Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/869x14cEMxF2RRk-I-CWhS-pvCI.roa
File: 869x14cEMxF2RRk-I-CWhS-pvCI.roa (raw, json)
Hash identifier: J8mJeSLwIv3xAyIEurcXE/LsyQonnYgi7vnpUIUyEnU=
Subject key identifier: F3:AF:71:D7:87:04:33:11:76:45:19:3E:23:E0:96:85:2F:A9:BC:22
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019F8ECB493A4297E75E75E38AC273BCB7A1
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/869x14cEMxF2RRk-I-CWhS-pvCI.roa
Signing time: Thu 23 Jul 2026 11:45:14 +0000
ROA not before: Thu 23 Jul 2026 11:45:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219404
IP address blocks: 2a06:9801:7c2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:cb:49:3a:42:97:e7:5e:75:e3:8a:c2:73:bc:b7:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jul 23 11:45:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f3af71d7870433117645193e23e096852fa9bc22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:03:c8:88:b4:0b:c4:2b:2e:e3:74:d7:4f:c2:
3b:c7:39:0c:0a:5f:50:6d:e1:04:24:d0:1b:54:e6:
7f:0d:39:93:83:7a:fe:9b:25:e2:68:ff:0c:ab:08:
cb:d9:9a:aa:13:c4:34:d4:31:3b:e2:61:c3:76:8a:
63:16:20:25:65:91:37:67:5b:5e:55:aa:02:6c:0f:
61:33:a3:73:55:a8:d4:76:d3:70:6b:63:6d:f6:bc:
5a:a3:25:74:1e:35:3d:a4:a7:20:b3:b8:40:0e:69:
0a:56:b0:db:a1:89:1a:dc:32:a4:c8:af:d5:b1:4f:
f0:e0:62:c2:aa:39:38:72:6c:43:05:06:6a:e0:a8:
7f:14:d1:f0:c0:e6:a1:14:13:6d:92:78:5f:1c:d6:
07:1b:f3:81:b1:39:83:9e:26:94:69:8b:bd:bf:b1:
93:f8:c3:7a:2c:9f:4d:a2:10:22:0f:90:03:9e:50:
a6:59:85:c7:22:17:59:97:b7:32:a7:8a:83:6a:e1:
36:33:4e:6b:fd:c2:a8:6a:07:0d:d8:b5:79:3e:cb:
8b:89:da:31:19:d1:95:c5:8e:f5:04:b0:4c:a2:f1:
53:42:dd:b5:6c:a7:20:2e:8a:54:78:ad:23:43:17:
cc:96:35:48:72:71:d3:db:d4:ee:78:5e:3f:a1:d7:
90:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AF:71:D7:87:04:33:11:76:45:19:3E:23:E0:96:85:2F:A9:BC:22
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/869x14cEMxF2RRk-I-CWhS-pvCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:7c2::/48
Signature Algorithm: sha256WithRSAEncryption
49:e7:1e:c1:bb:c7:f8:70:68:c7:59:57:6c:ca:06:3b:fb:da:
0e:1a:6b:4b:74:35:80:35:71:cb:ea:cd:d9:85:d1:e8:ca:57:
d9:69:dc:0e:0a:97:00:67:4f:d6:4d:80:93:98:77:f7:02:a1:
07:bd:f6:5a:16:f9:33:c8:ce:9e:17:ec:ab:11:e7:e6:bd:bc:
82:81:30:c1:8a:41:bf:1c:6d:cf:47:b0:36:04:52:db:cb:38:
52:53:03:56:35:c3:f6:fe:c6:82:2b:fb:05:2e:4f:87:e5:ba:
d5:fd:e6:4a:d3:ae:4f:17:8c:02:3a:1f:34:b0:0c:9a:0e:df:
4f:68:e0:e8:05:e6:b6:ac:10:7d:34:09:2b:57:2e:3f:60:aa:
49:c5:c1:70:38:b3:bf:9b:e1:8d:4c:1f:42:ce:82:4d:42:84:
6c:58:a9:9a:89:a9:0c:0c:ce:96:ba:87:09:a1:b5:19:e9:9f:
92:28:9c:8e:97:58:cd:77:d4:db:06:02:10:93:2e:fd:83:eb:
69:9a:eb:54:18:e2:b0:f0:a7:5c:79:a5:da:28:87:7a:35:13:
45:e4:d2:5c:03:65:33:f4:b2:dc:02:66:f2:7f:da:3e:88:bb:
ae:b2:bd:0e:a9:58:e8:23:02:c4:f2:63:a5:67:29:7e:f7:c5:
a7:7e:d1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:31:53 2026 by rpki-client