Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/AFrR6frc8irAb7czirA0OQT6LaA.roa
File: AFrR6frc8irAb7czirA0OQT6LaA.roa (raw, json)
Hash identifier: mSQoxXuXB+oV6c2jZ7aPV+uGaJtpyZB+ZurjCS4q80g=
Subject key identifier: 00:5A:D1:E9:FA:DC:F2:2A:C0:6F:B7:33:8A:B0:34:39:04:FA:2D:A0
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A183D5FAC321506389A5F0FA4199920826
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/AFrR6frc8irAb7czirA0OQT6LaA.roa
Signing time: Wed 28 Oct 2026 18:46:40 +0000
ROA not before: Wed 28 Oct 2026 18:46:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218270
IP address blocks: 2a06:9801:15c6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 19:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:d5:fa:c3:21:50:63:89:a5:f0:fa:41:99:92:08:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Oct 28 18:46:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=005ad1e9fadcf22ac06fb7338ab0343904fa2da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e3:9a:a1:6a:09:18:c3:8c:c7:91:db:7f:fa:
b6:ed:37:5c:90:3f:21:45:9b:fb:35:b1:e7:ab:b8:
1b:b9:a0:1f:3b:0a:2a:71:d2:2c:c9:16:9d:73:5c:
4c:27:dd:fd:0c:d8:37:e3:92:e7:3a:74:39:c9:90:
82:00:c5:12:01:b2:53:f9:4a:15:7d:d7:c1:34:7e:
a9:b8:64:cc:2f:66:a5:c2:98:db:f3:bd:85:b4:8d:
12:15:d5:6d:25:7b:c3:97:db:ad:9f:4f:57:8d:77:
c9:97:26:87:01:17:04:78:5c:3e:b5:5f:f0:d1:48:
07:f0:a8:3e:4d:ee:67:a3:8c:a5:03:83:ee:ca:8b:
79:be:21:bc:dc:40:cb:fd:11:bc:f2:ce:93:e7:e2:
0d:1b:a1:6b:02:da:fd:5d:b2:5f:18:e9:ce:ee:23:
58:2b:91:0c:ee:be:13:ef:e7:70:eb:22:50:08:1d:
44:54:53:f0:e1:28:95:09:80:29:60:29:60:58:4f:
24:0f:ca:7e:5d:9d:08:52:32:6d:2b:25:c1:8b:6a:
05:73:b8:25:6c:26:7a:4e:4b:33:db:7b:76:56:30:
a5:98:5c:f9:7f:7d:24:b8:e9:f4:00:d2:c7:b4:41:
43:69:cd:eb:63:86:32:4f:3e:e7:9b:67:e4:53:94:
09:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5A:D1:E9:FA:DC:F2:2A:C0:6F:B7:33:8A:B0:34:39:04:FA:2D:A0
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/AFrR6frc8irAb7czirA0OQT6LaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:15c6::/48
Signature Algorithm: sha256WithRSAEncryption
9e:b2:38:4a:16:45:5d:78:cc:4f:bc:ef:7f:58:f3:87:88:44:
34:3a:5c:eb:b0:d3:d4:04:81:68:6b:36:a0:10:17:95:38:16:
5c:fa:b3:19:59:5d:68:7b:a0:ab:1c:18:e2:1a:5b:e9:12:02:
3d:ac:eb:25:43:2b:73:8c:a7:9b:4a:89:b7:00:5c:b6:e0:5a:
f6:34:fb:46:83:ab:a7:f3:5d:67:87:c6:3e:4a:0e:ad:f8:74:
cc:e0:45:19:34:e7:37:76:2f:9f:0e:c6:64:b8:3c:7d:9d:fd:
3a:a3:ad:99:60:24:d3:d8:62:3d:8c:e8:70:b1:ba:b5:28:68:
69:7a:9a:61:7f:86:35:4b:97:0f:d2:64:93:d0:5a:de:d9:6a:
ce:21:bf:3a:db:f9:61:8e:4d:e0:20:69:8f:32:06:43:da:f6:
7a:e1:f4:75:19:d6:e2:08:53:b8:f7:87:fa:c3:19:30:fb:cf:
08:12:5a:27:fb:da:d3:f7:2b:6c:fa:5e:36:75:24:dd:15:63:
b7:93:e6:09:9e:f9:0a:2d:f4:04:0f:0e:2e:d7:38:9a:59:89:
cb:47:65:38:bc:67:c7:dc:27:25:84:70:a2:51:81:8b:37:00:
9b:83:d1:4b:87:db:78:6e:21:67:13:60:9f:e1:24:c4:59:89:
1c:69:6b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:32:48 2026 by rpki-client