Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/DaTGjHCFB83ggfciHfR69z3ePrw.roa
File: DaTGjHCFB83ggfciHfR69z3ePrw.roa (raw, json)
Hash identifier: MzacZMUZLf05E/H0l29ETncKTdv2tuVP1ZrTSI/7oC4=
Subject key identifier: 0D:A4:C6:8C:70:85:07:CD:E0:81:F7:22:1D:F4:7A:F7:3D:DE:3E:BC
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019F74973727E6C537FBE7B52212CF451358
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/DaTGjHCFB83ggfciHfR69z3ePrw.roa
Signing time: Sat 18 Jul 2026 09:38:14 +0000
ROA not before: Sat 18 Jul 2026 09:38:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219185
IP address blocks: 2a06:9801:f1c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:74:97:37:27:e6:c5:37:fb:e7:b5:22:12:cf:45:13:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jul 18 09:38:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0da4c68c708507cde081f7221df47af73dde3ebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3f:c1:30:40:70:13:35:22:8d:4c:be:9d:d8:
ae:c3:05:c2:fe:2f:8f:c3:7f:e0:11:ce:7e:cd:5c:
be:d5:1e:a5:33:f8:ca:06:05:c4:81:6c:0f:48:2e:
f7:0e:c1:14:7c:24:4b:bd:47:ad:bb:f0:1f:ab:62:
e5:ce:8b:ba:dc:09:80:bd:24:06:5a:34:33:d0:92:
35:07:af:93:84:5e:1d:36:fe:20:fa:86:e4:81:e0:
e7:2c:f8:f6:0a:a0:ea:35:1f:e5:b1:aa:02:25:53:
35:93:a9:60:c0:ec:f5:7d:7b:57:f0:97:ba:04:75:
24:5c:93:29:b4:bf:36:cd:94:b9:81:65:28:54:e8:
07:a2:cd:d6:2c:ef:02:28:4e:a0:96:df:bc:9a:37:
8c:3b:94:79:7b:1c:88:b1:43:fb:8b:c0:f0:0d:63:
f9:e2:69:a5:a6:45:cb:c4:de:3f:d3:78:36:2b:a3:
b4:f1:38:18:1f:16:ec:54:9e:0a:88:07:25:bf:a4:
68:52:34:47:f8:96:39:79:d0:5f:38:37:eb:31:d9:
70:cb:02:b6:52:cc:07:08:57:5d:07:c3:1b:5c:ef:
57:4d:f8:95:f2:dd:cc:0a:d0:f9:35:b0:03:f3:74:
d8:c3:30:32:f8:c9:6b:8a:21:39:5b:7b:1c:c1:c6:
8e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A4:C6:8C:70:85:07:CD:E0:81:F7:22:1D:F4:7A:F7:3D:DE:3E:BC
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/DaTGjHCFB83ggfciHfR69z3ePrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:f1c::/48
Signature Algorithm: sha256WithRSAEncryption
9f:75:d8:33:aa:14:98:dd:4e:be:d1:27:a5:59:e3:bb:7e:98:
3b:28:4d:e3:71:42:ca:b5:73:72:94:8e:dc:7b:69:65:cc:ee:
b8:a7:eb:58:d6:14:05:bd:c7:d0:2f:22:cd:bf:94:c4:5e:bc:
ac:88:63:58:83:60:10:e5:57:e6:ce:f2:49:3c:d9:69:16:cc:
4e:dd:6b:78:26:4e:d6:0d:ad:57:cb:cd:7d:e1:7d:10:45:86:
9f:72:24:e4:bd:1c:12:3d:68:a6:cf:53:3b:20:3f:8e:9b:e8:
f9:ff:78:1e:8e:da:d0:96:c1:8e:55:8e:64:4c:58:7c:e2:03:
43:88:02:10:65:07:a8:39:96:81:f6:39:ca:b1:a0:8d:12:c3:
30:84:9a:82:d3:d0:0b:ec:39:20:44:13:60:cf:3f:05:8d:9b:
9d:a6:4f:ad:18:b9:8d:84:f2:3e:a6:43:60:ff:13:d7:66:f3:
9c:bd:08:02:c2:07:2f:47:e0:21:e9:fd:16:f5:bc:b6:31:3b:
3b:0f:99:7f:41:e8:73:c9:cf:aa:0c:b4:30:f7:1b:52:7b:7e:
e2:97:59:08:14:84:39:b6:aa:c3:b5:8b:0a:a1:49:fa:10:83:
1b:31:1d:d3:f3:94:ff:a1:9a:27:d2:56:5f:70:ce:99:cc:d1:
20:67:70:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:32:03 2026 by rpki-client