Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MDncqa9pGt5ka2kyoixEmk9r9O0.roa
File: MDncqa9pGt5ka2kyoixEmk9r9O0.roa (raw, json)
Hash identifier: G3NMxWq+EWmAc1ChYiiiyU4TV7MuYaRVcZEM+xlO+QI=
Subject key identifier: 30:39:DC:A9:AF:69:1A:DE:64:6B:69:32:A2:2C:44:9A:4F:6B:F4:ED
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019F2314F709E4112D057D6AEF594CF354D7
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MDncqa9pGt5ka2kyoixEmk9r9O0.roa
Signing time: Thu 02 Jul 2026 13:46:44 +0000
ROA not before: Thu 02 Jul 2026 13:46:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402270
IP address blocks: 2a06:9801:900::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:14:f7:09:e4:11:2d:05:7d:6a:ef:59:4c:f3:54:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jul 2 13:46:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3039dca9af691ade646b6932a22c449a4f6bf4ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:48:8f:87:d6:84:bb:44:6b:ae:ca:3e:dd:1e:
46:56:24:55:68:ef:6b:40:8e:1a:a4:e9:36:5d:e4:
72:85:80:b6:05:cb:dc:a8:bb:91:32:f9:b2:03:f4:
da:f6:0e:9a:2c:8c:20:a8:59:a0:52:e9:00:66:2b:
75:d2:d6:f3:a4:70:9e:43:0c:55:9f:9c:c9:fc:1c:
84:44:ba:0f:39:75:e9:1a:f0:87:34:5e:6a:2d:39:
d9:04:97:cd:08:72:cc:3c:9c:ad:1f:1e:30:4e:ff:
90:df:68:00:96:cf:b6:f2:30:f5:d5:01:4c:c4:03:
de:96:b6:40:1a:9f:78:b3:e0:a9:74:33:85:8c:56:
57:ed:9a:6e:f0:58:a0:27:23:7f:c4:2b:70:37:af:
5a:cb:e4:9d:db:fc:4f:5d:61:0d:42:58:ed:c9:d0:
e1:5d:80:5d:22:fb:3a:43:60:ee:9a:8f:76:14:45:
77:3f:01:37:9c:f5:fe:2f:42:c1:3d:d4:d6:f8:1b:
e9:81:28:97:7a:d9:6a:51:9c:eb:16:9b:d7:01:31:
0d:ea:47:98:cc:b7:97:88:36:37:ac:c0:fe:4f:c0:
da:fa:50:ef:ba:06:29:6c:28:dc:d9:76:cd:df:28:
d9:a8:10:20:84:3f:1b:72:e7:92:14:2f:03:f4:7b:
a7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:39:DC:A9:AF:69:1A:DE:64:6B:69:32:A2:2C:44:9A:4F:6B:F4:ED
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MDncqa9pGt5ka2kyoixEmk9r9O0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:900::/40
Signature Algorithm: sha256WithRSAEncryption
31:b2:96:2d:58:c1:a2:1e:32:da:df:19:40:ea:06:7b:b6:d0:
9a:42:eb:a7:6d:dc:c6:61:56:5c:19:11:9b:1a:a0:eb:13:99:
7a:46:05:0a:17:85:36:61:bb:45:01:b5:ac:3e:8c:12:fe:4f:
18:6d:d2:62:da:25:c0:f1:18:fd:9e:16:90:ac:73:fe:2d:99:
26:d5:7e:a0:56:8c:31:04:ec:62:d9:66:e8:53:b7:20:96:f7:
22:2c:51:74:21:69:cc:be:eb:3c:30:f3:f0:73:a8:24:21:14:
e8:7d:a8:f6:ef:91:b9:26:d3:3d:eb:d5:6b:b5:ec:fa:4b:6a:
65:f8:23:e8:fe:8f:24:8a:f5:68:88:ec:b9:c1:15:e5:5e:97:
79:de:06:db:91:51:9e:9c:00:49:95:a6:64:86:b9:77:ed:2a:
4c:a4:dd:8d:8a:89:54:1b:f0:dd:dd:ad:52:db:28:4d:8c:d5:
42:fe:d5:21:42:eb:55:f5:94:b7:d0:4a:cb:48:8a:d8:2e:7d:
ce:af:08:6d:fc:25:38:48:b1:b0:08:0f:f4:14:5c:82:a3:fc:
4d:09:c8:42:bf:88:fc:70:1a:9e:9a:15:5a:77:a4:9d:0a:86:
8f:45:74:98:6d:8c:8e:9f:65:83:d7:5b:60:09:81:5d:e1:59:
d1:40:68:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:17:47 2026 by rpki-client