Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/eKRiy6Qf7xArfVTmBHJMN0MwuAA.roa
File: eKRiy6Qf7xArfVTmBHJMN0MwuAA.roa (raw, json)
Hash identifier: uMMtwWHicX1kqytCK8EbN7IEHHl3wSLDbEutiEgxhH8=
Subject key identifier: 78:A4:62:CB:A4:1F:EF:10:2B:7D:54:E6:04:72:4C:37:43:30:B8:00
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019DF93682F77CDFD25B912956FE5C9F5161
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/eKRiy6Qf7xArfVTmBHJMN0MwuAA.roa
Signing time: Tue 05 May 2026 17:36:32 +0000
ROA not before: Tue 05 May 2026 17:36:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197900
IP address blocks: 2a06:9801:2b8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:34:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f9:36:82:f7:7c:df:d2:5b:91:29:56:fe:5c:9f:51:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: May 5 17:36:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78a462cba41fef102b7d54e604724c374330b800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ff:77:9f:bd:5d:49:69:74:a0:99:be:8d:64:
e4:56:c2:82:dd:c1:8d:78:9d:07:18:2c:19:15:cb:
47:ae:d6:56:2f:6e:66:96:2a:67:fe:41:33:73:5b:
cd:dd:8e:d3:7e:e9:9c:a0:20:55:5f:33:03:75:d0:
c7:cf:8a:9f:15:36:1a:9b:3a:21:2e:a7:b8:c8:fc:
13:52:fb:c5:57:bc:7d:dc:5a:7f:d4:d7:fb:af:b6:
d0:b2:1a:3b:53:bf:6c:ff:52:f9:86:d0:b1:d0:65:
47:f4:8d:ec:75:77:32:b6:49:7f:3c:88:02:91:a0:
75:1b:d3:6d:38:a5:b6:c0:94:4b:7a:7f:55:03:31:
fc:41:e3:c4:14:bf:8c:7f:3c:26:9e:c0:fe:f5:f4:
65:aa:0f:23:6a:40:12:7b:ca:7f:18:d4:1f:d3:eb:
32:61:fe:77:14:58:f0:d8:e7:74:70:6c:05:f9:81:
93:19:b2:1f:56:e4:a9:a4:33:e8:f8:c2:f1:51:28:
12:7c:72:2c:6f:8d:52:61:40:ac:b1:d3:d6:dc:08:
56:7a:ba:29:36:0d:69:88:c8:b4:68:d8:50:90:b7:
45:0c:d1:5d:c8:95:f5:b2:c5:43:1d:e5:6e:09:b1:
cc:c3:9a:45:7e:1d:1d:2d:ab:48:11:52:f6:45:f3:
45:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A4:62:CB:A4:1F:EF:10:2B:7D:54:E6:04:72:4C:37:43:30:B8:00
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/eKRiy6Qf7xArfVTmBHJMN0MwuAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:2b8::/48
Signature Algorithm: sha256WithRSAEncryption
ad:13:10:57:b4:9e:4f:16:23:1a:f7:4d:a3:49:7d:e2:24:08:
32:ab:3b:c6:50:3c:3a:16:3d:ff:af:41:47:12:a4:a7:2d:3b:
07:7c:bb:8d:4b:d7:7a:4e:76:83:ec:77:b1:0a:66:63:10:d0:
84:24:f8:fd:31:2d:7c:f8:d7:21:bd:ba:f2:d3:f6:1d:65:29:
3b:ef:11:4f:7f:2c:35:2f:7c:83:87:d6:1e:31:38:03:3b:9b:
c8:c5:a7:a0:d6:7d:58:7f:9b:c9:d4:14:57:c2:02:ca:65:59:
65:4b:3d:75:93:b8:cf:ad:b3:96:7f:7c:7e:80:e8:61:44:cb:
5f:b2:96:cc:7c:72:88:2f:82:f0:17:79:2e:86:ef:ec:52:63:
5d:fd:1b:15:45:cb:3c:7b:25:39:9a:9b:ab:82:c5:10:12:fe:
fc:4e:be:45:1c:ac:18:1f:a8:c5:7b:0d:f7:a0:cc:54:5c:73:
eb:28:69:64:28:dd:ce:b9:c1:9d:31:d0:0b:7b:79:b3:c5:9b:
aa:c0:85:4a:1c:00:c5:40:d1:7a:90:c4:b7:ea:9f:c9:20:3a:
eb:26:83:da:68:e6:54:9b:2e:c5:c9:78:e8:78:dc:d3:03:89:
01:6d:21:34:ec:d5:f6:9b:57:c7:79:43:f2:69:7f:36:7c:c1:
39:bf:bd:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:45:53 2026 by rpki-client