Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/gBFDNOTAcLOkXXksR3h5gWVVQq4.roa
File: gBFDNOTAcLOkXXksR3h5gWVVQq4.roa (raw, json)
Hash identifier: TPNJ6jHYmkGvvJq2OpZ/JsrMIGjdTbUcbvcqthwyy3U=
Subject key identifier: 80:11:43:34:E4:C0:70:B3:A4:5D:79:2C:47:78:79:81:65:55:42:AE
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019DB73D1EA54007E59BB2E26C9C02F1D52C
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/gBFDNOTAcLOkXXksR3h5gWVVQq4.roa
Signing time: Wed 22 Apr 2026 22:08:49 +0000
ROA not before: Wed 22 Apr 2026 22:08:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214726
IP address blocks: 2a06:9801:261::/48 maxlen: 48
2a06:9801:267::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b7:3d:1e:a5:40:07:e5:9b:b2:e2:6c:9c:02:f1:d5:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Apr 22 22:08:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=80114334e4c070b3a45d792c47787981655542ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a4:86:9c:c9:11:87:ff:34:7b:d2:40:3b:55:
9d:80:48:c7:27:54:bf:97:00:b5:7b:b9:71:f9:af:
74:23:83:83:5e:af:25:87:92:50:95:5a:d0:a4:65:
9d:31:98:29:51:2a:62:23:78:ea:da:9a:02:06:a0:
15:6b:1d:25:f4:e9:b8:a3:03:60:d7:14:8f:06:c8:
2c:4d:ce:2d:f5:06:bd:5d:6d:57:d1:9a:1a:8d:20:
55:4b:e2:c6:46:43:b5:d6:77:69:0c:56:c4:be:7e:
28:04:be:3a:63:09:bb:ce:cb:fd:97:3a:04:10:42:
69:c8:84:24:e0:07:61:c1:48:93:2a:f5:92:c6:bb:
8a:74:40:4f:ff:b1:2b:14:3a:ce:73:e6:6a:ed:6a:
88:78:54:e0:68:d9:81:89:11:99:30:b9:10:c3:e0:
9c:76:97:d9:a6:be:46:21:ed:80:ed:48:5a:03:44:
cb:85:b8:d5:16:c2:6f:d8:6c:87:ae:d4:cd:c2:4f:
d4:b2:9e:3d:d8:55:84:3b:91:29:74:05:7c:a2:5b:
40:51:1f:31:c5:e8:9a:b0:84:23:27:35:c3:71:af:
f9:36:5b:9d:85:f7:04:4d:cc:4a:57:7d:66:53:21:
99:28:5e:b8:e3:b1:8e:13:af:68:5a:61:7e:25:d7:
d3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:11:43:34:E4:C0:70:B3:A4:5D:79:2C:47:78:79:81:65:55:42:AE
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/gBFDNOTAcLOkXXksR3h5gWVVQq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:261::/48
2a06:9801:267::/48
Signature Algorithm: sha256WithRSAEncryption
c6:89:47:41:d8:09:90:9a:da:b0:d1:16:d1:b4:8f:51:a2:04:
b8:82:8b:da:50:89:5c:dd:3b:cc:4b:f7:fa:9a:a2:46:34:98:
d2:7e:4b:a9:43:7b:77:f1:81:9e:6f:f3:68:81:33:79:71:2c:
d7:a1:8c:51:30:58:76:98:f8:31:2b:f0:35:90:d6:e1:5c:8e:
2a:06:ab:6e:c8:79:7d:73:0f:e1:52:97:45:40:f7:9e:5c:2a:
67:61:51:d6:e5:2b:23:8b:b9:12:af:ef:b9:fa:05:e9:a5:c6:
b8:60:c9:b9:18:18:9b:a5:df:3f:96:3d:f1:44:d4:dd:18:59:
86:e1:98:fe:71:ac:f5:8a:ba:cb:cb:69:b1:dc:a5:03:51:3f:
9c:09:e3:2c:17:f9:52:6c:ea:65:ec:5c:68:82:04:c7:1d:e4:
35:cf:6d:e4:55:f0:f2:aa:84:f0:c4:f7:8b:95:40:dd:02:f3:
05:1b:99:a8:5b:f2:d1:ca:fe:c6:db:98:a4:36:08:2a:d0:04:
d8:c6:4c:11:59:a1:64:dd:3d:8a:f8:03:0d:ab:4b:03:b4:c0:
04:fe:56:e2:fe:e9:75:b6:51:b0:a5:e5:af:4c:0f:b5:c9:7c:
7f:df:70:c2:79:3e:7c:d4:cd:c3:07:e6:41:fb:6f:58:c9:5a:
fa:55:df:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:11:19 2026 by rpki-client