Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/oVB4Cm1AawoS8JmHfgMRAaIAFMk.roa
File: oVB4Cm1AawoS8JmHfgMRAaIAFMk.roa (raw, json)
Hash identifier: MmSkjoqvaMppco53WkGcGCTy2LoVCIAvEOpzBfBs150=
Subject key identifier: A1:50:78:0A:6D:40:6B:0A:12:F0:99:87:7E:03:11:01:A2:00:14:C9
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019CD57BE0528C99070769DF075286833CB5
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/oVB4Cm1AawoS8JmHfgMRAaIAFMk.roa
Signing time: Tue 10 Mar 2026 02:03:11 +0000
ROA not before: Tue 10 Mar 2026 02:03:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200282
IP address blocks: 2a06:9801:5f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d5:7b:e0:52:8c:99:07:07:69:df:07:52:86:83:3c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Mar 10 02:03:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a150780a6d406b0a12f099877e031101a20014c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e4:27:5a:55:28:6f:82:7d:1e:b9:05:42:3a:
c6:c8:55:80:9a:ee:c4:04:e6:cd:f4:26:6c:7d:1e:
82:a1:ff:8b:d6:0f:d7:bc:7d:88:2f:ac:45:19:52:
4b:23:b8:f1:3f:6a:29:c5:7a:9d:67:c1:17:85:06:
8e:41:e9:84:be:19:43:e6:6c:5f:db:cf:51:f6:7b:
57:74:f3:d4:79:6c:26:f2:7d:06:95:fa:97:66:a6:
4a:1b:f3:70:85:47:45:88:c2:d3:5d:33:6d:81:f6:
6a:c2:da:ea:98:7b:6f:f4:15:d7:95:c6:43:d7:dd:
aa:a5:96:5b:78:06:11:9a:45:50:5d:63:a4:8f:5a:
f0:80:66:72:83:c4:cf:9f:17:97:bd:e9:4e:8b:5e:
e2:77:2b:b0:ff:59:45:75:e2:e5:cf:91:fe:23:76:
4a:76:8a:34:d6:5c:26:47:d3:35:9e:91:7c:dc:b8:
ad:5c:b8:45:cb:c8:f5:1a:86:08:70:d4:50:4c:e9:
56:34:e4:43:a0:25:73:bc:01:0c:29:3c:3b:22:bd:
7e:72:7b:75:7f:b0:53:a9:71:ff:8c:80:8f:9c:58:
5e:14:9a:62:9a:01:5d:bf:c2:1b:39:56:45:56:ca:
3a:57:81:36:b1:1f:8d:62:2f:0b:d0:f7:93:be:0b:
f4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:50:78:0A:6D:40:6B:0A:12:F0:99:87:7E:03:11:01:A2:00:14:C9
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/oVB4Cm1AawoS8JmHfgMRAaIAFMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:5f::/48
Signature Algorithm: sha256WithRSAEncryption
48:bf:b6:5b:64:44:3e:db:3c:ca:cc:70:d5:11:93:e3:89:76:
59:6d:a6:4e:04:c0:e6:3d:ea:d2:53:b9:33:f4:f4:81:58:22:
3e:a7:65:09:d1:d3:30:23:db:0e:67:3a:91:de:b1:11:e1:6f:
e3:2e:97:c9:f0:6c:d7:68:96:0d:a3:cd:ed:31:72:40:a5:ff:
97:d4:44:9c:90:8a:4d:17:4e:26:e9:a1:9b:85:0c:59:eb:7a:
ac:59:ff:3d:33:35:55:75:5d:f9:25:a0:a1:a5:37:c0:f8:ab:
8c:a2:9e:6a:a7:04:ce:6e:e8:55:8c:1f:41:14:78:13:48:83:
14:ce:0e:48:79:12:b8:66:6d:04:d6:ec:49:3c:49:c2:6e:dc:
5e:4a:24:ac:70:12:6b:27:dd:4d:5b:5f:e3:75:70:69:f4:26:
a1:d2:68:a6:24:dd:d0:f5:8f:eb:49:7f:fa:36:44:74:49:8a:
19:94:f8:ca:6a:1c:af:ce:cc:59:43:a5:1f:4f:0d:63:b2:57:
ed:3e:7f:3d:55:5a:f3:f1:ac:e9:a1:38:ac:41:3c:72:7c:4c:
8b:e0:53:6a:b7:d2:cc:3a:03:3a:43:02:14:57:01:31:46:fa:
37:1d:bf:48:32:98:9d:90:44:dd:69:f2:ab:42:99:49:03:60:
94:dd:d9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:18:40 2026 by rpki-client