Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/ZMYTVKWGdnLJDQ80AoKZVYljYHM.roa
File: ZMYTVKWGdnLJDQ80AoKZVYljYHM.roa (raw, json)
Hash identifier: Sp6UVNu0sZZCMQ2IL8EpFn8nNSMUHMNrziKrPm0Wylo=
Subject key identifier: 64:C6:13:54:A5:86:76:72:C9:0D:0F:34:02:82:99:55:89:63:60:73
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019F717C8A1B07C54E650B0BEFB696EFD64F
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/ZMYTVKWGdnLJDQ80AoKZVYljYHM.roa
Signing time: Fri 17 Jul 2026 19:10:15 +0000
ROA not before: Fri 17 Jul 2026 19:10:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215666
IP address blocks: 2a06:9801:f50::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:71:7c:8a:1b:07:c5:4e:65:0b:0b:ef:b6:96:ef:d6:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jul 17 19:10:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=64c61354a5867672c90d0f340282995589636073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:01:1d:71:a8:57:5b:d7:21:5f:76:b6:41:6c:
d4:5f:f2:22:28:64:c2:a6:67:8e:9f:fd:84:fc:0b:
74:d9:84:03:d3:51:62:1d:06:11:2e:49:94:8a:94:
62:10:71:f1:eb:3e:4f:13:27:cc:d5:27:01:ab:56:
12:35:f2:a2:c0:e9:8e:b0:28:b3:2b:e9:3f:f8:09:
27:9f:21:b2:89:1c:0a:0f:48:68:7a:30:43:50:be:
1f:09:ff:10:ee:7a:72:2f:82:ed:a1:41:3c:5d:0a:
46:3e:bf:f3:53:0c:9a:21:44:d0:a6:28:ad:8a:35:
4b:22:48:04:df:1b:8d:0d:52:f1:06:c8:2f:54:7b:
56:06:7e:72:01:ac:c9:29:81:7f:70:6a:83:f8:dc:
08:30:2f:23:52:83:bb:bf:b2:57:97:86:1a:7e:03:
12:9b:7b:96:5a:e0:dd:c3:2d:6b:cc:a4:b0:f2:bc:
75:f1:06:96:bb:5e:b1:06:86:1e:65:da:5f:aa:ef:
ea:e3:e8:20:21:b9:ea:8e:5e:0b:25:db:13:7d:26:
d6:44:e2:0a:e9:f6:bc:9c:58:31:97:27:4a:4d:87:
e5:ef:bc:40:dd:49:19:1b:8c:7c:c7:98:58:ab:35:
34:d2:77:44:34:cd:21:df:0f:97:16:93:d9:c7:f2:
16:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C6:13:54:A5:86:76:72:C9:0D:0F:34:02:82:99:55:89:63:60:73
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/ZMYTVKWGdnLJDQ80AoKZVYljYHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:f50::/44
Signature Algorithm: sha256WithRSAEncryption
7a:c5:fe:8e:b6:47:2e:d2:b3:2b:cb:a5:73:d0:26:d2:f6:62:
92:02:35:73:cd:ba:48:ac:60:34:f1:2a:61:cd:e7:08:13:02:
c5:3f:a2:49:90:cf:65:d2:15:78:31:1a:2a:95:47:42:8b:16:
41:75:0f:18:79:94:c4:2e:26:2c:5e:c1:3b:a4:72:24:79:4a:
a6:ad:01:08:df:13:c4:e1:32:86:7b:e9:cc:61:d9:cb:ed:3d:
24:2c:3a:35:dd:57:9d:b3:36:d9:4b:15:3c:1f:41:fa:57:39:
68:fd:db:c5:ba:7e:62:c1:27:e6:f9:c4:83:e0:76:6e:70:44:
c7:cc:ec:9d:1c:11:b3:09:37:06:a0:0a:0d:c7:35:63:f3:06:
27:51:df:44:6d:87:6f:6c:d3:74:bc:77:f4:ab:18:8b:a0:b1:
53:49:77:b9:02:ff:e3:12:10:34:71:74:65:b0:eb:fc:45:9c:
f1:0d:dc:f0:83:9d:bb:9e:b0:2c:d9:3c:1d:ae:24:f6:b4:8c:
18:20:c6:56:12:0e:73:6d:03:47:56:fd:74:30:90:03:ea:b5:
ac:ee:47:60:db:d0:0b:55:e9:15:b7:83:29:60:12:cd:78:95:
d0:fb:63:57:9b:1e:74:34:33:56:40:76:df:82:9f:47:e3:27:
d4:eb:0e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:46 2026 by rpki-client