Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/pjk3LNRHTZjKEpGNFavVOdXTA8A.roa
File: pjk3LNRHTZjKEpGNFavVOdXTA8A.roa (raw, json)
Hash identifier: yXsESTuto1AYO9K3aykP9y0gcPnU0gnUc/F7BppEuAg=
Subject key identifier: A6:39:37:2C:D4:47:4D:98:CA:12:91:8D:15:AB:D5:39:D5:D3:03:C0
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019F60339717CD9542D3520EF02101592EDD
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/pjk3LNRHTZjKEpGNFavVOdXTA8A.roa
Signing time: Tue 14 Jul 2026 10:37:01 +0000
ROA not before: Tue 14 Jul 2026 10:37:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219251
IP address blocks: 2a06:9801:7df::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:60:33:97:17:cd:95:42:d3:52:0e:f0:21:01:59:2e:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jul 14 10:37:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a639372cd4474d98ca12918d15abd539d5d303c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ef:3f:9e:41:e9:c2:5e:6d:23:75:59:4e:65:
bf:63:85:bd:3a:c3:02:fe:d6:5a:26:0e:12:4b:92:
82:80:cc:87:bd:31:d2:68:84:f9:e9:26:c9:9f:18:
79:64:86:7e:14:85:14:68:9b:b2:f4:0d:e6:c8:73:
b3:1c:cc:30:cb:96:8c:1d:d8:5a:91:ed:2b:bf:38:
47:c7:bf:5d:6e:93:be:ec:c2:23:30:cc:75:23:3c:
61:89:45:2b:ee:3c:c3:13:c7:e7:74:ef:ed:12:e8:
e2:d5:2c:7e:d2:2e:eb:7d:f4:d7:46:06:40:73:52:
73:75:e6:fd:84:a9:f5:3a:33:84:50:f6:0e:7c:91:
55:28:ed:2e:36:51:c7:ec:79:f1:cf:67:5e:8e:47:
cf:9e:9e:9d:99:59:39:87:22:d4:ae:2e:f8:6a:c3:
0c:b0:e6:99:8b:e8:f5:20:7a:a3:b7:d8:3f:7e:53:
7b:61:d8:06:68:84:cc:c5:3e:30:e0:a4:72:b5:8a:
e1:07:13:7e:e0:41:6f:d1:80:53:0b:9f:c6:bd:97:
b1:24:96:db:4b:55:32:c5:74:e1:20:ae:88:48:aa:
ae:f6:01:96:c0:89:70:1f:85:34:9d:91:bd:01:ed:
c5:92:47:70:7a:45:73:9b:3b:b0:79:c7:93:af:a5:
72:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:39:37:2C:D4:47:4D:98:CA:12:91:8D:15:AB:D5:39:D5:D3:03:C0
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/pjk3LNRHTZjKEpGNFavVOdXTA8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:7df::/48
Signature Algorithm: sha256WithRSAEncryption
a8:81:c3:3d:d9:24:b8:0e:02:63:4e:33:a7:3f:12:e8:95:cc:
ba:4b:b6:1a:50:06:e1:55:ae:9c:60:b5:d9:f6:25:e4:2c:12:
ff:f5:64:bf:ab:20:0d:87:a9:03:c1:4f:79:45:29:d1:f2:ab:
8c:08:2f:99:d6:05:b0:ef:58:a4:e4:8e:a7:62:7d:6c:1d:87:
60:32:16:08:0f:5a:20:77:d1:b5:5a:ae:49:e7:f8:21:36:00:
3b:b2:7b:fd:b4:74:96:e1:f4:80:86:de:80:32:0e:2b:f9:6c:
b9:33:f9:5e:08:e7:03:66:42:24:3f:2b:49:8e:e8:bc:67:6d:
6d:18:34:b6:55:9c:15:a9:23:a5:f0:34:93:f0:da:69:56:04:
c2:7b:05:45:7f:91:2b:d3:92:51:3d:01:0f:d1:1c:e2:42:32:
04:b7:96:9b:b2:8b:42:02:4e:05:1f:ac:6e:64:8d:68:da:16:
da:3e:0b:cc:49:06:28:a0:27:e9:3d:41:ad:63:b2:9b:39:40:
57:53:9b:79:ab:73:0a:35:69:08:eb:e4:4b:d8:8d:15:14:25:
0c:41:b1:18:43:a6:c7:79:3e:00:c8:f1:00:e2:90:b0:58:3b:
e2:a1:4a:f8:10:47:85:b8:71:d3:1b:ab:89:6e:38:3f:ca:d6:
e7:d9:2c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:18:05 2026 by rpki-client