Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/FSdVgsrc9Wq5v-N3ti34ywXcKyE.roa
File: FSdVgsrc9Wq5v-N3ti34ywXcKyE.roa (raw, json)
Hash identifier: tRMh3m9ZVath1UOLG4Y9PXRYanbz8Qi2x3Y2zqQeyJM=
Subject key identifier: 15:27:55:82:CA:DC:F5:6A:B9:BF:E3:77:B6:2D:F8:CB:05:DC:2B:21
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019D08DBB54910436CBEE68F164F64C4B86B
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/FSdVgsrc9Wq5v-N3ti34ywXcKyE.roa
Signing time: Fri 20 Mar 2026 01:28:29 +0000
ROA not before: Fri 20 Mar 2026 01:28:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199914
IP address blocks: 2a06:9801:21c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:08:db:b5:49:10:43:6c:be:e6:8f:16:4f:64:c4:b8:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Mar 20 01:28:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15275582cadcf56ab9bfe377b62df8cb05dc2b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:94:c8:7e:3f:d4:b2:8d:c4:81:95:64:04:eb:
50:5d:fa:47:ee:b2:42:b7:f4:a5:82:d3:ce:bb:ac:
81:87:c0:2f:36:8b:5e:9d:74:73:b8:cf:6e:0c:9e:
8a:c5:46:14:d8:c1:3d:35:e8:55:e2:e8:53:a0:ad:
4b:dc:22:23:4c:9a:d2:fa:06:76:3f:a9:00:8e:61:
93:de:e5:c3:4d:4c:ba:65:f2:ed:8a:59:72:40:a7:
e7:61:fe:f3:46:0f:61:55:a8:01:72:2b:09:1f:cf:
51:84:8f:5b:5e:ac:c4:ac:d3:c0:4e:c2:e5:2c:58:
94:25:86:b5:65:1e:fc:3c:6f:5f:8d:8a:8f:cb:4a:
da:ae:df:eb:bb:b1:9d:6e:0f:6d:57:c4:b4:f7:a9:
07:95:2a:1a:3c:39:61:b7:72:86:dd:6b:86:4d:2b:
4b:1d:ca:91:2c:8f:e5:4d:34:7f:96:f4:4d:32:c5:
99:69:b7:b2:e2:a0:bc:83:32:c2:ec:de:fd:a4:fa:
c0:cc:fb:76:d9:d3:a2:5b:06:dd:6b:e0:f3:d6:d6:
d4:1e:7e:ed:2e:eb:3c:5e:3b:6f:a4:ce:04:65:c0:
b4:1f:f0:e8:c0:79:db:44:5f:97:6f:69:d7:7e:76:
0c:91:ba:d3:12:a2:65:44:9c:0e:ed:7c:61:ae:84:
55:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:27:55:82:CA:DC:F5:6A:B9:BF:E3:77:B6:2D:F8:CB:05:DC:2B:21
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/FSdVgsrc9Wq5v-N3ti34ywXcKyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:21c::/48
Signature Algorithm: sha256WithRSAEncryption
9d:56:e9:04:c9:dd:a1:99:34:ad:ec:21:b6:33:44:ad:a1:33:
fb:bf:2e:b9:6f:d0:d9:b2:48:36:b7:3a:fd:06:c9:ec:16:26:
eb:68:a0:63:39:ec:6f:82:09:1f:31:83:be:11:62:08:8c:45:
52:2f:16:34:ae:16:04:c6:ba:0c:66:ca:c0:db:68:96:f8:36:
07:a0:d2:1c:2c:d0:3e:c5:cc:fd:97:0b:25:71:da:6b:98:dc:
74:c6:4b:f0:76:59:6a:76:c0:30:1a:da:10:5a:81:17:d6:51:
fc:66:15:09:d9:57:9e:e4:8c:aa:04:c0:2d:c2:cd:ef:ff:af:
cf:31:f3:ff:57:67:27:b2:54:c7:03:a8:a3:f2:03:23:b2:27:
b7:1a:07:e0:1e:e3:46:81:f0:65:d5:5e:5f:00:49:c1:03:af:
bd:66:0a:cf:0c:c8:fc:ee:fe:ee:d3:4c:2f:bb:8c:b8:88:97:
43:f1:48:9a:b3:02:ee:42:e6:a1:9f:69:4f:dc:36:fc:bc:f7:
d3:38:52:97:77:fd:da:d4:ea:10:f8:01:b8:2c:6c:b4:c9:1d:
e9:cb:68:03:a0:b9:8b:3b:0f:fb:fe:b5:e7:29:89:62:90:50:
fa:d9:44:6d:1a:10:ff:a7:20:d7:24:27:b1:62:82:e9:8c:44:
51:8c:0a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:18:44 2026 by rpki-client