Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/X4C3gUR3_XNbR69XcH1bp4iWvIs.roa
File: X4C3gUR3_XNbR69XcH1bp4iWvIs.roa (raw, json)
Hash identifier: 6pZcdaY7kg4bLWNYVhUjKUjE2pc8eK9EySONynaDipE=
Subject key identifier: 5F:80:B7:81:44:77:FD:73:5B:47:AF:57:70:7D:5B:A7:88:96:BC:8B
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019F293AC2DB941B3EDC34D06BBB7DC0AAA4
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/X4C3gUR3_XNbR69XcH1bp4iWvIs.roa
Signing time: Fri 03 Jul 2026 18:25:44 +0000
ROA not before: Fri 03 Jul 2026 18:25:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219315
IP address blocks: 2a06:9801:7d5::/48 maxlen: 48
2a06:9801:7f9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:29:3a:c2:db:94:1b:3e:dc:34:d0:6b:bb:7d:c0:aa:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jul 3 18:25:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5f80b7814477fd735b47af57707d5ba78896bc8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3c:eb:55:9d:b4:67:6a:02:50:f6:98:ed:b7:
06:d5:31:10:a6:1b:56:5f:03:ff:1a:2b:4d:ab:e0:
58:8b:c2:20:a1:5f:3b:09:48:9a:43:f0:79:2a:ae:
09:d8:05:d5:f1:1e:b5:c5:ee:4c:e8:ee:0b:f4:d5:
e8:98:7c:f9:86:9a:a5:10:e2:f9:ca:bb:a8:bd:d5:
c8:4d:8d:bc:a4:2d:75:5f:7c:4f:a0:f2:df:8c:b2:
7a:30:c5:1b:2d:f6:ba:22:06:f6:30:49:6a:bb:2e:
52:06:05:b6:b7:c1:68:97:ae:4e:91:39:66:98:ac:
cc:06:ea:45:d7:41:8e:e6:10:85:f6:3a:c3:85:90:
e6:96:d4:79:69:dc:4a:a1:9a:d2:eb:d6:ac:6e:36:
14:c1:7c:05:c2:ee:d9:22:4d:ae:b9:ae:1e:31:7c:
2c:6a:c5:e2:fe:d7:c6:e6:59:1c:6c:70:9c:4d:ab:
4c:d9:66:64:1c:fc:d2:2e:1b:29:94:ce:de:45:bc:
96:7b:73:7b:9a:de:5c:ca:f5:67:93:54:1a:44:b4:
b4:a5:ef:11:3b:0b:3e:32:ef:46:3e:1a:ee:4d:79:
da:e9:47:be:bf:5b:11:b7:ae:f9:3c:66:1a:0d:2b:
cd:23:40:1c:de:50:d0:32:d5:ec:e0:b1:ae:70:4a:
a3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:80:B7:81:44:77:FD:73:5B:47:AF:57:70:7D:5B:A7:88:96:BC:8B
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/X4C3gUR3_XNbR69XcH1bp4iWvIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:7d5::/48
2a06:9801:7f9::/48
Signature Algorithm: sha256WithRSAEncryption
92:a6:c1:ac:f3:bc:3c:74:c3:00:b8:03:14:4e:69:b6:8c:7f:
75:f1:f7:0f:67:0f:0d:58:da:1d:90:f0:e7:49:9b:8e:19:ca:
3b:de:76:c5:86:d6:2c:d2:bd:87:6d:ba:36:5e:23:1a:c7:bb:
44:ec:12:d3:ef:65:61:cb:55:5d:fb:7f:ac:b6:1c:6e:1d:06:
c2:0d:3a:78:33:f4:42:d5:73:d8:7a:65:9a:24:98:02:35:cc:
31:22:82:0f:b3:09:7f:22:81:be:8a:3d:0f:19:e0:d1:dc:e3:
c0:e8:ab:09:94:dd:aa:99:eb:47:33:27:ae:3b:c1:4b:38:25:
e2:b0:8d:a7:d3:d9:8c:7d:e0:00:d8:00:71:d0:47:b3:2d:47:
1a:36:5e:d3:e8:14:ee:98:bc:6e:39:44:8b:08:42:3b:8d:82:
cd:43:72:57:b8:51:51:3b:94:2f:a1:d0:6c:7b:51:d8:0a:f5:
40:b9:0d:d2:33:7a:04:da:69:16:b6:fd:5e:d8:72:7a:70:9f:
ef:de:39:01:81:c3:ab:2a:13:06:df:4d:c5:2b:72:ce:4d:37:
d7:53:37:9c:59:34:9a:f9:ba:9d:18:1d:1c:83:fa:96:2b:43:
50:70:a3:62:b6:71:9e:bc:d0:7c:e1:85:2a:88:af:dd:43:34:
06:19:23:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:17:34 2026 by rpki-client