Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/oJR7Y8pepUKFDOrbOK2OeHrj0aA.roa
File: oJR7Y8pepUKFDOrbOK2OeHrj0aA.roa (raw, json)
Hash identifier: pbg5dzUtGPRoR6bcXS+0gY1pIz/GKE2YhMgjW2gK6DE=
Subject key identifier: A0:94:7B:63:CA:5E:A5:42:85:0C:EA:DB:38:AD:8E:78:7A:E3:D1:A0
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019E06D97D4AA9E88BF42919588646DF66C1
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/oJR7Y8pepUKFDOrbOK2OeHrj0aA.roa
Signing time: Fri 08 May 2026 09:09:37 +0000
ROA not before: Fri 08 May 2026 09:09:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199241
IP address blocks: 2a06:9801:730::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:06:d9:7d:4a:a9:e8:8b:f4:29:19:58:86:46:df:66:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: May 8 09:09:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0947b63ca5ea542850ceadb38ad8e787ae3d1a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6b:55:65:9e:df:f2:5d:88:8b:24:bb:fa:5d:
a3:97:1c:c5:46:6f:e2:c1:2f:d5:5b:bc:26:ea:53:
73:85:45:dd:34:ed:70:96:73:e7:6f:90:bd:7e:d3:
0f:0e:f2:b2:2a:fb:6d:01:e6:4b:b2:2a:34:c6:92:
de:9a:e6:5e:79:31:28:ab:4f:22:f9:25:e0:78:66:
25:77:15:11:99:d1:c1:90:ba:ed:5f:cf:54:43:fc:
f0:e0:16:fd:21:7b:27:22:3e:45:eb:88:2d:0f:e7:
8a:df:5e:c1:23:cd:c3:91:6a:9a:64:10:45:2a:c8:
ff:3c:67:c4:d0:b7:eb:36:e4:26:1a:01:f4:25:96:
26:e9:86:fa:9a:da:11:0c:1d:b3:ff:b5:91:b3:6a:
3d:21:bd:61:e5:38:82:15:b8:ce:c9:3a:19:6d:00:
cc:f2:29:e8:34:87:e4:35:4a:23:7a:94:61:fa:dc:
06:fb:51:45:c4:b0:de:69:6e:a0:cf:ee:6d:45:c5:
98:e2:ac:5f:41:19:24:ce:ed:85:38:63:af:1c:44:
80:9c:c3:14:4a:fd:d8:07:48:56:84:e2:f5:31:f4:
07:76:55:79:1a:d1:f1:08:64:d7:db:6d:b7:7a:1a:
4a:df:79:73:5d:5b:0c:fe:23:24:1a:1d:9c:48:34:
f1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:94:7B:63:CA:5E:A5:42:85:0C:EA:DB:38:AD:8E:78:7A:E3:D1:A0
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/oJR7Y8pepUKFDOrbOK2OeHrj0aA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:730::/44
Signature Algorithm: sha256WithRSAEncryption
5c:1e:99:51:04:45:1b:5c:4b:83:f5:96:21:53:4d:cd:45:0b:
12:56:2c:2a:25:36:52:97:a4:25:e7:d6:53:b9:84:b7:f1:e8:
63:91:1f:72:0c:10:2e:1c:94:06:9c:15:67:51:dd:29:e4:9e:
19:bb:45:11:ba:5a:19:b5:d7:72:74:e9:5f:40:e9:83:c7:3e:
5d:03:d2:81:60:f9:64:61:63:87:3b:9f:15:ff:12:19:be:86:
8f:28:45:21:f9:bf:7f:94:99:cc:18:5d:53:fa:69:8c:ff:62:
bd:a2:c2:4a:bf:aa:9f:20:ec:36:a3:5b:10:7a:8f:95:fd:db:
d9:6d:01:f3:b4:d0:e7:80:53:63:3b:9f:28:ef:a6:b7:a1:4c:
24:e9:18:5d:4b:9d:50:5b:05:bd:89:53:24:64:74:8c:5d:c5:
95:14:40:3e:4c:cf:00:2c:69:0b:1f:33:1e:8a:dc:a8:7b:06:
bc:69:78:f9:10:84:74:d7:aa:05:d0:3a:a9:21:ce:f6:aa:c6:
ed:bb:42:b2:46:b4:b9:93:12:fb:f5:1d:a6:48:b9:f8:ef:12:
05:75:e1:5c:f9:3d:63:2a:8e:b7:9a:c0:32:46:0a:47:86:51:
26:1b:de:54:4d:01:a6:2c:5e:c3:96:a6:6f:2f:d4:c8:7e:41:
ad:24:34:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:15:38 2026 by rpki-client