Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/CsEQHavdAdOXcTgYHeL8qntd26w.roa
File: CsEQHavdAdOXcTgYHeL8qntd26w.roa (raw, json)
Hash identifier: P9uX0+z2YaD2fiDuv87acS2cFY2DKA2B/ObXnGoaY7Y=
Subject key identifier: 0A:C1:10:1D:AB:DD:01:D3:97:71:38:18:1D:E2:FC:AA:7B:5D:DB:AC
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019F8A13B4CD05939B22FA6220B08E62432B
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/CsEQHavdAdOXcTgYHeL8qntd26w.roa
Signing time: Wed 22 Jul 2026 13:46:14 +0000
ROA not before: Wed 22 Jul 2026 13:46:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219257
IP address blocks: 2a06:9801:7de::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8a:13:b4:cd:05:93:9b:22:fa:62:20:b0:8e:62:43:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jul 22 13:46:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ac1101dabdd01d3977138181de2fcaa7b5ddbac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a7:5d:6e:7b:ea:76:39:4f:1c:12:01:b8:63:
75:d8:90:02:72:fc:7c:dd:74:85:27:27:ba:7c:50:
ab:d0:60:67:65:9e:6f:5a:a1:d6:e1:d4:47:a6:7a:
1e:41:b4:ec:9e:f9:c2:b7:b8:63:d3:ca:82:0b:29:
30:90:93:10:f3:0b:be:02:2a:10:f9:1a:b8:4f:4b:
a8:ec:32:a7:03:30:36:da:f9:ca:2d:26:72:e3:4f:
1c:3c:89:f6:58:e5:e7:36:05:94:f0:da:44:78:68:
94:8b:92:82:f9:57:a1:97:ac:73:4e:88:b4:bc:37:
73:41:58:1d:51:cd:43:1d:de:fe:2b:26:af:7e:0d:
3c:95:26:fb:6e:59:2e:ea:14:4d:aa:d6:e0:4c:8e:
79:1a:f7:0b:80:66:ca:cc:58:72:a2:4f:e2:60:05:
14:6e:c4:be:29:04:ff:8b:f7:07:67:de:7f:0c:c0:
84:c0:28:d1:c6:ca:50:55:22:e5:06:39:de:75:0a:
64:d2:44:8c:d3:4d:70:15:3f:8c:d8:58:00:2b:e4:
6a:ec:e1:de:9a:fa:1b:5d:7a:b7:de:18:30:a1:9f:
88:df:8f:12:e7:c9:72:61:63:5e:92:91:60:0f:55:
a9:f9:cb:c4:8e:f4:06:2e:93:e7:16:a4:70:77:fb:
37:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C1:10:1D:AB:DD:01:D3:97:71:38:18:1D:E2:FC:AA:7B:5D:DB:AC
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/CsEQHavdAdOXcTgYHeL8qntd26w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:7de::/48
Signature Algorithm: sha256WithRSAEncryption
7c:fb:1e:79:4f:48:60:1d:a4:ad:37:4a:60:8d:07:8d:ad:29:
9c:7e:19:a2:e7:3c:14:42:c6:1c:7c:8c:c4:ce:17:28:5f:de:
fd:6b:22:fd:d6:d1:14:61:9c:a7:3e:4d:9a:ff:0d:e8:ec:70:
99:11:0c:c5:aa:d5:bf:98:e3:2e:af:91:02:2d:f3:58:93:a4:
fe:d2:99:30:71:86:06:69:bf:3e:df:7e:48:9d:3d:aa:71:50:
2e:0e:dc:d0:59:e2:27:d4:0f:08:3a:fa:75:50:dd:f1:9c:ab:
93:8f:71:7b:7e:3e:fb:f2:7c:89:da:29:c4:37:b9:46:2d:d4:
35:18:aa:ba:3a:d7:13:58:df:93:a5:47:34:48:23:8f:b0:88:
e7:de:54:88:12:de:90:ab:45:ea:ca:e5:20:8b:6e:00:04:4d:
0c:ef:9b:67:c4:d8:8b:2d:1c:e9:ad:33:92:0c:bb:15:80:46:
f2:4b:df:34:b2:23:d7:32:47:67:cd:c4:8c:da:17:f0:32:59:
15:2e:91:de:57:87:a9:cc:ba:23:cc:de:09:01:d8:b2:d2:77:
84:8d:2b:76:b7:1a:fb:ba:c3:a4:d9:25:bb:7b:3d:fd:e9:97:
a5:6f:1a:8f:17:40:33:f5:6b:26:8c:dd:fc:4b:8a:33:f9:0d:
ff:58:81:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:30:38 2026 by rpki-client