Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/lWJ7ho1eeMnU-Rj30PrBKduAUzw.roa
File: lWJ7ho1eeMnU-Rj30PrBKduAUzw.roa (raw, json)
Hash identifier: g/OuJ/vUiWlsBp5JXn84QOwjc2homx0o/RAlYIuiXdA=
Subject key identifier: 95:62:7B:86:8D:5E:78:C9:D4:F9:18:F7:D0:FA:C1:29:DB:80:53:3C
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019F7FAF2FCE3BC19E0C4876EF2422C3FCDF
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/lWJ7ho1eeMnU-Rj30PrBKduAUzw.roa
Signing time: Mon 20 Jul 2026 13:20:15 +0000
ROA not before: Mon 20 Jul 2026 13:20:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219173
IP address blocks: 2a06:9801:f15::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7f:af:2f:ce:3b:c1:9e:0c:48:76:ef:24:22:c3:fc:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jul 20 13:20:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=95627b868d5e78c9d4f918f7d0fac129db80533c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e3:75:8a:0a:c9:6d:c4:a6:74:4b:1f:98:83:
4f:0c:17:ea:6e:1a:c1:cc:d0:ca:77:f4:d6:fd:97:
79:08:cc:79:46:e0:88:4a:ff:17:c7:40:68:16:6b:
4d:34:37:2d:8d:49:2a:75:ce:0c:d7:31:53:f8:2b:
bf:17:95:6d:0e:25:eb:a3:3a:e7:54:4d:47:4a:bd:
3e:c0:b5:85:2e:d1:7e:50:92:98:88:c1:98:ff:13:
18:8d:c5:a2:ba:ca:6c:87:4f:57:6b:bf:79:b1:85:
ce:14:bb:9c:2b:de:d6:c1:3b:cc:bd:7e:f9:b3:f0:
d6:2e:73:17:04:d4:e0:13:66:d6:cc:31:bd:60:86:
f4:e9:ac:a3:f4:18:77:79:04:92:e5:5f:bd:83:20:
ee:8c:78:9c:e5:0c:2a:01:74:96:89:c4:86:63:4e:
35:7d:7b:46:36:73:51:78:2f:b1:e4:bb:e2:ad:81:
c5:11:27:20:c3:c4:13:8f:de:83:73:47:93:97:27:
f8:29:02:71:42:21:8a:bd:da:dc:1a:c1:d9:0b:a4:
d7:ce:17:d5:c9:ae:93:fd:59:b0:aa:1e:d0:0c:f3:
7e:bf:d5:dd:74:98:20:77:2c:54:f0:76:94:f8:5a:
ab:d0:fb:94:75:2f:15:ca:78:91:82:9f:c3:d6:f6:
0c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:62:7B:86:8D:5E:78:C9:D4:F9:18:F7:D0:FA:C1:29:DB:80:53:3C
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/lWJ7ho1eeMnU-Rj30PrBKduAUzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:f15::/48
Signature Algorithm: sha256WithRSAEncryption
71:4e:85:d1:c1:fc:05:6b:09:59:b8:ae:76:a7:72:4e:a9:a8:
a3:5a:40:d2:0d:c4:78:6a:a1:28:d3:00:23:44:cb:54:d5:30:
09:6a:e2:16:92:b4:c7:bd:7c:5a:f4:2a:a3:b8:0e:69:30:fd:
32:03:e7:96:19:f4:e6:38:2b:11:fc:74:23:41:9e:48:b9:51:
c2:6f:70:e9:f5:3e:fc:c9:b0:ce:9b:11:98:b1:0b:71:0d:cf:
89:5c:54:52:e8:94:21:73:63:ea:ad:25:91:5e:97:fa:be:21:
ef:61:d8:94:f1:0b:1f:ca:36:79:5c:4b:1b:2b:d1:6e:07:04:
7a:a8:07:27:66:c2:0d:92:06:34:1f:dd:6f:f2:05:4e:f6:2e:
bd:d8:79:15:95:42:75:31:a6:74:18:de:91:96:50:eb:5f:4b:
e7:36:ef:df:de:3e:98:59:cb:ff:01:18:99:ab:ee:83:ce:c8:
81:8d:13:6c:1e:98:ea:10:7e:d3:4a:8c:e8:12:75:0f:2c:48:
ef:c9:82:06:12:24:0d:b9:d1:eb:89:80:0f:a0:de:89:8c:e7:
4a:0f:73:0c:dd:f5:69:f4:85:e4:7d:7c:68:a2:48:9f:6b:e3:
c2:88:be:59:3d:f4:ab:73:63:40:d4:82:bc:f9:2c:d8:4a:6a:
b7:5e:e2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:41:02 2026 by rpki-client