Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/Mt_M1H9Vn1SxtLoHVtzNE_Ou4HI.roa
File: Mt_M1H9Vn1SxtLoHVtzNE_Ou4HI.roa (raw, json)
Hash identifier: zeoCVuq+1Fu+U7JzjDGaapWsuUbskgR0uCHIot3edfo=
Subject key identifier: 32:DF:CC:D4:7F:55:9F:54:B1:B4:BA:07:56:DC:CD:13:F3:AE:E0:72
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A15C5C49BB0595E71E561CF150BBEFDB8C
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/Mt_M1H9Vn1SxtLoHVtzNE_Ou4HI.roa
Signing time: Wed 21 Oct 2026 02:48:34 +0000
ROA not before: Wed 21 Oct 2026 02:48:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218362
IP address blocks: 2a06:9801:15b1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5c:5c:49:bb:05:95:e7:1e:56:1c:f1:50:bb:ef:db:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Oct 21 02:48:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=32dfccd47f559f54b1b4ba0756dccd13f3aee072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b1:9b:65:a3:fe:b7:63:96:05:25:1d:38:81:
c1:94:8c:fe:35:eb:5a:a0:7c:47:c4:36:bc:f7:f5:
70:39:bd:c9:de:96:9e:8c:c4:4c:12:67:d8:f6:f6:
d4:60:b0:4f:9c:ed:cb:d2:a1:0e:f4:65:52:c5:74:
f1:89:86:0c:c5:f2:b0:a5:72:5e:23:e7:9c:27:70:
ea:c9:f3:37:8c:58:0d:6b:d3:1d:91:ed:1e:8d:55:
21:dd:a8:73:2d:c6:04:0f:e4:7c:33:0f:e3:ff:26:
cf:c0:70:24:2c:19:2e:79:5a:ac:9f:27:d1:28:f6:
99:b4:92:59:ae:1f:b8:34:f8:0a:4a:2a:9c:9f:77:
de:de:0e:31:b9:80:a8:c8:6d:df:64:c5:56:5f:f7:
19:8c:8f:53:f7:b4:92:31:ef:d1:28:a3:bb:e9:45:
8b:0f:1f:50:cc:fa:ef:a2:be:cf:36:4f:07:93:2e:
e8:29:a1:5e:23:99:37:14:f3:e3:42:31:8d:ac:2a:
a3:26:46:bf:34:da:a1:84:50:6e:64:a6:21:03:52:
bf:ae:e8:95:a7:0d:ae:36:ee:99:ad:42:7f:57:45:
6b:38:ce:a4:51:dd:dd:52:68:4a:f1:aa:3e:aa:7b:
92:b6:be:da:38:bc:24:e2:f8:a6:41:5f:4c:e3:87:
c3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:DF:CC:D4:7F:55:9F:54:B1:B4:BA:07:56:DC:CD:13:F3:AE:E0:72
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/Mt_M1H9Vn1SxtLoHVtzNE_Ou4HI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:15b1::/48
Signature Algorithm: sha256WithRSAEncryption
a6:57:00:44:b2:16:02:b5:41:ee:b7:74:84:c5:3e:ca:ca:1f:
6b:0e:6a:b2:9a:ed:e2:76:3d:07:5a:36:53:92:47:76:e7:36:
64:a2:e6:60:07:ad:57:f1:46:65:7f:33:27:11:e9:ec:7b:67:
86:d5:93:69:6c:36:1b:ea:e9:30:b0:af:41:3f:20:59:94:65:
a4:cf:2b:c4:8c:f4:76:a5:8c:64:aa:d7:e3:00:a0:a4:ca:a2:
e9:ca:05:2e:34:46:69:8a:5f:20:9e:ba:bb:fc:8c:ec:15:34:
1b:6f:a5:c0:a0:5f:31:d2:ef:49:d4:81:bb:54:b1:17:58:8d:
7b:d5:b9:b5:bc:8c:0c:f6:b5:bf:a7:32:71:bc:04:f1:27:e9:
cb:9f:68:f0:77:47:78:ec:f8:85:d6:a9:59:45:eb:da:b7:b2:
96:a2:6e:b2:17:77:75:1f:dd:9d:fa:f7:31:48:1f:9d:67:d3:
66:a9:82:1c:dd:23:5f:9d:42:ae:ba:fd:32:5f:06:d1:cf:2e:
16:0e:83:22:e1:77:1a:70:d0:d5:92:02:fb:88:65:cd:71:64:
2b:56:45:47:d9:f2:51:24:26:ef:97:e7:7f:b4:d5:81:d7:83:
3b:27:bf:c8:58:37:e5:e1:2a:05:8e:60:fd:e8:59:dc:d3:18:
70:a4:68:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:36:48 2026 by rpki-client