Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/8Tn71Voa3ViYXquyertApy1mzSM.roa
File: 8Tn71Voa3ViYXquyertApy1mzSM.roa (raw, json)
Hash identifier: HyvppJ7gfqAFRNcCthubnWmGP84281S7EC1SMRKK2rs=
Subject key identifier: F1:39:FB:D5:5A:1A:DD:58:98:5E:AB:B2:7A:BB:40:A7:2D:66:CD:23
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019CF92D1F1AD7B6ABA7189BE13F86355605
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/8Tn71Voa3ViYXquyertApy1mzSM.roa
Signing time: Tue 17 Mar 2026 00:23:29 +0000
ROA not before: Tue 17 Mar 2026 00:23:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200332
IP address blocks: 2a06:9801:8d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f9:2d:1f:1a:d7:b6:ab:a7:18:9b:e1:3f:86:35:56:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Mar 17 00:23:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f139fbd55a1add58985eabb27abb40a72d66cd23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:42:cc:3c:41:f6:10:ba:66:73:40:02:55:e0:
61:e6:b9:0b:95:4e:ba:42:09:9b:01:5c:e2:f7:f7:
8b:32:1b:3f:d6:31:06:e8:b1:d0:c1:20:2a:57:ed:
95:38:e9:ee:f7:04:ac:04:ad:9b:d0:61:48:b1:11:
15:2c:04:d3:a8:32:05:05:e5:e6:51:be:33:3f:aa:
7a:0a:3d:58:e5:db:f5:33:a0:d4:f5:0e:96:3a:fb:
56:89:a8:8b:51:91:30:ee:c1:be:6b:83:1e:6b:03:
d9:45:8d:44:0b:02:0a:71:07:23:7a:0b:7c:9b:e4:
6e:4d:2b:61:ee:c7:06:61:48:c7:73:89:f5:7d:7a:
dd:f2:19:37:1e:e9:a0:28:86:d9:4f:19:8d:c3:87:
40:51:d2:e3:13:42:f3:b0:c4:bd:c9:11:be:94:f7:
01:93:b3:a4:97:a6:42:b8:41:5e:60:b6:49:64:91:
9b:61:ef:57:dd:8e:48:a9:c6:05:0e:0e:a6:0b:3c:
74:3c:da:f3:67:24:4f:7c:cd:01:ce:44:7a:5a:55:
18:54:bd:3b:2b:18:63:28:48:da:7a:f0:b0:c4:f1:
30:5d:b9:ae:48:ba:ee:9d:29:2e:45:22:2d:7d:ae:
39:64:91:ce:01:07:3a:28:96:4b:84:41:46:49:f5:
4d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:39:FB:D5:5A:1A:DD:58:98:5E:AB:B2:7A:BB:40:A7:2D:66:CD:23
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/8Tn71Voa3ViYXquyertApy1mzSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:8d::/48
Signature Algorithm: sha256WithRSAEncryption
9b:4c:51:3d:97:bd:c5:d0:6e:15:bc:fa:29:88:1f:ea:75:3f:
12:b9:96:63:03:f3:03:f6:2f:96:a1:e0:e6:04:43:9a:27:24:
ec:07:cb:16:05:cc:26:63:79:4e:ee:75:35:b5:58:0f:76:8c:
f5:73:6f:63:af:0a:90:a9:25:9c:8a:42:cc:15:1d:67:91:47:
f4:e0:d6:80:76:0a:16:a8:31:a0:d7:00:49:6b:54:75:b1:2b:
7b:ad:30:18:12:ea:6e:58:d1:38:25:2e:6f:f8:d8:51:f6:74:
1a:94:75:68:6d:57:05:ca:06:87:a6:24:79:1f:cc:77:ac:de:
a5:75:ff:38:f1:79:44:4e:ba:fe:7b:45:76:39:08:78:b6:22:
2b:0b:38:2d:b3:90:29:f7:d3:48:fc:8b:3a:76:f7:2c:3e:36:
ea:e2:b9:d3:5f:b4:1e:88:9d:29:3a:75:6c:9f:d5:63:7a:8d:
62:84:ad:54:79:f6:74:29:99:97:76:2a:20:8d:d1:08:32:e1:
cf:16:6d:41:96:01:c6:16:5f:35:3d:e3:0f:9f:3e:4f:cf:de:
01:97:9d:28:a6:13:49:b7:b7:d6:2e:0b:ad:e0:84:77:7b:97:
c3:98:3a:c2:21:8d:9d:54:ef:4c:83:65:6c:33:33:45:ba:4e:
ef:6b:84:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:18:35 2026 by rpki-client