Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/VH9Ww_I8HZXOWnCjG9G8ixlhU4U.roa
File: VH9Ww_I8HZXOWnCjG9G8ixlhU4U.roa (raw, json)
Hash identifier: V/uhCDgGw7w2QFo9OTliHLXnOIHbdd+6euJSceqHuzU=
Subject key identifier: 54:7F:56:C3:F2:3C:1D:95:CE:5A:70:A3:1B:D1:BC:8B:19:61:53:85
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A0CA1A7B9220A9C1DC8A0436FB206CC002
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/VH9Ww_I8HZXOWnCjG9G8ixlhU4U.roa
Signing time: Tue 22 Sep 2026 17:12:08 +0000
ROA not before: Tue 22 Sep 2026 17:12:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202615
IP address blocks: 2a06:9801:156c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:1a:7b:92:20:a9:c1:dc:8a:04:36:fb:20:6c:c0:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Sep 22 17:12:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=547f56c3f23c1d95ce5a70a31bd1bc8b19615385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1f:37:1c:b5:32:96:e8:7b:91:6e:ad:04:ef:
ed:de:6f:bb:61:99:f0:53:a8:32:6e:a9:98:64:ce:
a8:92:b6:a9:1f:f3:0c:17:2c:c4:5e:4a:88:99:08:
4a:28:64:ff:15:26:9c:5e:f9:fb:c9:15:cb:93:66:
28:7d:0c:b4:eb:42:1d:a2:64:e3:9b:c8:f7:29:d7:
e8:e9:0d:20:5d:70:de:2c:d9:8a:81:99:07:85:11:
34:d3:0e:60:c2:5c:67:58:cd:fc:b4:15:89:c1:86:
19:78:61:cb:0a:a5:3c:c8:6d:21:06:30:93:f2:71:
ab:f6:2e:a5:7e:25:2d:30:83:19:f5:3b:f0:82:30:
0e:cb:b1:cc:d5:cb:0a:c1:a8:f4:c4:c4:ed:e9:e4:
3f:97:67:06:9a:a8:53:a0:0c:01:3c:d5:9a:e5:fb:
b5:1f:e5:77:70:f1:6d:4d:98:71:bd:6b:da:98:cc:
b7:c3:66:a8:e4:20:88:63:d2:ac:2c:f5:46:fd:2d:
46:a9:f2:c2:03:85:1e:73:ad:29:de:bf:6b:86:b6:
3e:60:4a:d0:14:53:7e:d1:20:ef:20:bf:a3:f8:7a:
47:fd:54:e6:da:40:df:c6:cf:4f:4f:ce:38:ae:ba:
3d:d5:ef:4e:9a:b9:77:b1:92:31:01:2b:6c:bb:de:
9e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:7F:56:C3:F2:3C:1D:95:CE:5A:70:A3:1B:D1:BC:8B:19:61:53:85
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/VH9Ww_I8HZXOWnCjG9G8ixlhU4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:156c::/48
Signature Algorithm: sha256WithRSAEncryption
5a:25:90:ca:b1:2a:bf:b9:b3:7e:38:46:1d:36:90:8e:8c:26:
ec:4d:67:b4:f5:b2:76:4a:d1:b7:29:66:e6:dd:18:e3:d5:b6:
81:07:88:2d:2a:06:c6:26:b9:47:42:7e:39:1f:e2:2e:2d:03:
61:1a:c5:68:c5:40:9b:23:a1:57:ee:08:30:5e:bb:be:33:fa:
18:38:62:ec:b9:76:3f:35:4a:ee:43:fb:00:87:67:ec:43:6e:
3d:b6:ca:d7:cb:e1:b7:a8:a5:de:d4:9f:f7:28:27:26:ed:ea:
b6:4f:bc:97:80:20:bf:b2:2e:1c:5d:b4:ee:da:2e:9a:64:5d:
c0:82:61:8b:55:47:4b:e9:87:c2:e5:6a:26:c2:fe:18:d3:49:
8c:83:f0:db:44:12:40:63:78:86:02:14:fd:2b:e1:ca:a7:64:
94:24:e7:5d:be:5f:64:c9:8e:65:73:d8:24:c2:f5:ad:fd:99:
1c:ce:55:78:42:2f:a9:14:c3:37:54:ed:d2:22:ce:b4:35:af:
65:a7:67:10:fa:83:53:29:0c:42:36:17:7c:bb:94:c5:74:c4:
e1:da:dc:56:48:c3:97:8f:5e:1b:80:19:b1:0f:bf:06:94:c7:
62:8e:fe:2a:d6:ee:c7:86:01:23:68:c0:59:d4:c4:79:b7:60:
a1:3f:10:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:08:55 2026 by rpki-client