Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/juPxpTaWIyUvsgc3736IMeWxeYY.roa
File: juPxpTaWIyUvsgc3736IMeWxeYY.roa (raw, json)
Hash identifier: AOzEHna4hTNzD+j65juQKfOGP/OY0Xh9fVSA4C7y8os=
Subject key identifier: 8E:E3:F1:A5:36:96:23:25:2F:B2:07:37:EF:7E:88:31:E5:B1:79:86
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019F47AE78D3E6CCEC6139C95DCB5CE635A8
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/juPxpTaWIyUvsgc3736IMeWxeYY.roa
Signing time: Thu 09 Jul 2026 16:20:44 +0000
ROA not before: Thu 09 Jul 2026 16:20:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207719
IP address blocks: 2a06:9801:18::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:ae:78:d3:e6:cc:ec:61:39:c9:5d:cb:5c:e6:35:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jul 9 16:20:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ee3f1a5369623252fb20737ef7e8831e5b17986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f8:c8:b5:da:9e:b6:5d:24:98:a7:75:a3:d3:
21:c0:1e:83:d6:e9:d3:1a:71:f8:64:a4:d1:21:bb:
74:c5:65:e7:c7:a9:19:46:d3:3a:d8:e7:d6:5a:19:
6a:76:9f:82:cb:e4:34:e5:db:22:50:06:9d:13:8e:
6a:86:73:89:ab:0c:33:c0:69:72:27:af:af:eb:90:
23:41:ce:e9:e8:33:da:62:34:b7:6d:1e:a2:9a:bb:
94:26:09:c3:05:fa:62:29:30:8d:a2:58:61:c3:d1:
3c:31:9e:e7:3c:2e:13:ec:4c:e4:33:8c:9b:a1:5d:
bf:81:9d:ac:19:30:73:12:80:fe:43:e9:d7:6f:f6:
37:f4:49:a6:70:67:e4:bb:dd:19:4e:28:05:45:af:
5e:38:0c:0b:c5:89:a4:4d:6d:9e:c8:49:bb:b1:1e:
13:43:5b:2d:5f:04:89:2a:b5:ef:3f:29:dc:9a:4a:
1a:ab:35:71:64:dd:f5:cd:03:39:1c:96:0e:8d:8e:
2c:04:70:a3:45:69:31:cf:92:da:66:09:ee:ae:a3:
bb:0e:a5:af:eb:20:8e:e8:f3:38:05:96:4e:d5:9b:
e2:04:a9:95:b6:aa:48:d7:37:f1:bc:4c:e2:a8:1e:
6c:08:54:20:a5:6f:db:80:5a:3c:4c:bd:65:a8:90:
a9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E3:F1:A5:36:96:23:25:2F:B2:07:37:EF:7E:88:31:E5:B1:79:86
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/juPxpTaWIyUvsgc3736IMeWxeYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:18::/48
Signature Algorithm: sha256WithRSAEncryption
bf:57:15:89:97:c0:0b:8b:ce:87:83:5e:73:ba:0a:75:8d:59:
0f:3c:90:fe:1d:cf:fd:8f:56:83:c4:0d:ac:c5:d0:86:42:5b:
b8:0e:86:35:52:48:a0:1f:73:b7:34:5e:0f:ee:f3:70:fb:40:
d1:f4:4b:a8:c4:0d:26:3c:72:a0:1f:80:89:78:3e:c1:c3:3b:
27:fb:ca:15:92:a1:cc:94:3a:30:ff:d7:16:92:d9:06:60:99:
f9:56:41:62:cb:7d:cf:48:b9:a3:b4:54:f7:7f:ee:e5:c8:ff:
a0:64:c8:1f:5a:8e:4d:93:89:47:c3:23:ba:55:f9:07:6c:ca:
65:e3:2f:f8:c1:c5:ab:dd:a4:c6:49:2f:16:94:f7:4c:ba:9b:
ff:7d:e9:ab:0a:3d:bd:c8:00:8e:92:12:a0:46:9b:19:a7:27:
1b:91:f5:70:24:da:0b:be:40:31:21:ae:6e:f8:e8:cf:cb:22:
f7:6e:84:40:f0:f7:08:e4:d0:d4:05:b0:91:29:75:49:a9:66:
80:ce:01:67:ae:e2:48:86:aa:d6:c8:2b:62:35:c9:e0:1d:ef:
dc:60:43:d0:39:63:51:71:bf:ac:c5:1e:9b:c7:e5:d2:4b:1b:
4f:ff:6b:03:f5:f2:60:65:cd:72:87:5c:d8:54:de:c0:73:56:
d3:49:5a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:17 2026 by rpki-client