Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/gCFUwegA7aPkw7eYvIibdgMaqqo.roa
File: gCFUwegA7aPkw7eYvIibdgMaqqo.roa (raw, json)
Hash identifier: BYHLprrom0Bl7ihiQbiUqZTE/sY0I5NY6/m+00z653k=
Subject key identifier: 80:21:54:C1:E8:00:ED:A3:E4:C3:B7:98:BC:88:9B:76:03:1A:AA:AA
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019D03B29B17422B339CDA26ACFC6BA4FC91
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/gCFUwegA7aPkw7eYvIibdgMaqqo.roa
Signing time: Thu 19 Mar 2026 01:25:29 +0000
ROA not before: Thu 19 Mar 2026 01:25:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201254
IP address blocks: 2a06:9801:2d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:03:b2:9b:17:42:2b:33:9c:da:26:ac:fc:6b:a4:fc:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Mar 19 01:25:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=802154c1e800eda3e4c3b798bc889b76031aaaaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:48:ea:30:e3:10:52:eb:84:c6:0e:1e:f4:aa:
1c:af:ee:43:0f:50:38:2c:1b:e0:b9:0a:0b:fd:c4:
72:8d:43:f6:3a:54:65:1b:de:13:b1:4b:d7:96:c2:
d4:27:a7:d3:4d:d7:3c:6f:bb:e6:84:f7:0a:6c:b8:
d4:5d:48:99:ed:31:0b:4b:35:41:f6:d4:40:de:0a:
ca:4d:34:84:aa:40:af:70:5e:a9:81:c0:3d:b0:8f:
22:0b:2c:ec:65:d3:5b:0e:25:bd:d4:ac:e0:3c:c5:
b6:97:b1:f4:34:76:97:26:f4:fe:3a:63:ec:0f:1a:
39:6b:cb:87:2b:3a:21:b2:30:97:a2:ad:cd:be:32:
5f:6c:f8:d6:86:39:a1:b3:9f:9b:b0:7e:b0:59:af:
22:cd:aa:ee:8c:0a:c1:dc:33:2d:e1:af:0a:0f:ca:
05:e6:b1:78:55:cb:35:55:ef:25:b4:4f:ad:79:e9:
24:b7:78:91:2a:51:bd:48:f0:d7:5f:23:e6:ad:14:
28:ee:de:b1:0f:0c:6c:b1:50:5f:28:8d:2e:05:44:
74:b7:a6:5b:d9:0b:f5:eb:88:16:b7:be:a7:81:1b:
89:b7:9d:9c:43:b8:77:a9:26:2d:a6:35:b6:8b:d4:
59:42:58:fc:ea:d7:cf:49:ff:1e:69:f2:7a:81:d4:
1e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:21:54:C1:E8:00:ED:A3:E4:C3:B7:98:BC:88:9B:76:03:1A:AA:AA
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/gCFUwegA7aPkw7eYvIibdgMaqqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:2d::/48
Signature Algorithm: sha256WithRSAEncryption
96:b7:50:38:08:6d:76:b9:23:f5:a1:d6:c0:99:5d:07:7c:74:
ed:54:48:d1:27:64:12:29:5f:82:7f:51:55:9f:95:8b:ba:1a:
35:b0:2d:25:36:cf:b4:73:f8:05:60:1c:9b:a3:bf:49:f6:13:
a8:5c:bd:50:09:80:35:02:8b:26:f7:d9:e1:9e:78:41:f5:f5:
28:99:04:09:1a:ce:6a:7b:85:ec:d8:e4:c2:57:96:35:45:a6:
d5:c3:0c:28:4a:68:93:c7:60:40:2e:3a:d3:4b:88:9b:e2:a5:
68:29:49:a0:24:ef:55:e6:3e:d1:89:18:a9:73:48:d4:78:4b:
30:e6:5c:b7:a9:e3:4f:7b:fc:88:fd:5f:ef:0d:f9:b7:e7:f6:
ea:02:80:71:34:ed:25:7c:d1:75:f6:dd:83:dd:65:ec:99:86:
c5:f6:2a:f4:a5:61:a4:3b:46:03:7b:55:88:e6:b7:7d:30:c0:
52:04:91:98:1e:68:f7:af:af:63:72:b7:5c:2b:56:63:02:09:
2b:a5:66:26:5c:ab:bc:f9:47:1c:38:d4:6a:71:3e:63:00:d5:
05:77:70:ee:45:03:85:fb:20:c5:7e:2e:fd:c2:5e:f7:12:55:
b3:a2:bf:2b:32:52:96:bb:c9:79:af:a9:3f:3c:77:d3:5d:9f:
e8:3b:7e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:18:31 2026 by rpki-client