Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/6RhgiRTLsTQ0VMaSzP5LdPgT-ew.roa
File: 6RhgiRTLsTQ0VMaSzP5LdPgT-ew.roa (raw, json)
Hash identifier: imd2sLEDFe/cnFesUzD/NyoYNFtY+OAO8C5pAoiGDhY=
Subject key identifier: E9:18:60:89:14:CB:B1:34:34:54:C6:92:CC:FE:4B:74:F8:13:F9:EC
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019DF5C972E2BE1BD1533F9865F1EECFFBE1
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/6RhgiRTLsTQ0VMaSzP5LdPgT-ew.roa
Signing time: Tue 05 May 2026 01:38:33 +0000
ROA not before: Tue 05 May 2026 01:38:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198184
IP address blocks: 2a06:9801:2b3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:34:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f5:c9:72:e2:be:1b:d1:53:3f:98:65:f1:ee:cf:fb:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: May 5 01:38:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e918608914cbb1343454c692ccfe4b74f813f9ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:11:a2:31:20:de:c2:7a:17:f8:5d:3a:e5:9e:
9e:4d:55:92:92:d9:2a:df:8c:2f:89:21:e1:7a:bd:
70:7d:b6:af:16:26:8c:1f:36:82:51:b3:35:d6:3e:
1c:53:51:00:70:38:e3:57:a8:ad:8c:fc:94:5d:df:
b7:00:ac:5d:62:37:74:5b:54:0a:e7:68:35:52:c3:
07:b8:64:8c:37:7d:55:7c:8c:7a:e8:5c:3d:99:50:
f0:80:5b:6c:a6:04:26:90:21:9b:e5:52:d9:2f:a2:
aa:ac:36:ca:63:f0:aa:a6:69:ec:26:34:cf:68:34:
15:07:51:ce:27:55:2e:5c:d1:6f:39:89:85:d8:23:
7b:ea:ad:8b:2e:6e:a6:50:f9:a6:e3:b9:8a:b8:5c:
ae:94:7a:d7:dd:f2:58:1c:c8:d7:1c:66:4d:4e:16:
fd:e8:2a:39:de:4f:a5:af:d3:4d:25:0e:41:d6:4a:
a3:ce:15:cd:0e:55:f1:37:90:29:5d:db:c0:d9:89:
31:02:13:1f:06:de:1a:4d:d3:5d:9f:11:1d:78:e2:
38:e9:f9:39:25:c9:7a:13:0f:51:9c:2a:36:3d:9e:
20:65:e9:ae:84:a9:d8:cd:ef:85:b9:e2:94:4b:0a:
2c:71:97:73:1a:e9:6b:9d:ce:3d:38:02:8f:e1:9e:
d9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:18:60:89:14:CB:B1:34:34:54:C6:92:CC:FE:4B:74:F8:13:F9:EC
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/6RhgiRTLsTQ0VMaSzP5LdPgT-ew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:2b3::/48
Signature Algorithm: sha256WithRSAEncryption
5b:ad:02:94:97:3b:23:fe:00:02:8f:bf:67:ed:05:24:c6:fe:
44:da:f0:c1:43:54:b4:60:24:7b:42:07:6c:50:2e:25:7a:6d:
40:60:f7:f5:43:60:0d:4f:8f:db:f7:4b:54:9b:d0:15:94:3d:
58:ee:94:75:1a:04:a0:e2:39:2d:03:4b:6c:fb:4c:b8:96:4b:
2a:0a:29:0e:78:d4:bb:bc:38:b4:bf:9f:ff:e9:a1:70:77:62:
14:54:e4:f5:a3:c7:b2:66:c3:9f:cb:16:65:f1:23:6d:03:32:
40:4f:0a:86:68:9e:c7:32:e8:0b:3d:e8:6d:91:05:40:35:b5:
f3:45:8f:21:ab:95:00:9d:18:e7:8e:4e:e6:14:e7:d1:93:5a:
9d:37:17:54:a4:f5:ea:35:92:e0:98:7a:53:65:45:0f:fa:21:
4c:7e:9d:0b:49:eb:69:7d:19:a8:35:9e:c3:af:b7:1d:dc:d9:
f2:12:9d:f7:9d:6d:9e:3f:bb:c7:67:fe:ed:18:c7:86:27:12:
5d:57:e3:43:10:e9:2c:e5:62:0c:18:57:ad:12:7a:33:3a:42:
ca:ae:9f:d5:82:e1:2d:7c:d8:50:71:6d:87:90:ae:2a:8a:34:
9a:27:8d:89:a9:7a:90:b7:b4:a5:4d:76:7b:6c:f0:50:ff:4f:
83:60:dd:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:55:38 2026 by rpki-client