Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/jIovHbWen5N959w4Tgq-XfBGius.roa
File: jIovHbWen5N959w4Tgq-XfBGius.roa (raw, json)
Hash identifier: rJP1ZG5lLb3pHGh7Irkr1uJbFl0QUmFHTC0wIpPgSBc=
Subject key identifier: 8C:8A:2F:1D:B5:9E:9F:93:7D:E7:DC:38:4E:0A:BE:5D:F0:46:8A:EB
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A1D7AEB68CAB85C941481E4B56379FAA2D
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/jIovHbWen5N959w4Tgq-XfBGius.roa
Signing time: Sat 14 Nov 2026 01:31:53 +0000
ROA not before: Sat 14 Nov 2026 01:31:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214762
IP address blocks: 2a06:9801:3400::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 19:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d7:ae:b6:8c:ab:85:c9:41:48:1e:4b:56:37:9f:aa:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Nov 14 01:31:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c8a2f1db59e9f937de7dc384e0abe5df0468aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:41:29:75:62:6e:19:47:4d:cd:9d:7e:a1:a4:
18:fe:be:a3:d7:ad:79:e9:db:0e:c5:d3:2d:53:f7:
aa:4b:fa:eb:ca:ab:99:a1:68:6d:6c:f9:cc:98:74:
10:8a:d5:4d:e7:ab:0c:ea:7c:09:ee:8d:9d:66:b6:
9c:99:53:a9:5c:c5:14:17:54:cd:80:e4:2e:40:a4:
7b:93:2b:21:d4:48:1f:5f:9b:ee:d7:bb:02:12:d5:
db:71:ea:77:09:d0:e9:83:19:4b:d8:7b:76:db:f6:
0c:1a:26:1f:c7:98:66:29:6d:c3:54:5a:af:55:8a:
26:19:38:9d:ce:0b:0b:94:f3:ac:03:8f:ef:ff:04:
47:14:e7:86:5d:6e:07:b8:2f:fc:9e:90:95:5e:6e:
e7:f6:5b:9c:a3:7e:60:5e:fb:f5:8b:1c:0d:de:ed:
56:3c:c3:0d:69:19:b8:bd:94:d1:d0:60:87:42:06:
7e:5f:a9:79:03:6d:af:a5:83:7e:93:0e:cc:7d:d4:
0b:64:55:c1:88:bf:c8:54:ca:c2:13:df:c5:c2:9d:
39:c5:d8:dd:d2:83:8c:56:f8:90:ef:68:86:e4:f6:
bf:07:b2:0b:b9:8e:4b:8f:4b:d5:56:dd:87:23:78:
31:6e:18:f3:fd:a2:a4:d0:e7:dc:f1:38:44:62:7a:
d8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:8A:2F:1D:B5:9E:9F:93:7D:E7:DC:38:4E:0A:BE:5D:F0:46:8A:EB
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/jIovHbWen5N959w4Tgq-XfBGius.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:3400::/40
Signature Algorithm: sha256WithRSAEncryption
1d:de:c0:6a:11:1f:27:46:0c:c6:34:0e:6a:d0:ce:fc:b2:01:
3c:ee:b9:33:e1:5a:b3:65:bc:1c:8f:26:23:04:86:82:58:85:
46:a6:81:b1:d6:19:58:ea:58:76:fb:0e:a1:08:22:03:98:aa:
94:0d:48:b9:f2:c1:68:a3:e9:20:9b:25:cd:37:a9:a1:c4:f5:
63:40:37:10:10:94:d8:1e:2d:7f:ae:c2:1e:19:c0:15:4c:db:
94:3d:d6:64:9b:0d:e5:d3:f2:64:7f:53:53:02:a5:d7:76:f4:
0a:6a:86:0d:cc:78:41:3f:38:e1:c4:79:16:d7:70:b6:77:6a:
55:90:50:5d:a0:69:ac:91:ef:52:0b:af:f0:df:9e:cd:a7:b1:
09:55:ab:82:8c:51:b2:82:96:da:67:86:19:1c:b7:ff:02:db:
6f:19:1d:05:35:f9:dd:08:f6:97:29:be:19:01:45:5b:3f:b8:
0e:e8:75:79:a2:54:d0:9e:ac:09:23:c1:16:3a:18:a2:c4:10:
50:e2:b9:de:a5:70:84:08:86:24:24:e2:97:65:5b:49:1b:b2:
ac:9c:93:d9:0d:2c:30:25:90:19:62:ba:e7:d3:71:b4:11:5c:
50:51:06:ff:c2:de:a8:e1:fd:36:af:9d:eb:95:42:24:cd:79:
22:7b:87:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:54:03 2026 by rpki-client