Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/TJ1k16xNfDVUAhbr_92SF7K_F9M.roa
File: TJ1k16xNfDVUAhbr_92SF7K_F9M.roa (raw, json)
Hash identifier: 1j6dBbG44inOpl56DYkMm21XV0nro2xuv6uCH2dSvaY=
Subject key identifier: 4C:9D:64:D7:AC:4D:7C:35:54:02:16:EB:FF:DD:92:17:B2:BF:17:D3
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019D08DBB5F8475A883E7706C3C25FB3499F
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/TJ1k16xNfDVUAhbr_92SF7K_F9M.roa
Signing time: Fri 20 Mar 2026 01:28:29 +0000
ROA not before: Fri 20 Mar 2026 01:28:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200386
IP address blocks: 2a06:9801:c7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 10:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:08:db:b5:f8:47:5a:88:3e:77:06:c3:c2:5f:b3:49:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Mar 20 01:28:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c9d64d7ac4d7c35540216ebffdd9217b2bf17d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5e:74:2d:0e:7a:75:a1:8f:fb:a0:5a:da:69:
5c:f7:2d:17:9d:72:86:a4:05:b0:45:17:96:2b:80:
05:4c:71:f0:24:20:21:67:37:23:5d:81:84:e3:2c:
26:29:a0:cd:88:93:f4:b4:ef:69:1e:a8:c1:10:9f:
3f:4b:80:4e:22:4e:77:a3:13:50:e5:e7:fb:72:cc:
25:f5:14:02:fd:5d:d5:4e:60:91:28:7d:6e:98:e3:
a1:77:59:ef:32:cc:ed:43:e8:6c:53:0b:e5:70:68:
f3:30:e0:e5:12:8e:be:b7:b1:ca:4b:88:bd:84:30:
c5:26:02:41:8d:4a:9b:a5:78:47:9c:0c:4f:2c:27:
95:df:9e:31:a9:4c:ae:7a:d3:01:dd:cd:fa:1c:d3:
65:93:6b:5f:a6:fe:61:ee:db:76:a2:ea:84:0b:cf:
20:cd:3a:86:0a:15:b6:ba:94:c4:70:f5:5f:f8:d1:
89:46:d1:3c:f6:e6:b2:1e:1b:ea:29:2a:e9:00:e2:
aa:de:cf:d2:56:a6:5d:8a:a9:8a:db:69:39:48:04:
f9:d2:20:8b:3b:fa:28:0b:e8:9c:18:05:71:e4:31:
37:6b:d1:ef:a3:65:41:81:46:47:ed:df:28:20:fa:
60:4e:84:fc:0a:2c:fb:29:6c:5c:c4:e5:0e:0b:f6:
92:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:9D:64:D7:AC:4D:7C:35:54:02:16:EB:FF:DD:92:17:B2:BF:17:D3
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/TJ1k16xNfDVUAhbr_92SF7K_F9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:c7::/48
Signature Algorithm: sha256WithRSAEncryption
9b:b0:a9:9e:22:1c:a2:11:a7:27:2d:b9:09:2a:4f:ce:f4:f5:
ff:71:e0:e1:bf:41:03:eb:1a:77:70:0d:c9:81:6b:bb:99:9f:
ec:a2:17:c3:53:cd:ed:29:7f:a0:0d:d9:25:7f:6a:c0:3d:55:
68:23:2f:e2:8b:66:8d:ed:cd:22:18:95:bf:3f:75:39:89:9f:
db:5c:3e:14:bd:07:c2:8a:db:4e:5c:c5:ec:25:96:81:9f:e0:
37:97:14:a5:d4:e5:e3:ed:27:3b:29:4e:d1:b9:2d:ad:43:24:
c3:ab:45:d6:75:16:69:9c:2a:9b:df:e8:5e:2d:2b:99:96:fb:
aa:fb:79:6d:c0:48:55:1f:8d:87:d8:3b:93:18:55:b9:f9:52:
51:3f:12:fb:88:6d:75:53:42:cd:7f:3d:01:59:4e:e7:b5:cc:
69:2c:33:e0:6e:e1:68:ce:79:f7:94:eb:60:7d:f0:72:81:b9:
73:c2:78:ff:69:e8:06:a7:3a:2d:c4:36:c8:28:70:cd:65:92:
52:bc:ee:9e:aa:12:d3:e6:04:9d:48:d8:3c:c7:a0:cb:24:06:
6d:ad:9a:20:f4:cd:7c:ce:63:b3:e2:8c:cf:13:53:bd:fc:38:
40:d3:49:4a:bd:42:5c:aa:40:d4:a4:ff:20:84:de:b4:5d:a8:
41:b0:91:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:16:40 2026 by rpki-client