Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/8MBS54siSi1an5OTJ_PLZ72QgQg.roa
File: 8MBS54siSi1an5OTJ_PLZ72QgQg.roa (raw, json)
Hash identifier: 7557VSu7XQHNMRXzbyxpVoygyOjwHTQuPb17gW1cBR0=
Subject key identifier: F0:C0:52:E7:8B:22:4A:2D:5A:9F:93:93:27:F3:CB:67:BD:90:81:08
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A1AC4A2B600E7E281E4BB6F897835585BD
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/8MBS54siSi1an5OTJ_PLZ72QgQg.roa
Signing time: Thu 05 Nov 2026 15:18:24 +0000
ROA not before: Thu 05 Nov 2026 15:18:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 403120
IP address blocks: 2a06:9801:159c::/48 maxlen: 48
2a06:9801:15ce::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 19:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ac:4a:2b:60:0e:7e:28:1e:4b:b6:f8:97:83:55:85:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Nov 5 15:18:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f0c052e78b224a2d5a9f939327f3cb67bd908108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:eb:bb:40:7b:1a:12:b5:92:da:75:e4:0a:28:
d7:87:23:da:8e:66:6b:ae:f7:3d:a7:2d:7b:c3:9b:
53:7d:ec:32:85:3a:f5:e9:a2:5f:de:ff:78:8d:55:
bc:bf:fd:97:b1:a2:9f:26:5e:6c:0b:75:4e:45:e9:
9d:be:74:77:ab:e2:f6:e1:17:08:bd:aa:60:38:06:
04:e2:c8:3d:2a:d6:09:9d:f3:21:81:6d:bb:f5:d6:
44:d2:b9:a1:5b:26:f4:38:d2:d9:1c:70:13:01:9c:
5c:d2:bd:88:fa:47:ae:7a:d3:15:97:21:16:7b:97:
ba:02:83:8c:52:6c:1f:3e:38:33:fb:95:2e:4f:dc:
b0:d5:0b:06:50:49:ed:a3:fa:51:aa:24:8d:4b:95:
2b:88:39:31:4e:9b:80:11:dc:a6:fc:cb:7b:7f:5e:
1a:75:9c:32:f4:1f:4b:ea:f0:92:da:ef:48:5a:8a:
ea:c5:b8:c8:3a:a4:bc:fb:a1:7c:b7:6f:fd:0e:70:
d9:c6:0b:2b:88:21:c9:72:b8:6c:8e:10:04:5e:cb:
42:ef:02:e5:9c:9a:c0:e8:fd:54:54:4d:22:b4:df:
ec:b5:1c:bc:d9:21:65:40:8c:91:a0:a3:76:94:9a:
49:6f:5c:e1:2c:ec:7f:e2:57:5f:eb:20:15:fd:66:
82:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C0:52:E7:8B:22:4A:2D:5A:9F:93:93:27:F3:CB:67:BD:90:81:08
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/8MBS54siSi1an5OTJ_PLZ72QgQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:159c::/48
2a06:9801:15ce::/48
Signature Algorithm: sha256WithRSAEncryption
af:5c:44:df:5e:5f:28:f6:b2:ee:8d:42:8e:e5:ce:e1:5f:e1:
73:45:70:b3:93:4d:71:b1:06:05:fd:fb:c1:77:6d:25:60:ef:
60:f9:ce:2c:7e:79:89:2b:2c:90:53:b5:2a:66:a0:27:19:29:
37:04:67:54:48:b1:d2:5e:79:a1:76:ac:00:f8:ba:ec:f2:06:
ad:e9:a1:dc:4c:f0:52:a3:34:79:cd:f4:14:ec:93:3e:65:bd:
2c:09:a9:0a:e3:e2:01:73:54:68:f2:6c:9b:1b:fc:c6:83:08:
77:54:d9:d3:68:1c:c6:f4:5f:22:11:bc:73:7d:d0:f9:72:0f:
f4:a9:e7:65:0c:46:08:15:fc:07:e2:ce:6a:f9:5c:fb:99:9c:
24:ce:a0:89:a9:0a:5a:74:ec:74:fb:a8:97:7a:72:a0:0d:71:
04:72:9d:36:13:ad:d3:fa:96:34:19:a8:84:70:b8:74:8b:25:
f1:f2:82:51:27:0e:ab:48:4f:55:0c:83:e8:62:62:d8:21:92:
13:99:9f:0c:c7:6a:22:11:72:8c:d1:33:40:e3:e6:ca:86:94:
92:33:94:29:0c:10:fd:9c:f9:6c:e0:53:20:98:42:8b:cb:74:
86:a5:37:58:e9:0c:ce:47:86:ed:9f:74:71:dc:66:bc:7f:f6:
5a:d9:df:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:24:31 2026 by rpki-client