Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/DR9tWSJi9mMeMTtQMkV9QVnbcJE.roa
File: DR9tWSJi9mMeMTtQMkV9QVnbcJE.roa (raw, json)
Hash identifier: eW91vZSKXSqe6p6kpZ1Ew8mswq3nf9m4CQdyhb7N7IM=
Subject key identifier: 0D:1F:6D:59:22:62:F6:63:1E:31:3B:50:32:45:7D:41:59:DB:70:91
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A1CB3E00DA70E222551F5EA92092A6A974
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/DR9tWSJi9mMeMTtQMkV9QVnbcJE.roa
Signing time: Wed 11 Nov 2026 15:33:20 +0000
ROA not before: Wed 11 Nov 2026 15:33:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218113
IP address blocks: 2a06:9801:15c3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 19:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cb:3e:00:da:70:e2:22:55:1f:5e:a9:20:92:a6:a9:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Nov 11 15:33:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d1f6d592262f6631e313b5032457d4159db7091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:aa:43:80:06:66:3b:60:38:96:36:13:3f:b4:
88:cc:1d:68:a0:39:a0:9f:49:d0:90:2e:10:bc:99:
d3:57:11:02:89:16:ae:57:30:19:cd:be:7a:20:65:
b5:aa:68:2f:2e:45:dd:4a:57:d6:dd:b7:f5:15:7a:
e9:18:aa:63:4c:a5:55:18:9f:a2:82:50:a1:40:4c:
0b:fd:bd:95:6a:1d:2f:44:65:48:61:f8:04:2a:f5:
75:0e:89:ef:9f:6e:19:f0:e3:58:d7:03:8d:76:26:
49:20:c4:a6:1c:21:5a:4d:93:8a:9f:0a:53:10:de:
cb:ff:55:60:a6:51:c1:32:53:50:90:e6:68:bb:43:
97:9c:5b:5f:45:7c:53:83:dd:88:af:1b:b3:e9:aa:
85:a8:d9:18:dd:b7:ac:ef:e8:c5:4f:78:db:67:e5:
7c:8a:b4:a0:0f:62:aa:40:2c:88:d8:30:c2:06:78:
75:64:2e:85:f4:98:51:c8:e5:e5:27:38:59:2f:a8:
47:1e:3a:a5:81:1d:26:25:10:e6:da:e3:c7:fb:3c:
3d:55:10:18:5e:d1:49:f9:3f:8c:01:57:88:eb:a8:
13:a5:ea:87:0a:ba:71:e0:f4:81:87:ad:2a:29:ba:
e6:c5:7f:2b:d0:7e:51:c6:6f:cc:b1:b7:73:30:4a:
a3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:1F:6D:59:22:62:F6:63:1E:31:3B:50:32:45:7D:41:59:DB:70:91
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/DR9tWSJi9mMeMTtQMkV9QVnbcJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:15c3::/48
Signature Algorithm: sha256WithRSAEncryption
c0:ce:14:98:9b:bf:b4:72:68:10:a0:18:11:55:e1:ef:61:d1:
16:7f:c2:3f:c9:cb:67:4d:d7:ba:f1:c4:25:ca:a9:97:77:d2:
f2:e6:56:17:1c:9f:6c:82:62:13:ff:0f:ad:a0:4d:b6:f8:b9:
f6:7b:cb:11:c0:c4:8c:9d:af:70:b4:7e:d3:02:d9:3c:51:40:
7b:ad:a3:13:c0:85:86:3d:f1:ba:d3:53:20:bb:cf:eb:05:1b:
49:52:54:6b:6d:28:9d:ae:98:fc:57:68:c5:55:ff:53:4f:82:
10:e2:61:53:ca:30:7d:85:2d:7a:47:39:28:46:80:ae:94:98:
7a:8f:9a:16:4a:39:a1:cf:b4:9a:60:3f:25:73:ed:5c:74:8a:
3b:57:9b:07:47:f3:20:f7:00:15:8b:c5:f4:1a:00:2c:93:20:
31:3d:36:2b:4b:af:8a:1b:6f:e7:b4:4a:f8:b0:49:06:20:73:
11:cc:43:96:9b:40:43:9b:03:1b:6f:29:c4:f7:aa:54:3a:83:
ea:6d:6e:8f:1e:eb:8d:98:30:72:b2:21:71:af:80:b3:10:ae:
b1:9a:18:96:ad:28:03:4f:5d:8c:4f:eb:bd:11:54:41:88:b0:
62:37:0d:1b:e3:21:dc:7c:73:ec:c4:1e:18:e9:7c:27:ed:d1:
64:40:c4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:32:33 2026 by rpki-client