Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/oPdtmiNdXo33Yzp6uCoU-gn4cwI.roa
File: oPdtmiNdXo33Yzp6uCoU-gn4cwI.roa (raw, json)
Hash identifier: h7wAZo60ZOlDzl5lAdLYjiMalgPvi15FSpTE0WfsGFo=
Subject key identifier: A0:F7:6D:9A:23:5D:5E:8D:F7:63:3A:7A:B8:2A:14:FA:09:F8:73:02
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019DB29EAE084656FF834A99F781317038BC
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/oPdtmiNdXo33Yzp6uCoU-gn4cwI.roa
Signing time: Wed 22 Apr 2026 00:37:16 +0000
ROA not before: Wed 22 Apr 2026 00:37:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198657
IP address blocks: 2a06:9801:287::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:9e:ae:08:46:56:ff:83:4a:99:f7:81:31:70:38:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Apr 22 00:37:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0f76d9a235d5e8df7633a7ab82a14fa09f87302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:16:b6:54:2a:20:62:eb:58:81:fc:8b:b4:da:
e2:7d:65:66:2a:a7:06:60:00:ee:bb:75:52:36:06:
0d:40:e4:62:ac:2a:03:ea:4b:21:5d:c7:ad:1f:27:
9e:1e:ed:bc:75:9f:89:e4:59:8e:5b:be:2c:15:7e:
67:a8:9a:f4:93:6d:0b:21:15:30:8c:a9:84:0b:89:
6e:08:04:59:c4:3d:03:59:0b:7c:3e:f6:14:1a:fc:
be:3d:9f:7b:1c:f9:48:4a:66:ac:d0:3d:04:e5:b1:
4c:33:eb:21:42:58:81:1b:21:60:6e:1b:a1:45:72:
0a:b1:69:81:8e:26:b8:07:96:ea:a5:a5:70:7d:a7:
32:f1:c0:17:c7:52:55:21:1b:44:e2:95:34:7a:fe:
9e:47:a7:79:5d:a9:68:f6:24:3c:d6:f4:d5:f4:86:
1d:2a:b5:4f:e8:73:e1:4d:b2:b6:8f:3f:61:4c:36:
93:84:8d:c4:a7:3d:58:4c:63:79:ad:ee:5c:77:4e:
93:4a:ee:06:6c:39:83:9f:f5:76:ff:71:b2:00:0c:
20:11:b2:0d:3e:46:9c:93:45:cc:f2:7f:22:e1:07:
a6:9b:76:dc:71:e6:98:e5:31:3a:34:6a:0d:f6:19:
ac:11:8e:2e:29:1b:36:88:52:c8:4c:ed:e1:a9:5d:
8e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F7:6D:9A:23:5D:5E:8D:F7:63:3A:7A:B8:2A:14:FA:09:F8:73:02
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/oPdtmiNdXo33Yzp6uCoU-gn4cwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:287::/48
Signature Algorithm: sha256WithRSAEncryption
38:7f:9c:89:56:26:ba:ef:b8:1a:ce:21:af:8d:60:c6:0f:cd:
17:28:0e:57:5d:cc:24:fb:42:74:d8:5b:c6:35:3c:f2:89:e7:
2c:0f:f9:17:53:b1:41:a4:53:bf:0e:44:f8:11:0e:4d:2b:e8:
fd:6c:a5:64:ea:8e:cf:c5:33:e3:43:5d:e8:96:04:96:46:50:
85:c3:06:3f:c9:b0:e8:7c:b4:d6:b9:ca:f8:af:b0:37:44:3a:
bc:0b:12:6b:cf:57:5a:e8:05:0b:c8:37:89:ba:62:7f:44:ba:
4c:03:13:fa:22:89:81:ea:4c:c6:bf:2a:8a:a2:85:45:a0:0d:
bd:38:dd:e1:20:f8:49:77:52:bb:a8:ac:e8:87:4d:0b:e7:51:
7f:a8:e2:17:0e:05:7d:0f:45:0d:6c:a9:f8:1f:ed:bb:6f:64:
6b:ad:03:24:f5:51:eb:97:dc:f7:53:0c:ba:c7:8c:cf:46:b3:
80:9c:6d:b5:ba:3c:bb:ed:3f:6c:fc:13:e8:44:fc:73:58:a7:
6b:c9:05:06:ec:b2:84:1a:bb:7a:b7:f4:81:f3:e1:bf:cf:aa:
74:9a:06:c8:fc:5e:28:3e:bf:7b:c2:2d:fb:9a:38:84:71:2a:
45:ab:7b:3d:29:86:ad:ee:0f:d2:9e:6a:42:9c:e4:41:1e:22:
84:cd:8c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:36:38 2026 by rpki-client