Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/Rddnl4k9uA2r_G8_ygHR_-qN9OY.roa
File: Rddnl4k9uA2r_G8_ygHR_-qN9OY.roa (raw, json)
Hash identifier: qLLyMdYV/iyh8VDJhIEy6lsyBeeuT8xu99OWoYSsOiY=
Subject key identifier: 45:D7:67:97:89:3D:B8:0D:AB:FC:6F:3F:CA:01:D1:FF:EA:8D:F4:E6
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019F6127C800E5E5780AD325B104BAA831B2
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/Rddnl4k9uA2r_G8_ygHR_-qN9OY.roa
Signing time: Tue 14 Jul 2026 15:03:44 +0000
ROA not before: Tue 14 Jul 2026 15:03:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219214
IP address blocks: 2a06:9801:7ff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:61:27:c8:00:e5:e5:78:0a:d3:25:b1:04:ba:a8:31:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jul 14 15:03:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45d76797893db80dabfc6f3fca01d1ffea8df4e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:08:75:e7:42:98:5b:2d:63:62:0b:dd:13:a5:
29:5c:03:bc:9e:72:c3:9b:41:4e:98:28:45:3b:8f:
6b:bd:c8:06:75:12:d9:af:fe:8a:21:49:40:27:a5:
55:e9:3d:e2:84:81:4a:26:36:17:0b:12:a5:7b:9d:
e7:1b:98:40:dc:06:17:2d:d7:82:25:7a:cc:4d:6d:
69:db:42:f1:43:e0:39:1b:6c:17:f1:aa:52:5f:7c:
6c:25:7f:6a:2e:48:5e:53:d0:67:e5:75:6d:5b:64:
f5:dd:49:1e:ff:91:33:86:83:95:2c:1a:ff:54:de:
91:ca:13:c8:18:34:c6:30:42:d0:34:63:c8:8c:86:
3f:c2:8e:b4:1a:f6:d3:55:04:57:5f:4b:8e:e6:fb:
27:b8:c9:d8:d8:e2:c9:84:e0:e8:a2:47:10:3a:18:
3e:39:ea:44:d7:ba:85:ad:cb:bf:f4:ea:ee:84:6d:
47:4b:dd:4a:73:05:d5:31:20:a7:75:06:c5:12:2a:
15:fb:1c:0b:8a:93:e9:d9:66:2d:88:88:8d:43:0e:
74:e9:60:15:36:06:0a:2d:24:2b:05:83:5f:3c:95:
3a:d9:62:c3:01:eb:84:ee:4b:2c:a7:79:fa:da:56:
e2:4b:e6:40:2c:fb:61:0a:51:56:59:61:e1:75:dd:
4e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D7:67:97:89:3D:B8:0D:AB:FC:6F:3F:CA:01:D1:FF:EA:8D:F4:E6
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/Rddnl4k9uA2r_G8_ygHR_-qN9OY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:7ff::/48
Signature Algorithm: sha256WithRSAEncryption
a0:03:04:10:e2:03:b0:14:8b:d8:06:aa:db:db:c2:58:9f:5f:
f5:e9:b8:60:0f:81:80:14:b1:6c:11:8b:88:72:45:9b:2d:94:
80:1d:a3:61:cf:2a:46:d4:ba:c0:40:89:fd:00:0e:19:a8:34:
5b:66:e3:77:1a:63:d5:17:4a:00:04:50:f2:67:e2:ff:83:38:
9e:72:c6:92:7e:45:f3:af:37:88:bf:bb:f0:b3:1d:d7:53:b7:
7b:c9:20:66:9f:89:d6:b6:e2:75:e2:ea:a2:0a:31:51:ea:f3:
4b:f9:39:2a:ae:2d:41:fe:ee:de:58:4d:65:aa:93:75:63:9d:
4d:7b:62:31:a7:c5:ae:a7:a1:8e:1d:81:f9:e7:d5:e8:8b:f6:
44:82:b7:81:d6:63:1f:d5:eb:09:1f:d7:4f:89:b1:f9:27:c9:
ec:6f:8a:a2:02:7d:d1:58:bd:f8:85:be:4f:69:ef:ed:a9:49:
ed:1a:33:eb:c2:5b:f7:39:64:4c:1c:7c:c2:40:92:0b:14:e1:
e4:8c:ab:4c:50:6b:60:8b:a6:9c:33:19:b2:d3:79:87:89:75:
f2:45:c7:a5:66:b6:01:2b:f9:03:a5:84:40:00:7c:94:9d:18:
20:0f:c5:c1:0c:08:17:8a:e7:25:9e:87:98:44:e9:76:93:0b:
fe:b2:f8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:26:32 2026 by rpki-client