Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/Y37m-uzOsi_w-hNd8eMsfB-7zSI.roa
File: Y37m-uzOsi_w-hNd8eMsfB-7zSI.roa (raw, json)
Hash identifier: p3dhl5p7X3fdamFjmR+czKqkxeNFVxPMeu+iOcM9UX0=
Subject key identifier: 63:7E:E6:FA:EC:CE:B2:2F:F0:FA:13:5D:F1:E3:2C:7C:1F:BB:CD:22
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019F3CCE5A1BFA368BC95A247B983496AA59
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/Y37m-uzOsi_w-hNd8eMsfB-7zSI.roa
Signing time: Tue 07 Jul 2026 13:39:44 +0000
ROA not before: Tue 07 Jul 2026 13:39:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219260
IP address blocks: 2a06:9801:7f6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3c:ce:5a:1b:fa:36:8b:c9:5a:24:7b:98:34:96:aa:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jul 7 13:39:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=637ee6faecceb22ff0fa135df1e32c7c1fbbcd22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e5:3c:55:7d:6a:92:a9:e4:0c:5d:05:20:f6:
80:b0:1b:9e:dd:41:2b:49:38:26:e4:0c:2b:31:0b:
d3:cf:e0:85:dc:1e:97:56:bd:2d:97:51:b5:c1:36:
3a:4f:b6:d4:f3:1c:dc:4e:a9:43:24:4b:6e:a3:49:
6c:40:b5:a0:30:ac:a3:91:21:ac:0e:e2:57:f1:8f:
c2:22:1b:07:c5:01:52:07:a4:5f:be:86:ac:45:36:
f4:c7:15:d2:10:57:ac:6e:af:41:04:87:56:73:8a:
5a:1b:9d:9d:7e:5a:57:c7:ee:b3:fd:1b:88:92:a8:
ad:95:75:60:26:92:1f:9f:d0:bc:be:7f:6a:a5:ab:
c0:b8:74:95:83:a7:09:87:75:50:bf:22:f7:03:a2:
85:9e:1f:a6:1e:24:58:29:d0:a6:e9:76:36:b1:38:
e3:3a:e1:6e:e4:46:8d:e1:b3:81:a6:34:99:a1:45:
a2:2e:59:ed:04:a0:37:35:fe:f6:76:aa:a3:cd:24:
f4:eb:f8:0a:82:4f:f7:bb:ff:58:f8:4d:24:2c:b2:
7a:07:bb:6f:27:77:35:cd:7d:bf:f4:72:07:a7:cd:
98:db:bb:c7:9e:18:e4:7d:61:7b:19:98:69:c4:d7:
0e:7c:23:b2:0e:9c:3d:11:ad:82:fc:69:77:3f:62:
9a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:7E:E6:FA:EC:CE:B2:2F:F0:FA:13:5D:F1:E3:2C:7C:1F:BB:CD:22
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/Y37m-uzOsi_w-hNd8eMsfB-7zSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:7f6::/48
Signature Algorithm: sha256WithRSAEncryption
7b:51:5d:b8:1d:1b:29:4c:ea:32:b5:60:f3:23:d2:6d:93:de:
d6:a4:18:39:c6:4f:89:cb:14:e2:eb:d6:e0:ad:87:3c:f6:31:
ea:98:83:5d:22:b3:1a:d2:3d:a2:7e:b4:ec:bc:05:ef:44:df:
af:51:0f:3f:dc:f2:7d:02:09:fd:13:c4:c6:3f:80:40:84:ed:
1c:40:cf:55:08:32:a5:54:99:85:7d:2f:09:ae:96:49:f0:06:
27:aa:0c:b9:01:52:21:9b:1b:46:89:32:b2:22:3a:1d:18:6a:
e1:63:e8:98:61:2a:8c:7e:ea:0e:d2:a0:f2:bb:05:82:85:03:
03:f9:cc:45:00:79:07:18:15:a8:6f:5d:e4:b1:9a:08:a8:1f:
bd:a2:8a:6e:0f:c8:b3:7c:9d:14:a4:a0:91:d5:38:0c:8e:48:
6e:f3:e8:16:4f:ab:6d:b6:86:a4:5c:05:e6:28:a6:0a:9d:50:
47:5f:45:14:bc:c2:49:07:aa:47:3e:6b:0d:4a:b0:06:c8:05:
45:98:18:f0:3d:5d:85:2d:0f:ab:28:20:d3:e9:f7:f0:fc:99:
ed:9b:c4:e7:7b:ee:4d:e1:e6:c1:07:e7:88:da:9d:89:69:5c:
59:e3:d8:38:9a:6c:62:ff:f4:43:d8:29:33:fe:e3:7d:b7:6a:
bb:b5:db:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:18:02 2026 by rpki-client