Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/dIDylzBPLrVgyiU2Yo9QItXFrfA.roa
File: dIDylzBPLrVgyiU2Yo9QItXFrfA.roa (raw, json)
Hash identifier: ZeMvNvZaZnZFsC3T/2vZ38YZZb3K7iyuEh8CnBZNqLw=
Subject key identifier: 74:80:F2:97:30:4F:2E:B5:60:CA:25:36:62:8F:50:22:D5:C5:AD:F0
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019F6A6DC6322DB6BA6A8616469A64281438
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/dIDylzBPLrVgyiU2Yo9QItXFrfA.roa
Signing time: Thu 16 Jul 2026 10:16:46 +0000
ROA not before: Thu 16 Jul 2026 10:16:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219205
IP address blocks: 2a06:9801:f13::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6a:6d:c6:32:2d:b6:ba:6a:86:16:46:9a:64:28:14:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jul 16 10:16:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7480f297304f2eb560ca2536628f5022d5c5adf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ed:9b:d7:17:8b:b0:cd:56:84:54:1a:37:23:
28:eb:50:ee:5b:0c:48:7a:b8:92:1a:05:4e:bb:25:
1e:83:86:4c:95:85:55:d5:46:77:b0:cf:c9:09:b8:
ff:9a:eb:ac:37:dc:92:43:b2:34:e3:8d:95:97:74:
84:9c:5c:e2:af:27:8b:2c:e2:90:c4:ec:04:e3:9b:
ac:9b:9e:69:e0:28:9c:c3:9d:cf:d5:7d:0a:6c:4e:
90:f1:71:31:59:25:d7:e3:55:1b:16:f2:61:f9:a9:
d4:a3:e5:0f:5b:bf:04:e5:92:af:a1:0d:76:38:0d:
5a:d0:a4:30:52:1e:93:a5:06:e9:de:83:d9:e3:2f:
bf:76:c2:09:33:c3:69:58:23:e4:db:28:60:7b:85:
8f:08:58:25:08:d1:c0:25:cd:a4:c8:04:d5:85:66:
90:73:18:4a:4c:a7:7e:47:b9:c3:ad:40:7b:e0:3e:
6e:7c:92:d2:9a:e6:25:91:23:74:48:73:f7:e9:f4:
9c:3c:cd:69:24:ba:1a:36:47:1d:73:8f:6a:1d:64:
53:8c:22:63:d5:23:0e:af:ea:ee:25:e2:23:a7:36:
65:6d:ff:0c:61:5b:a6:5d:0a:2c:b8:1c:bf:44:a7:
25:b3:74:42:6e:55:0d:14:2d:3b:78:4e:7a:fd:90:
c5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:80:F2:97:30:4F:2E:B5:60:CA:25:36:62:8F:50:22:D5:C5:AD:F0
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/dIDylzBPLrVgyiU2Yo9QItXFrfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:f13::/48
Signature Algorithm: sha256WithRSAEncryption
ba:b4:e6:dd:d3:75:25:92:dc:bc:63:5b:9d:e6:64:55:07:16:
7b:df:ae:cf:07:08:7a:06:e5:d3:95:c0:dc:38:dd:d1:4c:0f:
32:a6:0f:c7:e0:a2:32:d2:b7:5d:58:bf:67:57:c3:d5:59:1d:
64:38:71:9d:02:1e:43:09:44:48:e4:44:6e:3e:a8:66:41:c7:
e8:bc:47:27:33:02:11:5f:1c:cf:72:d0:52:c7:8c:8e:82:d9:
13:12:27:61:d0:38:7c:a6:a4:db:d4:1e:58:08:f0:e2:b4:70:
d6:7c:87:16:b8:5b:6f:f9:29:10:ba:76:b6:dd:43:96:a2:72:
0e:b4:b5:c5:01:fa:57:26:0e:b4:05:0a:4b:4c:39:61:97:5d:
8a:d1:4f:bd:43:2b:9d:b2:c6:78:46:82:e7:57:b9:30:f0:c5:
64:19:d9:21:c2:a7:5c:67:e0:8c:e0:97:3b:9c:b9:2f:e2:a6:
67:6c:97:15:0d:3f:db:2a:5a:5e:3b:92:bf:5e:fd:fc:70:03:
dc:f5:8d:f0:f6:b0:87:1a:c1:fc:a1:d2:f5:57:96:bc:ec:8f:
40:bd:6e:7f:dc:5e:1f:36:3f:5f:0f:3f:6b:11:da:e6:8e:8b:
5d:12:e6:39:02:1c:c8:38:9b:d4:43:ae:81:c5:21:2a:fa:53:
8e:77:5a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:41:12 2026 by rpki-client