Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/_1k7aD1pJc1dP6ROGmgBNubXBX8.roa
File: _1k7aD1pJc1dP6ROGmgBNubXBX8.roa (raw, json)
Hash identifier: SyZGJBecgHfe5bgZ/8yWI4SNGnln7fvsWruQG0yMOLk=
Subject key identifier: FF:59:3B:68:3D:69:25:CD:5D:3F:A4:4E:1A:68:01:36:E6:D7:05:7F
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019F2C9A18FAD588F23A67F3DCA4FBA14A30
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/_1k7aD1pJc1dP6ROGmgBNubXBX8.roa
Signing time: Sat 04 Jul 2026 10:08:44 +0000
ROA not before: Sat 04 Jul 2026 10:08:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215228
IP address blocks: 2a06:9801:7fc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:2c:9a:18:fa:d5:88:f2:3a:67:f3:dc:a4:fb:a1:4a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jul 4 10:08:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ff593b683d6925cd5d3fa44e1a680136e6d7057f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:65:ff:19:0e:e1:b4:c4:82:c4:f6:06:bd:19:
8f:c0:f4:8d:0c:ef:ca:98:38:3d:68:a7:63:36:b1:
03:19:67:3c:bc:3f:bb:61:dc:d4:35:10:83:db:32:
51:15:a5:a7:90:e5:a9:9c:7e:ba:1e:b0:7d:3d:fd:
4a:7b:72:b2:1d:40:17:e3:65:8e:a6:17:59:a9:e6:
f3:63:e5:6f:c3:0b:8f:9e:a8:18:8b:ad:02:8a:d1:
fa:c4:44:74:0b:47:de:d2:a4:73:eb:97:21:40:7d:
bc:47:91:64:89:b3:0c:f8:47:e7:d6:d0:22:b7:74:
a4:89:a4:4c:8f:c1:d5:6c:64:65:f0:e1:5a:d5:5e:
55:a3:bc:ce:91:d5:cc:16:76:8d:3b:cf:0e:82:c5:
3e:b5:ca:6d:d8:ed:61:ab:5b:62:c5:40:98:56:2f:
97:26:e3:65:d3:c2:cc:56:c9:33:d5:41:b4:ae:14:
67:ad:75:a0:4e:92:83:f1:f4:21:44:d3:1b:4c:4f:
c6:ec:d8:c2:0b:d9:9b:2f:88:2a:f2:c4:26:c1:99:
8d:f5:98:c3:c9:01:f3:d2:f9:40:f3:1f:6b:d5:94:
cf:1f:eb:71:fb:bb:48:b1:5a:f8:ea:90:69:2c:62:
c5:b4:53:4b:0e:1c:a7:da:a7:ad:d2:d2:58:6c:08:
d2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:59:3B:68:3D:69:25:CD:5D:3F:A4:4E:1A:68:01:36:E6:D7:05:7F
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/_1k7aD1pJc1dP6ROGmgBNubXBX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:7fc::/48
Signature Algorithm: sha256WithRSAEncryption
80:d8:9d:41:79:ef:f2:fb:e2:4e:90:46:6e:54:28:0b:0e:96:
cb:dc:d4:67:40:b5:70:2c:d4:51:b8:18:f1:f2:1f:aa:94:90:
b5:c4:84:d9:fa:cf:f7:7a:4b:b7:1f:48:11:fb:b7:4f:50:ac:
86:6e:2f:26:0f:e4:00:e1:23:2f:05:c7:0e:75:8e:f5:cf:1c:
df:d7:b4:66:da:44:b8:25:29:46:ae:7c:3e:77:a2:68:9c:ad:
1f:dc:a1:5b:01:e8:cc:80:51:fb:c6:d0:67:46:17:a0:0f:ca:
6e:07:5c:32:7a:e1:7f:92:d8:d9:10:ad:5d:7c:0f:0b:44:c7:
87:75:24:57:c9:f7:ad:bd:8d:f9:8a:06:a2:e5:33:64:84:3e:
43:c4:53:08:a1:7d:31:64:fe:bb:ee:67:4b:83:ed:e0:89:fd:
e4:5a:f0:86:b1:17:ea:35:14:1c:8a:34:27:0f:d9:a2:ce:a3:
88:f9:ba:61:8e:42:71:73:bc:2d:67:74:8d:78:9f:e1:69:ee:
46:23:0f:e3:c1:ab:a3:f0:a9:a7:f5:93:c2:78:11:0e:b7:a9:
50:ef:89:fa:9d:ba:f5:1e:4c:36:e1:14:eb:65:50:79:a3:40:
e2:22:1a:dc:78:12:22:82:a6:38:aa:31:d2:c5:aa:b1:a1:3b:
05:98:3e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:30:33 2026 by rpki-client