:f2:f3:ad:
76:ed:9f:c0:09:84:11:ea:30:52:fa:14:9f:9a:11:
05:74:d8:7d:7f:e1:4f:99:fe:5f:a2:5a:1e:82:79:
89:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D4:87:9D:90:5C:5F:02:A2:89:A8:34:BD:46:3E:10:61:07:D0:FB
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/5tSHnZBcXwKiiag0vUY-EGEH0Ps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:15ca::/48
Signature Algorithm: sha256WithRSAEncryption
01:1b:98:50:c6:c5:4c:79:66:b1:15:54:5b:11:cf:47:34:75:
31:6f:3b:5b:ac:6a:1b:0c:eb:b1:f1:4d:da:25:95:44:ae:6b:
22:fb:3a:c6:75:eb:d0:83:97:29:72:ac:eb:84:f0:fc:19:56:
d6:99:30:46:28:2f:4e:e5:e8:98:03:10:12:aa:e9:dd:e6:8e:
b2:2a:a1:c1:b8:bc:60:83:c2:89:76:b4:6d:40:eb:a6:21:92:
d8:98:5c:1b:79:3f:d4:d9:91:8b:08:0a:86:3d:0c:21:d0:e2:
7c:aa:da:77:90:a7:f6:56:f8:5d:e1:6e:93:ca:32:99:22:3e:
e2:c7:17:2f:cf:77:a2:7c:e7:81:09:77:c6:95:22:b1:9c:b7:
38:52:0f:a1:21:b0:4a:fd:01:1d:d4:93:bf:3d:03:28:30:49:
e9:2c:01:75:d3:55:57:3c:79:2a:d5:60:5d:94:28:4d:68:1f:
cf:38:60:fb:5b:14:88:9c:70:8b:51:5e:05:a1:1b:2a:e4:86:
30:a7:42:cd:2d:48:ec:bb:c8:da:be:6a:fc:41:9c:f0:d1:81:
e9:9e:b1:29:a9:da:c5:1d:f2:08:1e:7d:58:ca:11:b1:df:e5:
d9:d8:92:5e:19:70:ea:6f:09:8c:06:7e:b8:e2:03:d2:6b:94:
a6:aa:55:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:26:04 2026 by rpki-client