Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/j8gXKqqPdzGfk07MnxPEIn0X80s.roa
File: j8gXKqqPdzGfk07MnxPEIn0X80s.roa (raw, json)
Hash identifier: jf76ZbdZJRUV9ck3x06aRWWQHSieysT7c5GhuGZ0xCM=
Subject key identifier: 8F:C8:17:2A:AA:8F:77:31:9F:93:4E:CC:9F:13:C4:22:7D:17:F3:4B
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A199090033BABE6A62A9F0821963816DD7
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/j8gXKqqPdzGfk07MnxPEIn0X80s.roa
Signing time: Sun 01 Nov 2026 21:34:26 +0000
ROA not before: Sun 01 Nov 2026 21:34:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219040
IP address blocks: 2a06:9801:f73::/48 maxlen: 48
2a06:9801:15c9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 19:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:99:09:00:33:ba:be:6a:62:a9:f0:82:19:63:81:6d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Nov 1 21:34:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8fc8172aaa8f77319f934ecc9f13c4227d17f34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ae:28:47:e4:d8:e6:3b:99:85:55:82:66:3d:
21:d2:dd:b8:85:10:dd:65:3d:11:63:19:ca:80:9e:
f4:5f:9d:4a:f7:4b:b4:82:4c:dd:0e:13:1e:23:34:
7f:6d:ca:95:75:fc:09:a9:6c:02:38:4f:ba:c9:95:
1f:12:d7:31:7b:3d:a1:26:a6:59:17:64:05:56:80:
62:c5:22:f1:71:fb:57:3b:cb:94:c4:77:de:c5:7b:
f6:14:be:0c:71:f6:cc:70:b1:e8:4a:28:ae:cd:66:
1a:ad:49:7e:23:3d:60:64:cd:30:d8:97:13:4e:39:
89:6f:1f:5e:23:51:79:0f:c1:3d:d0:6d:cb:c4:e8:
df:7c:a9:3c:f5:2c:99:1e:8f:01:17:f9:e9:c1:42:
2a:06:6f:52:3a:78:9a:03:e6:2f:e7:38:7d:47:60:
a0:bf:a9:88:a8:5a:7d:85:44:88:03:cc:9b:db:76:
9b:47:bc:e3:81:7f:40:a7:a0:2f:30:56:66:e2:ed:
4e:50:79:ef:38:39:d1:d8:6b:d0:a3:5b:48:f2:99:
e0:55:70:e0:f6:2e:ec:8b:12:77:8e:cc:c3:d7:99:
0c:2f:12:d4:6f:27:dd:af:b6:d6:2c:de:d5:93:8b:
22:ff:18:f6:d7:42:c9:dd:3e:dd:ca:b2:3c:52:c6:
19:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C8:17:2A:AA:8F:77:31:9F:93:4E:CC:9F:13:C4:22:7D:17:F3:4B
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/j8gXKqqPdzGfk07MnxPEIn0X80s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:f73::/48
2a06:9801:15c9::/48
Signature Algorithm: sha256WithRSAEncryption
46:22:6b:9f:2d:56:00:b1:75:a2:7f:cc:82:49:1a:d5:2b:54:
ce:66:90:f8:a3:3e:e3:02:b2:e9:5f:d1:a4:ca:96:6d:56:29:
c4:fa:5e:d9:bb:f8:7a:5f:d9:ad:48:c5:eb:e0:37:52:c3:bb:
ec:82:2a:36:6b:b6:ab:df:04:35:22:c6:44:ac:8f:5e:12:0e:
26:62:e1:50:81:16:71:ef:b8:89:db:57:35:18:e6:1d:71:50:
ba:ac:8c:bc:f9:22:a9:66:d6:76:f0:c1:59:52:27:fe:17:13:
12:30:a2:e1:85:ec:a8:dc:9c:71:a6:cd:d8:9f:48:4f:a7:50:
56:8d:0b:2b:6a:14:2e:7b:e6:be:da:0e:75:1f:e3:d3:37:37:
02:16:6a:87:86:f0:3d:f4:5c:4a:88:14:2f:58:c8:df:00:31:
ed:ee:19:83:80:67:96:f6:d5:43:2f:93:41:29:4b:a0:7b:1a:
0a:93:6a:6c:f2:bd:cb:7e:6e:90:e6:84:14:50:f6:f0:d6:41:
ea:6d:e5:1c:ec:4f:e5:12:52:dd:31:3c:72:14:e9:ca:1e:db:
c8:1d:db:2e:c5:2d:c5:39:16:bb:b3:a9:49:2e:55:ef:8d:de:
5d:ab:70:96:e1:c9:b3:cf:ce:67:7f:33:cf:95:bd:19:de:1f:
92:80:4d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:11:13 2026 by rpki-client