Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/SMOzzpchpaSdDQOezUjcQWW8BEg.roa
File: SMOzzpchpaSdDQOezUjcQWW8BEg.roa (raw, json)
Hash identifier: IasoeN/VRKqZVu3aHGHkARotYULeTDVj0CDpLoRqoMs=
Subject key identifier: 48:C3:B3:CE:97:21:A5:A4:9D:0D:03:9E:CD:48:DC:41:65:BC:04:48
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019F89370F972482124823DEDC3E12772BD7
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/SMOzzpchpaSdDQOezUjcQWW8BEg.roa
Signing time: Wed 22 Jul 2026 09:45:14 +0000
ROA not before: Wed 22 Jul 2026 09:45:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219157
IP address blocks: 2a06:9801:f1f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:89:37:0f:97:24:82:12:48:23:de:dc:3e:12:77:2b:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jul 22 09:45:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=48c3b3ce9721a5a49d0d039ecd48dc4165bc0448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:53:ba:28:ce:6b:01:5f:aa:0e:ac:20:60:7c:
91:5b:c3:68:49:26:90:53:72:2f:51:e4:d3:a5:23:
68:bf:66:c8:21:0a:50:c7:03:16:3f:1f:e8:2f:8e:
86:99:82:bd:d1:7f:a8:e4:14:3f:45:83:84:28:68:
75:58:68:50:8b:98:c6:8a:ad:a2:97:c5:52:e9:c2:
dc:51:43:3a:12:7f:a0:5d:27:35:96:8e:1a:82:b3:
96:c1:df:fb:76:32:75:dd:d1:2e:31:db:22:8f:fd:
6c:8b:5d:cd:21:ce:1b:b9:38:a1:4a:a0:26:be:e6:
b4:66:5d:52:48:cc:9c:c3:3e:51:36:4c:f5:12:2c:
50:64:4b:57:54:d2:30:3b:da:af:3c:ba:8c:ed:d7:
07:a7:b1:73:cd:20:6d:a2:14:b9:62:19:aa:17:43:
39:aa:d1:fb:37:d7:be:a9:f9:84:28:2b:77:3e:bb:
3d:21:df:43:5e:e6:29:3c:e5:69:0e:24:69:e6:2b:
49:4f:6f:00:a4:da:6b:fc:5e:c0:28:64:1d:d9:39:
f5:08:28:8c:94:f0:e8:61:f7:42:93:a4:55:c9:3b:
69:44:4b:75:e8:5c:79:31:88:79:af:fb:9e:d9:a3:
d3:f6:dd:78:35:0f:ca:77:38:04:65:1c:ee:3d:4e:
ef:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C3:B3:CE:97:21:A5:A4:9D:0D:03:9E:CD:48:DC:41:65:BC:04:48
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/SMOzzpchpaSdDQOezUjcQWW8BEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:f1f::/48
Signature Algorithm: sha256WithRSAEncryption
b3:ad:64:1a:da:51:6a:17:54:96:98:b8:c5:e7:29:cb:e2:75:
d4:aa:06:b7:48:c7:7d:c8:e2:99:af:74:f2:3b:bd:26:5e:60:
95:98:b2:a5:8f:c9:22:f3:bb:37:2c:a1:79:2b:83:bc:07:6b:
a6:7b:17:9d:b0:92:b5:1a:db:7f:36:13:02:53:bd:c7:1a:42:
8e:75:9c:68:c8:e7:7b:6e:92:bb:af:6d:95:4b:59:a3:cf:f3:
fc:5a:21:aa:cf:bb:ae:d9:9d:ae:40:5c:83:b0:22:c0:92:f5:
b4:11:2d:5b:0c:be:16:27:4f:46:eb:fa:08:49:55:a1:53:9f:
8f:9f:32:f1:5b:65:ff:54:61:c4:57:63:72:1f:2f:65:c5:62:
64:ec:00:cc:12:12:b3:ff:56:cf:5e:a4:9b:7b:cc:ef:19:a0:
39:f3:1d:62:b8:21:89:f9:bd:a0:17:9c:1a:41:90:c2:9f:6e:
60:ef:1a:ef:04:4c:de:4c:38:27:c6:2f:65:69:26:b5:c8:f6:
87:d5:34:09:2a:82:f0:14:18:ce:b1:15:42:04:7c:14:9e:55:
32:0a:19:2f:1b:76:05:66:3c:b5:a7:ca:c1:fc:f3:86:00:fc:
00:73:57:7c:d6:a6:6a:9a:b6:1a:3d:82:74:cc:96:81:b9:5d:
cf:57:9c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 18:59:37 2026 by rpki-client