Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/_AVYGz8_JYhNLzUhyzBIeDJfiSo.roa
File: _AVYGz8_JYhNLzUhyzBIeDJfiSo.roa (raw, json)
Hash identifier: g0JE+KIKR2uOiFuQ6q9QPkcRQFihl1lp8/6ju5PpLA4=
Subject key identifier: FC:05:58:1B:3F:3F:25:88:4D:2F:35:21:CB:30:48:78:32:5F:89:2A
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019F7FF782485A119F996687432D21B67E52
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/_AVYGz8_JYhNLzUhyzBIeDJfiSo.roa
Signing time: Mon 20 Jul 2026 14:39:14 +0000
ROA not before: Mon 20 Jul 2026 14:39:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212895
IP address blocks: 2a06:9801:81::/48 maxlen: 48
2a06:9801:7f6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7f:f7:82:48:5a:11:9f:99:66:87:43:2d:21:b6:7e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jul 20 14:39:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc05581b3f3f25884d2f3521cb304878325f892a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:06:da:e4:ae:ca:1e:c0:91:ab:45:0a:b1:3e:
ac:aa:34:d7:ed:34:f1:ab:b9:0b:bb:5e:86:3a:23:
df:3c:3f:8c:25:c3:b1:62:16:65:0b:85:54:db:1b:
b1:7f:c7:1d:05:4e:f5:af:11:7b:e7:3e:08:e6:2c:
41:8c:5d:05:e1:de:14:59:cf:3f:5f:e0:7d:62:d4:
9e:1f:bf:d8:3b:fd:38:d7:1a:1d:1a:bb:27:5e:57:
a5:06:36:24:2d:a9:b3:d8:48:03:26:c4:05:74:69:
6f:f4:ed:8e:40:8f:5a:1c:65:76:10:cc:e5:0f:b8:
df:be:39:6b:ea:f3:4d:28:30:d1:90:91:06:ae:55:
68:be:ea:73:ee:6b:25:13:b3:b6:0e:26:af:5c:0d:
c8:06:8a:56:88:81:50:d1:d9:15:bd:90:7f:e0:56:
e3:97:3d:92:f7:51:ab:28:f7:bf:be:22:23:b9:97:
8c:53:e8:26:95:3b:59:22:62:38:1f:a3:8a:80:1b:
d1:61:cd:61:87:96:d8:cc:78:c5:af:28:d0:e6:53:
b1:24:9e:f5:cf:39:2a:62:17:46:be:c7:f1:35:b7:
73:4e:1c:33:f3:df:6f:dd:25:93:5e:b3:1e:22:25:
b4:da:52:c1:c5:49:c7:63:ac:9e:27:42:16:5f:71:
9c:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:05:58:1B:3F:3F:25:88:4D:2F:35:21:CB:30:48:78:32:5F:89:2A
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/_AVYGz8_JYhNLzUhyzBIeDJfiSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:81::/48
2a06:9801:7f6::/48
Signature Algorithm: sha256WithRSAEncryption
59:18:33:b5:b6:00:47:fd:47:62:1a:a7:90:2b:f1:79:88:47:
ab:c0:cc:19:39:03:0e:80:02:60:73:c1:ad:e8:30:43:12:d5:
f5:cb:26:46:03:a5:8f:79:72:69:3c:cc:8f:fc:a3:14:65:53:
d3:89:48:27:20:32:b4:bc:c1:4e:81:60:3c:f7:7d:ba:a1:97:
05:96:f8:8f:ee:30:c2:8a:f0:29:8e:4b:c8:5a:06:39:52:9d:
d5:d7:ba:96:89:bd:b6:4d:78:ea:b4:ac:6e:ef:75:d9:6e:de:
ca:72:e4:40:fe:45:07:15:83:cd:52:ae:13:5d:ff:50:d7:ca:
06:13:f8:da:60:c4:bb:64:e6:5f:c5:3f:fa:d7:83:07:f6:23:
d9:cc:15:09:c0:8f:65:21:ed:28:dc:96:d3:ca:8e:a0:39:59:
46:ba:4c:10:0f:ca:9a:ce:e3:ab:9a:85:47:be:50:36:a0:b6:
04:b7:b1:1d:72:bd:b6:7f:b4:a3:3d:a5:3b:f3:16:2a:a4:2a:
11:27:4e:59:fc:c9:1c:81:29:0e:4f:96:9c:3e:c3:47:c8:13:
43:5b:24:4e:14:66:5e:25:1a:c3:62:65:f1:36:06:6a:0d:f7:
f8:2e:03:64:37:ba:e4:d0:20:67:4b:1e:95:ab:de:84:56:ef:
04:74:e5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:26:59 2026 by rpki-client