Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/kUPYD77GmxHqlqXHAHGTgRxVlIk.roa
File: kUPYD77GmxHqlqXHAHGTgRxVlIk.roa (raw, json)
Hash identifier: PTC9xdScnRrFunCIHYgxSFytyjbXHQR1Pwy2VnsNfjA=
Subject key identifier: 91:43:D8:0F:BE:C6:9B:11:EA:96:A5:C7:00:71:93:81:1C:55:94:89
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A159DFFECEEF05EA6E39FD03858195938D
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/kUPYD77GmxHqlqXHAHGTgRxVlIk.roa
Signing time: Tue 20 Oct 2026 15:13:34 +0000
ROA not before: Tue 20 Oct 2026 15:13:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218605
IP address blocks: 2a06:9801:1567::/48 maxlen: 48
2a06:9801:156e::/48 maxlen: 48
2a06:9801:156f::/48 maxlen: 48
2a06:9801:1580::/48 maxlen: 48
2a06:9801:1590::/48 maxlen: 48
2a06:9801:15c4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:df:fe:ce:ef:05:ea:6e:39:fd:03:85:81:95:93:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Oct 20 15:13:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9143d80fbec69b11ea96a5c7007193811c559489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ff:6c:a9:fc:db:25:8e:d9:43:a3:7b:d9:ea:
d6:d9:dd:d4:56:4f:e2:33:73:29:8e:51:35:58:5f:
22:9a:fb:57:fc:16:1b:f5:97:3f:42:e1:8b:59:47:
cd:9a:f9:5a:cc:4a:3a:66:b8:4f:61:30:68:d5:ca:
91:e3:6c:bd:81:84:ae:da:64:07:97:19:88:1d:ed:
df:25:e6:c9:31:ef:58:c8:e0:3b:2e:2c:c8:72:ac:
06:24:5a:cd:7b:2c:be:fd:2d:98:33:f2:9e:9d:a7:
30:82:49:37:15:da:ef:8e:79:b6:9f:48:32:c4:0e:
8b:41:6f:06:b4:a5:94:dc:2b:32:7d:d6:af:72:f9:
40:4c:18:17:05:00:c6:6d:cc:87:b7:80:30:82:8e:
fa:1a:69:9b:1c:2d:2e:1e:09:4c:e2:ea:b1:e6:c0:
43:0d:13:5f:23:a1:f6:dc:eb:f4:5b:2f:27:49:06:
28:23:93:47:70:6f:49:7e:21:a8:70:22:bb:c5:a5:
58:b9:81:6b:6e:01:cb:1e:f5:3f:76:d8:d9:dc:71:
d8:42:2a:07:41:a7:90:ce:f1:bc:4f:36:88:fa:e9:
bf:57:3e:bd:44:e5:59:9d:0c:ef:37:91:bb:53:af:
90:82:ab:aa:3c:aa:9a:52:02:48:9e:4f:9b:13:ae:
65:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:43:D8:0F:BE:C6:9B:11:EA:96:A5:C7:00:71:93:81:1C:55:94:89
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/kUPYD77GmxHqlqXHAHGTgRxVlIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:1567::/48
2a06:9801:156e::/47
2a06:9801:1580::/48
2a06:9801:1590::/48
2a06:9801:15c4::/48
Signature Algorithm: sha256WithRSAEncryption
34:39:b2:d2:fe:9c:e4:9d:b9:5e:32:9c:5c:88:a9:1a:80:cb:
f9:3c:70:67:6e:bf:be:1f:72:2a:68:3c:91:e1:e1:56:7f:01:
a9:77:9a:ba:ea:ae:20:2a:d9:61:6e:01:83:4d:db:40:3b:3a:
98:49:ab:33:f0:84:dc:ad:40:da:e2:4d:dd:e7:b1:ee:53:64:
55:e3:fb:9a:ac:bd:6d:77:34:a3:16:a9:f1:ac:b9:c2:30:73:
f2:40:a1:23:0e:a2:96:06:91:5b:62:df:9c:9f:c0:1a:9d:a7:
4b:0f:0f:e9:f4:ae:c2:15:74:f7:cc:29:8b:c5:f3:6d:55:9d:
52:05:78:67:62:05:44:20:3c:1a:90:c5:c9:7d:5f:23:a0:c2:
22:a0:0e:f0:55:c5:31:a7:2f:73:70:b2:24:a0:a9:91:74:eb:
b0:c8:1e:1f:de:40:df:ea:d7:27:d1:b6:f4:18:d5:91:96:05:
98:52:f6:d2:b6:4f:57:78:58:50:a1:ec:6d:e0:2f:3b:f6:ff:
22:7f:60:4f:86:3f:36:00:0e:1f:8a:3a:c9:65:f5:e0:68:10:
e8:47:83:34:3a:d3:f9:96:9b:95:4f:66:ab:f8:b8:1e:12:10:
f5:67:1d:36:0b:31:e8:91:2c:9e:70:c2:f3:6d:bd:3d:f7:3a:
e0:e6:78:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:25:52 2026 by rpki-client