Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/n04YRFNa1wxqb_pbhs_rEbwbvSc.roa
File: n04YRFNa1wxqb_pbhs_rEbwbvSc.roa (raw, json)
Hash identifier: C9mbVAzDiO6vAls2kkwliHuCkP6L70HDp+bGXts8jrU=
Subject key identifier: 9F:4E:18:44:53:5A:D7:0C:6A:6F:FA:5B:86:CF:EB:11:BC:1B:BD:27
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A17AC0E95E7DA68BD039D87C5D2833F661
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/n04YRFNa1wxqb_pbhs_rEbwbvSc.roa
Signing time: Tue 27 Oct 2026 00:27:05 +0000
ROA not before: Tue 27 Oct 2026 00:27:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218983
IP address blocks: 2a06:9801:f4e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 19:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:c0:e9:5e:7d:a6:8b:d0:39:d8:7c:5d:28:33:f6:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Oct 27 00:27:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f4e1844535ad70c6a6ffa5b86cfeb11bc1bbd27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a0:cc:fe:f3:d6:e0:ea:87:dd:c6:cb:a4:98:
04:9b:1a:c1:f4:1a:70:9a:b1:3f:6c:29:9e:ef:fe:
99:d0:93:95:7b:4d:45:4c:66:1d:54:55:6e:5b:19:
72:0b:33:fe:f0:b0:55:f2:d7:7e:0a:61:fb:40:0a:
8a:04:9f:38:fa:0b:19:16:2b:ee:76:97:58:bc:a4:
3c:26:9d:8c:c3:b8:63:32:17:0f:bd:93:96:b2:97:
71:73:52:f8:81:3e:5c:c0:98:39:ec:02:8f:51:3a:
29:ae:1e:c9:5a:0c:99:76:43:b2:4b:dc:a1:1e:3a:
da:ba:4a:3d:55:68:d4:25:63:29:a5:cc:3b:5c:a9:
73:01:69:3b:33:25:7a:37:75:69:3c:86:e8:ca:95:
8e:d3:79:f2:11:d9:27:7d:4b:4a:d8:d7:e3:fd:0f:
b2:6e:85:38:08:31:20:b4:24:57:5c:1d:77:23:01:
0f:1d:a1:ea:34:09:d0:3e:f4:aa:36:eb:7d:58:98:
b6:91:65:26:a5:57:da:82:82:5f:0a:9f:93:36:54:
6a:44:4c:15:02:ef:e0:22:a7:07:17:89:28:06:d2:
fd:3f:c2:6a:0a:ca:f7:ba:10:07:a8:42:01:0a:c5:
27:67:74:87:5b:53:dc:b3:f4:f6:27:2b:aa:5c:89:
90:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:4E:18:44:53:5A:D7:0C:6A:6F:FA:5B:86:CF:EB:11:BC:1B:BD:27
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/n04YRFNa1wxqb_pbhs_rEbwbvSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:f4e::/48
Signature Algorithm: sha256WithRSAEncryption
32:e4:ce:a7:c2:7f:2a:5c:4e:40:9e:1e:dd:7f:e5:25:91:d4:
f7:91:91:de:43:86:90:c4:b3:11:4d:0f:63:50:c0:fb:27:a9:
31:d0:e1:c6:5a:ee:c1:fb:ef:56:5d:3f:11:2b:39:3c:0e:07:
a5:2d:0d:19:7a:d6:16:32:90:62:93:ca:2b:6d:f6:fb:56:c1:
40:0c:5a:41:86:5a:75:74:d5:7d:70:e4:3e:62:80:71:fc:7f:
a3:5f:50:85:5f:2a:7d:c7:2a:f5:ab:d6:1d:56:4c:7d:4e:cb:
3a:c2:61:e9:dd:bb:a7:04:a5:c9:ff:10:e1:23:74:a1:4a:f4:
dc:de:c5:f8:3b:ec:98:99:39:f7:82:18:2e:b0:73:a1:46:7e:
b2:33:96:03:ba:5e:20:50:40:dd:14:b6:2a:b3:97:58:f8:46:
a1:ac:f1:63:34:8a:15:4a:61:f4:1c:ca:5a:76:92:fe:37:09:
43:d7:df:e8:00:ec:14:c4:02:39:11:74:d3:07:2d:c7:e7:55:
97:38:4e:29:19:10:be:b0:d4:e8:f0:49:33:59:93:8a:96:02:
51:a3:1e:51:bb:78:92:f3:38:2f:a4:da:14:66:ec:10:9d:36:
70:2b:9e:77:8e:60:bd:4b:4d:21:21:65:1c:89:47:d8:81:00:
11:dc:c1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:34:13 2026 by rpki-client