Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/DtFlk49gM43ZJsDHVnxCNV-zuBA.roa
File: DtFlk49gM43ZJsDHVnxCNV-zuBA.roa (raw, json)
Hash identifier: /fpSqMFvJLHGO2HaPPCGqjWdL5MkQGsD3Dv4UZgaf2A=
Subject key identifier: 0E:D1:65:93:8F:60:33:8D:D9:26:C0:C7:56:7C:42:35:5F:B3:B8:10
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A0CDB2952102E44E71E98585C51D0F77C2
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/DtFlk49gM43ZJsDHVnxCNV-zuBA.roa
Signing time: Wed 23 Sep 2026 09:57:07 +0000
ROA not before: Wed 23 Sep 2026 09:57:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218605
IP address blocks: 2a06:9801:1567::/48 maxlen: 48
2a06:9801:156e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:b2:95:21:02:e4:4e:71:e9:85:85:c5:1d:0f:77:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Sep 23 09:57:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ed165938f60338dd926c0c7567c42355fb3b810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e9:89:3b:c7:c1:7c:9a:85:98:51:c2:c2:08:
52:49:a9:03:b3:9f:e2:7f:e8:55:75:f3:1b:0b:44:
51:04:38:8e:9a:e3:02:db:fd:b6:e1:e6:e7:a9:66:
87:fc:45:66:7c:a0:d1:bd:bc:83:2e:ae:c3:39:d1:
65:34:11:c3:bd:95:59:84:de:df:7c:99:9d:7f:c0:
60:39:27:b8:d5:9c:e0:1d:6b:15:56:c3:5e:1a:82:
c3:ea:89:e5:4b:b8:03:a7:7e:1c:8a:79:9f:3d:bb:
ab:6b:56:dc:83:b6:c9:c0:bc:6f:aa:e0:00:f3:7a:
15:2d:30:09:4c:44:d2:5d:04:b0:be:57:ba:18:39:
58:03:df:1e:ce:d6:89:83:98:4f:58:2d:ac:aa:94:
5b:64:e7:ec:b0:ca:76:fe:d4:0f:5f:f9:7f:33:63:
a8:87:74:e2:60:92:8b:06:3b:7a:7f:d4:c3:9e:9e:
7e:fc:6a:72:40:13:5e:f9:0a:67:50:42:0f:2b:ae:
b4:c1:a7:5d:38:0c:90:2e:59:ca:5a:a5:f9:f7:97:
bf:7a:90:3d:e6:37:26:b7:73:60:2f:9b:19:5b:42:
88:16:9b:73:29:99:24:6c:18:bb:c7:a5:cf:af:ea:
3f:b8:19:43:cd:ad:f2:53:f7:a3:b5:11:52:1a:c5:
03:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D1:65:93:8F:60:33:8D:D9:26:C0:C7:56:7C:42:35:5F:B3:B8:10
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/DtFlk49gM43ZJsDHVnxCNV-zuBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:1567::/48
2a06:9801:156e::/48
Signature Algorithm: sha256WithRSAEncryption
0b:d1:c6:61:3b:16:fe:40:66:4f:ff:fb:84:46:01:1b:d6:28:
aa:ab:7b:92:dd:79:61:79:e7:46:8b:bc:42:40:82:3c:d1:bb:
a4:48:8f:1e:5f:1b:92:ca:1d:85:45:8b:61:c9:fb:3c:9f:cd:
a2:3b:f0:a1:f7:ce:ac:6d:cb:66:70:17:c9:08:b4:bf:c6:94:
22:cb:d5:ac:8c:c5:bb:d1:8f:7e:13:06:cf:4a:f2:d4:37:a4:
3c:02:fa:31:a6:46:73:43:45:79:34:96:5c:60:c0:0b:1b:d4:
75:52:03:61:7d:ba:63:cf:dc:18:78:5e:50:58:4b:fa:ee:d8:
0f:ae:04:a5:5a:cc:73:7c:e8:3d:06:5b:6f:fa:4e:6b:ae:3d:
36:a3:5d:83:9d:6f:81:eb:de:a4:72:dc:fd:ae:6a:ee:09:8b:
e2:89:af:1f:41:6c:62:1c:52:38:f9:6a:53:3c:56:e0:ab:08:
7a:19:75:8f:87:15:b9:c3:d4:44:2b:f6:fb:4c:7b:f2:32:d8:
1f:52:cb:9a:1e:9c:e3:da:0a:b5:7d:96:3c:ec:34:62:10:1e:
a7:27:6b:79:3a:f5:58:28:5a:e7:2f:96:21:10:75:fc:0e:50:
c5:05:93:4c:b1:5c:5e:cc:ff:af:65:45:9f:83:a4:64:2b:88:
03:63:a0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 15:36:27 2026 by rpki-client