Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/fFE7N5Ue8UTOqoOrokANnx_Kq58.roa
File: fFE7N5Ue8UTOqoOrokANnx_Kq58.roa (raw, json)
Hash identifier: zV8QKOqlw8KoAsiqTjKETRcYOHpaNx0xZavfj3yagYw=
Subject key identifier: 7C:51:3B:37:95:1E:F1:44:CE:AA:83:AB:A2:40:0D:9F:1F:CA:AB:9F
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A1880FAADC6643F16EFD563F84543EE00D
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/fFE7N5Ue8UTOqoOrokANnx_Kq58.roa
Signing time: Thu 29 Oct 2026 14:28:10 +0000
ROA not before: Thu 29 Oct 2026 14:28:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218243
IP address blocks: 2a06:9801:1597::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:88:0f:aa:dc:66:43:f1:6e:fd:56:3f:84:54:3e:e0:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Oct 29 14:28:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c513b37951ef144ceaa83aba2400d9f1fcaab9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:be:cd:f4:48:bd:9a:06:84:54:67:14:58:1a:
a0:b1:43:0b:c2:ba:4e:07:34:8a:e1:23:39:ac:b7:
a5:01:7c:9d:79:a6:e8:ef:72:dd:a8:97:2b:48:88:
8f:f1:63:04:0c:bc:2b:94:c0:d0:e2:e7:71:28:d8:
f6:dd:23:93:6f:65:52:4c:5d:2a:db:04:ba:aa:1b:
2f:6d:d9:cd:8d:b6:d5:90:e8:dc:76:f3:ce:c6:c7:
26:90:fe:33:5b:a1:82:8b:76:d3:7a:6b:65:fb:34:
a0:90:79:75:37:8e:8b:6d:05:26:9f:da:f6:40:54:
c9:15:bd:6a:64:e1:27:73:5b:29:75:7b:62:09:5b:
66:4e:d5:cd:a1:20:96:79:35:eb:11:d1:1f:ba:b8:
30:c6:6a:06:c2:78:56:44:57:ab:98:10:a0:65:bb:
d8:56:85:a4:00:36:6c:1a:03:63:c7:1c:8f:9e:29:
25:b6:3d:40:1c:b0:5d:15:93:50:a3:63:0f:75:b3:
ba:cb:cd:08:32:bc:af:ba:2a:f3:dc:41:6b:63:7a:
77:29:e2:97:9e:da:46:30:09:31:8a:b0:59:6c:de:
76:a6:cb:a5:f9:1b:6a:7a:a5:66:e2:9a:cc:52:41:
69:ac:51:a7:bc:78:77:09:42:c6:6d:7a:35:ce:ff:
3c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:51:3B:37:95:1E:F1:44:CE:AA:83:AB:A2:40:0D:9F:1F:CA:AB:9F
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/fFE7N5Ue8UTOqoOrokANnx_Kq58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:1597::/48
Signature Algorithm: sha256WithRSAEncryption
34:8c:67:50:3e:a5:06:6f:a7:99:ee:c8:d5:f8:ce:58:2b:84:
64:63:c2:15:c9:e7:ef:01:a9:da:33:4f:b8:a4:58:f9:7f:c4:
19:16:25:b8:0b:23:37:05:ec:6b:b9:0d:e1:b8:41:c7:cd:32:
04:9d:b7:88:55:2d:7e:a1:ea:e3:52:03:66:9a:a4:b0:e0:db:
67:2e:06:01:6f:e0:90:1f:70:35:f7:55:c2:c7:3c:45:e6:f1:
0a:69:06:56:b3:74:5e:c4:70:c3:76:ba:ed:b2:23:a9:d5:b3:
2f:f8:b1:5c:67:c8:3f:d0:e7:19:9b:58:51:e1:b8:f9:e8:e1:
ae:43:76:ba:68:07:b3:6a:5f:4f:c2:f3:0e:30:27:c4:8d:78:
6c:4b:57:d5:4f:bf:f7:1c:9f:be:9d:82:cc:24:10:6d:ca:b8:
eb:e7:47:73:ea:89:07:48:58:82:01:58:8f:9b:0a:3b:8a:51:
12:9d:a0:67:f2:bd:fa:94:75:68:21:04:8c:7e:2e:53:42:bc:
e3:1d:1e:f6:d7:14:c9:01:95:75:62:9d:8d:47:03:ff:db:98:
ed:4b:a5:fd:e8:66:ed:5d:f5:00:8a:fb:fe:d2:be:ff:3e:8f:
52:0e:e9:5f:98:97:43:d3:da:0d:ee:32:73:6b:54:13:20:c9:
7e:58:76:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:32:15 2026 by rpki-client