Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/_sihwlSccIUU5PWD1LmOwoEL2jk.roa
File: _sihwlSccIUU5PWD1LmOwoEL2jk.roa (raw, json)
Hash identifier: l1ilKVU65vz15TbG0NhJbO+LezkS4PkkflWAik23tC8=
Subject key identifier: FE:C8:A1:C2:54:9C:70:85:14:E4:F5:83:D4:B9:8E:C2:81:0B:DA:39
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019F70BF07C2BACBE69B954EB5606CCD2F49
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/_sihwlSccIUU5PWD1LmOwoEL2jk.roa
Signing time: Fri 17 Jul 2026 15:43:15 +0000
ROA not before: Fri 17 Jul 2026 15:43:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219175
IP address blocks: 2a06:9801:f1a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:70:bf:07:c2:ba:cb:e6:9b:95:4e:b5:60:6c:cd:2f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jul 17 15:43:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fec8a1c2549c708514e4f583d4b98ec2810bda39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:33:79:b6:62:07:eb:5a:5b:3b:ee:fb:ca:11:
f5:68:76:b9:a9:7a:67:e6:c5:8e:63:3e:10:80:91:
33:00:e1:3a:12:52:0b:c1:69:26:ff:57:3f:46:cb:
c7:a5:ca:95:c5:4f:e7:40:e3:6b:11:61:45:ea:9c:
62:c8:e6:ae:8b:0c:ba:ff:61:48:1b:a2:78:3f:5e:
38:ae:2a:fc:0f:ca:2f:7a:0c:22:58:d8:cf:4b:f2:
ec:c5:db:dc:d4:f4:4f:75:cf:8c:7f:19:10:36:a6:
30:48:11:b7:d6:c5:0c:f7:7b:4c:5b:6d:53:62:b0:
49:7f:43:99:d4:bb:a7:02:0b:23:ec:1d:7a:76:f5:
1a:32:30:29:b5:b0:f0:d6:ac:c7:3f:d1:c0:7c:d7:
56:d9:bd:a1:c9:74:d2:96:37:d5:6c:69:a8:74:7f:
6d:bb:18:35:ed:aa:44:cc:35:89:66:73:8a:41:9d:
94:76:ec:27:64:30:40:6a:37:3e:d8:a0:f2:b3:73:
c3:7d:04:39:a7:6c:b4:c7:bd:f7:51:8c:c3:91:2b:
fe:43:18:fc:27:9a:1e:73:5b:f6:fb:93:88:b9:f7:
03:33:07:d5:f8:f9:4e:39:f3:93:ca:f3:77:4f:00:
c3:54:bd:41:53:b2:23:a9:30:61:20:a6:21:bd:d7:
b8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C8:A1:C2:54:9C:70:85:14:E4:F5:83:D4:B9:8E:C2:81:0B:DA:39
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/_sihwlSccIUU5PWD1LmOwoEL2jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:f1a::/48
Signature Algorithm: sha256WithRSAEncryption
a8:07:b9:a6:dd:81:65:bb:d4:a8:28:16:87:ba:83:08:93:37:
1e:d2:3f:3c:17:0e:88:65:a9:6d:0a:70:0a:07:40:4c:82:fa:
b3:bf:8e:83:6a:91:bd:bb:00:bc:4a:60:14:d3:84:63:f5:f4:
f3:7d:4b:9b:27:52:da:24:58:be:e2:63:59:5d:f3:76:75:b2:
30:a9:ee:6f:68:df:d9:f8:09:f9:de:2c:a5:43:30:c7:9b:61:
7b:43:3e:c8:ca:d3:56:ff:cf:2a:29:e3:5e:d8:2a:17:9d:cd:
49:3b:d9:27:9f:1b:ef:a2:56:b2:ca:ed:1f:45:1f:0d:0c:63:
79:7d:54:dc:93:a0:b9:69:63:ff:a1:91:25:2c:e1:6c:6a:9c:
f5:ee:16:79:be:96:6a:6a:02:e1:06:b8:88:5e:c1:06:7c:9a:
d9:3a:bc:44:d4:ff:df:9a:ec:9d:59:4e:21:bd:4e:fb:4a:0c:
4e:66:7d:d7:53:5d:a8:98:0e:92:ce:fc:6e:17:0f:be:ff:aa:
f1:94:bb:d5:4b:a9:76:0c:03:43:93:ed:1c:3f:87:29:9b:f0:
d9:72:31:16:56:fc:af:99:c9:57:9f:86:e6:d0:54:76:98:3e:
a8:8f:65:e8:45:6b:58:7f:42:fa:20:30:aa:7a:58:f8:f5:57:
ba:d4:af:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:30:45 2026 by rpki-client