Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/WN03yh8BzSRSeOak_LsMX0Asp80.roa
File: WN03yh8BzSRSeOak_LsMX0Asp80.roa (raw, json)
Hash identifier: 9efAYt1TiLk6wkeDZDdpth8Py/sXzc4DotE8eLMhPR4=
Subject key identifier: 58:DD:37:CA:1F:01:CD:24:52:78:E6:A4:FC:BB:0C:5F:40:2C:A7:CD
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019F6074555CCE4C1B7AF7723B374BA8AA91
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/WN03yh8BzSRSeOak_LsMX0Asp80.roa
Signing time: Tue 14 Jul 2026 11:47:44 +0000
ROA not before: Tue 14 Jul 2026 11:47:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219241
IP address blocks: 2a06:9801:7f8::/48 maxlen: 48
2a06:9801:e00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:60:74:55:5c:ce:4c:1b:7a:f7:72:3b:37:4b:a8:aa:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jul 14 11:47:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=58dd37ca1f01cd245278e6a4fcbb0c5f402ca7cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:48:86:7b:ef:87:46:3e:fa:b8:c7:0b:78:b6:
59:cb:6e:f1:76:77:26:da:09:4e:67:f4:c8:c9:f7:
db:b8:bb:46:d6:52:0e:bd:c3:84:5e:68:23:b2:7b:
3c:51:0e:44:d4:e2:c7:a8:d7:6e:1c:61:98:e0:41:
10:2d:78:eb:e6:8d:50:a8:24:c7:12:2f:1b:3c:8b:
7c:eb:4a:14:77:1c:77:97:a0:a5:7e:43:31:84:90:
25:5d:2b:14:94:83:6a:47:72:7e:d9:86:11:3e:af:
c9:0a:6c:a6:04:8a:26:93:d0:a5:cb:e8:a2:6d:2d:
d4:e3:3c:60:0d:dd:f4:8f:79:19:90:29:e9:19:04:
7a:d2:ee:6a:a2:fb:26:5f:7e:58:0a:75:b0:ba:db:
a8:5c:a0:db:e9:ac:e3:87:ea:27:41:a4:fb:b6:76:
be:79:7f:15:7c:35:fd:b2:38:31:fc:f1:10:38:d9:
af:4b:25:f2:c1:35:d2:47:8b:4f:8c:5c:46:dd:1f:
74:79:c4:ec:9e:85:d7:a1:bb:fb:99:c9:74:df:03:
3c:37:6b:05:0a:09:1f:94:78:28:59:4d:86:4b:61:
4a:5c:1e:72:1b:3c:a7:ce:5e:f0:95:75:5a:50:56:
f1:b7:aa:e3:57:37:40:4e:b3:9a:cd:67:75:e5:14:
bb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:DD:37:CA:1F:01:CD:24:52:78:E6:A4:FC:BB:0C:5F:40:2C:A7:CD
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/WN03yh8BzSRSeOak_LsMX0Asp80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:7f8::/48
2a06:9801:e00::/40
Signature Algorithm: sha256WithRSAEncryption
3b:91:cd:7e:ae:19:90:ad:12:1f:9d:79:a8:48:61:8f:92:24:
bd:f9:93:32:d3:e0:a3:02:a2:43:06:89:3c:38:d8:9b:cf:42:
96:52:53:f3:fb:56:ba:4c:44:f4:28:7c:eb:96:34:66:26:ce:
d9:b3:d4:62:c4:04:9d:3a:42:6e:a8:cd:6f:4d:b4:3b:6b:86:
57:b9:53:0b:7c:52:ba:ea:b9:7a:2f:26:6c:6b:82:f2:b9:b3:
18:2f:50:5e:a8:d0:fc:78:c9:0f:44:75:5a:ac:0e:5f:bf:06:
0c:7e:93:ca:d3:ee:9b:49:74:d1:93:7c:ac:e9:12:85:6b:72:
e4:3e:d8:4d:ad:dc:92:98:cc:73:bc:f7:be:55:2f:a2:4b:20:
3c:6f:68:37:b3:49:f8:c2:35:bc:be:5a:b0:f9:0c:f3:1d:18:
17:5e:d3:7c:89:c4:7b:3f:3e:23:0f:e7:cf:70:21:cf:ba:1d:
19:57:43:91:3f:e4:81:b7:b1:47:9f:47:c9:b9:db:44:e5:e1:
7f:fc:d6:29:f7:26:77:1c:73:38:70:44:0f:e1:37:5e:63:c1:
6d:98:4e:bf:d1:36:89:41:d8:d6:04:40:28:bf:bc:4a:24:d9:
c1:72:96:98:53:a1:8d:ff:a9:b1:86:fa:16:2f:ad:74:11:99:
9c:ee:2d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:31:26 2026 by rpki-client