Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/IN8Bmzh4BeeFOtjSHQA4C0PA-7E.roa
File: IN8Bmzh4BeeFOtjSHQA4C0PA-7E.roa (raw, json)
Hash identifier: Ra1XAmvCsAnM8NEIac1nqzz1Zy1Kf4Zwx3BbxP6xU8g=
Subject key identifier: 20:DF:01:9B:38:78:05:E7:85:3A:D8:D2:1D:00:38:0B:43:C0:FB:B1
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A11E8491DE46F956C4405EA18945C67E43
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/IN8Bmzh4BeeFOtjSHQA4C0PA-7E.roa
Signing time: Fri 09 Oct 2026 02:36:06 +0000
ROA not before: Fri 09 Oct 2026 02:36:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218789
IP address blocks: 2a06:9801:f49::/48 maxlen: 48
2a06:9801:1589::/48 maxlen: 48
2a06:9801:15b4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1e:84:91:de:46:f9:56:c4:40:5e:a1:89:45:c6:7e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Oct 9 02:36:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=20df019b387805e7853ad8d21d00380b43c0fbb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bf:b6:b7:37:c4:54:e3:50:4f:f6:81:bd:f8:
74:e3:e7:23:60:9c:59:98:46:0e:71:32:46:c8:ce:
d8:f1:a1:bc:36:3f:c6:62:ef:54:f4:25:62:8a:7e:
f8:ca:7e:48:28:77:96:55:d4:11:c3:5b:a3:00:2c:
3a:ad:5c:4c:bd:5a:af:1a:4d:09:f2:75:54:69:e6:
82:fb:a6:dc:49:44:b0:d6:a7:fd:5c:65:71:70:3e:
54:41:50:ba:81:11:63:69:c5:8f:b9:a6:b8:0f:d9:
10:31:75:cd:b2:be:31:3c:b9:41:e1:34:6b:09:90:
07:52:2a:bd:44:c5:7c:4e:6e:0a:07:07:2f:22:6d:
93:13:ff:29:73:86:46:24:3b:22:08:9c:3c:a4:2f:
ce:63:27:8b:14:af:19:e5:41:09:44:7a:7e:43:e6:
93:74:03:f3:37:8b:56:16:c7:c2:f5:3c:09:67:f0:
c8:23:2c:fc:30:d8:e3:9c:8a:96:cf:3a:4b:ae:b4:
61:dd:50:40:10:80:61:fe:72:23:01:41:10:45:0e:
cb:ac:f0:c5:fe:4b:1a:b9:7c:48:94:12:40:c3:30:
f7:cc:d5:b5:1e:60:6e:02:c7:9f:9f:78:f5:f6:28:
86:8c:a7:d5:89:38:5b:70:66:e6:f1:cf:3e:fa:a3:
86:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:DF:01:9B:38:78:05:E7:85:3A:D8:D2:1D:00:38:0B:43:C0:FB:B1
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/IN8Bmzh4BeeFOtjSHQA4C0PA-7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:f49::/48
2a06:9801:1589::/48
2a06:9801:15b4::/48
Signature Algorithm: sha256WithRSAEncryption
3c:1e:98:0e:ee:d0:28:a8:b1:70:14:11:a4:7c:9a:1a:8c:8e:
16:59:47:fb:97:17:e6:56:e2:f2:38:94:e4:e0:b0:9e:31:d3:
55:a0:a4:71:6d:80:36:d6:dd:6f:62:34:b3:9f:33:30:8c:ed:
01:5f:56:17:b9:ac:d6:22:ee:1e:b8:7a:e0:0f:ea:1a:f0:a9:
2d:ef:b1:4b:c9:27:96:52:ca:78:83:5b:4b:30:b0:b0:16:96:
c0:61:f6:ff:ab:35:e3:cb:53:75:a0:93:3d:c3:a5:d3:55:18:
58:67:88:cd:ec:34:68:e3:c0:b2:7f:ec:8b:38:8f:5b:41:a2:
d8:8f:5d:a4:8b:6f:f6:93:45:48:55:fe:f6:2c:4c:67:11:e4:
c4:37:1c:4d:e5:6d:2a:db:06:f0:4a:bd:d8:23:8c:93:ca:f9:
40:f0:4e:a5:9e:e9:e6:5c:23:2f:2d:ab:94:79:0f:f7:c9:7b:
03:2e:13:e1:af:e8:23:fa:a4:2d:1b:ac:e4:9c:94:56:88:d2:
da:59:3c:29:02:e6:2e:6a:12:d0:d3:05:05:42:87:58:88:cf:
47:1c:85:62:00:92:0d:f1:ff:c3:58:ff:88:57:33:e6:ce:0e:
3f:4f:e4:b3:c6:10:5e:f1:e7:f4:b0:7c:2d:1c:a2:5c:db:96:
bc:b1:06:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:52:58 2026 by rpki-client