Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/Y68pnCeUKG9WdpEEcTL7vNxk9jM.roa
File: Y68pnCeUKG9WdpEEcTL7vNxk9jM.roa (raw, json)
Hash identifier: w5iHpZ1E6OAf39clU73NJ69jkidJGEEmRrLh05f6D3Q=
Subject key identifier: 63:AF:29:9C:27:94:28:6F:56:76:91:04:71:32:FB:BC:DC:64:F6:33
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019F803D170F52DAC59CADBE2D8A3B8485B4
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/Y68pnCeUKG9WdpEEcTL7vNxk9jM.roa
Signing time: Mon 20 Jul 2026 15:55:14 +0000
ROA not before: Mon 20 Jul 2026 15:55:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219213
IP address blocks: 2a06:9801:7f1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:80:3d:17:0f:52:da:c5:9c:ad:be:2d:8a:3b:84:85:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jul 20 15:55:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=63af299c2794286f567691047132fbbcdc64f633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5e:20:f1:9e:a9:48:f7:d0:2d:49:22:11:d2:
fa:42:9f:fa:f2:9d:7b:6f:1a:8c:4b:a5:01:7a:d8:
bb:1f:56:da:33:9f:a5:2f:09:72:54:f5:11:ad:aa:
0d:9c:cf:3a:47:57:81:7c:25:67:2c:97:28:67:96:
ae:3f:cd:a8:46:a7:79:81:67:12:22:a5:cb:c3:00:
3b:8d:fb:b6:8d:8f:b7:41:73:6e:81:82:21:99:6f:
0d:c8:6f:2e:c8:6a:2f:b5:e1:24:6e:5c:91:ac:9d:
ea:55:08:c8:ed:bf:11:f9:dc:62:20:45:8b:27:31:
12:5b:ee:2e:8a:35:b4:dd:09:ff:59:45:02:1f:75:
5f:cf:d2:08:9a:11:7b:4c:a9:a8:a8:56:ce:61:d7:
6a:72:e5:fc:fd:39:c9:23:ab:f0:da:01:18:70:b4:
2c:b2:91:fd:9f:cf:51:6a:5b:ee:03:30:49:1c:a1:
47:76:ec:f6:99:81:15:79:3f:09:2c:24:44:7a:2c:
6c:c1:06:8b:4c:67:57:28:22:0a:54:f9:f4:51:3e:
19:70:21:07:2f:a5:35:3c:a0:1c:e2:b9:a3:8e:be:
5c:1a:8a:04:1d:93:87:11:34:73:e9:fa:f9:47:bb:
22:1d:97:29:be:6f:41:93:14:02:2c:d2:f5:b2:bb:
11:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:AF:29:9C:27:94:28:6F:56:76:91:04:71:32:FB:BC:DC:64:F6:33
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/Y68pnCeUKG9WdpEEcTL7vNxk9jM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:7f1::/48
Signature Algorithm: sha256WithRSAEncryption
45:6d:27:b6:d7:42:d0:03:4a:89:b9:04:c1:a2:ac:ad:72:84:
05:e3:90:d9:e7:13:8e:a2:63:e0:4f:36:93:6f:82:1a:c5:45:
05:a9:99:e6:32:86:0b:5f:2b:26:08:88:0d:89:b5:ce:b3:05:
4e:13:87:e3:f3:e5:78:cd:c8:c1:04:8c:d9:b4:0f:0c:56:12:
04:f0:a1:e4:33:87:36:1d:1c:cf:88:47:1b:38:85:97:9e:2d:
00:a3:4c:37:d9:62:bc:ba:ee:48:b0:15:9f:38:3f:43:ed:94:
14:02:d8:f5:c8:88:5e:15:db:10:fb:11:f4:51:51:85:33:38:
c0:56:15:45:8e:bf:bd:ce:0e:58:e4:01:ba:03:3a:cb:b5:ac:
23:86:35:57:10:d0:59:f1:87:11:0d:f1:96:49:7f:9c:d9:4b:
3f:d3:d5:5d:bf:0e:6d:db:84:47:42:86:19:ef:45:e7:b0:6c:
5d:fc:a8:78:19:80:65:06:e8:35:e3:62:8a:49:6f:96:6d:76:
9d:d1:88:1d:57:9c:92:71:0e:79:38:a3:18:e7:5b:2a:0e:de:
ea:3a:61:b2:08:66:02:4b:44:e4:58:ce:a4:83:3a:49:a3:da:
23:54:db:99:79:9d:5e:bc:fb:d6:0b:9e:29:06:24:ef:76:b9:
a2:5e:8a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:31:27 2026 by rpki-client