Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/vXR8mMfbO1uGjG0WMQHKXHDBjI0.roa
File: vXR8mMfbO1uGjG0WMQHKXHDBjI0.roa (raw, json)
Hash identifier: IOV3moPKjpiCKnFC/HlVLJW/JTTqL2yJhwdgYYJ8WC0=
Subject key identifier: BD:74:7C:98:C7:DB:3B:5B:86:8C:6D:16:31:01:CA:5C:70:C1:8C:8D
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019CB6490E945B4A30C73D46B9D26481F807
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/vXR8mMfbO1uGjG0WMQHKXHDBjI0.roa
Signing time: Wed 04 Mar 2026 00:39:26 +0000
ROA not before: Wed 04 Mar 2026 00:39:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210355
IP address blocks: 2a06:9801:c1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b6:49:0e:94:5b:4a:30:c7:3d:46:b9:d2:64:81:f8:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Mar 4 00:39:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd747c98c7db3b5b868c6d163101ca5c70c18c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f5:cc:a3:0e:e6:52:93:53:3d:f2:49:e3:89:
65:31:d5:66:5f:ef:9d:44:96:0d:1d:fd:05:8c:d5:
fa:70:4c:95:98:dd:b9:c5:7f:ef:e3:56:76:89:b3:
04:22:37:ca:b8:db:41:96:ab:23:da:89:af:e8:d0:
49:4c:c4:f6:d7:ad:5b:51:e1:e7:d3:69:b9:e1:d5:
e9:b4:db:53:6d:5c:4a:b9:96:e3:ec:4d:fc:a4:82:
ab:8f:51:d9:cf:3b:f3:a9:71:02:7e:65:ce:9f:d7:
26:4c:8b:27:bf:80:fd:a1:55:12:8b:20:f5:33:48:
86:cc:71:9a:71:b1:cd:e6:e0:60:8b:2e:58:a0:cf:
52:e4:ce:bd:d5:03:26:91:ad:b2:6a:2f:d8:4d:a0:
22:51:5a:f9:4f:04:a7:81:1f:39:3a:b9:55:49:ae:
d2:f8:15:fe:2e:c5:9c:d3:0b:c1:51:a3:63:a3:ac:
45:37:67:b7:b9:18:1b:ba:e3:9e:be:69:88:8e:79:
7b:c5:2e:41:fa:ad:45:f7:0f:9e:b4:e5:5e:65:83:
bd:cf:ad:95:f9:35:0c:d9:fc:f1:48:da:d8:24:1b:
f8:b9:8f:d6:7e:db:2c:32:58:96:84:ca:0e:c0:8e:
83:23:cf:10:6e:fd:73:6a:da:a9:6d:6a:31:8c:23:
48:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:74:7C:98:C7:DB:3B:5B:86:8C:6D:16:31:01:CA:5C:70:C1:8C:8D
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/vXR8mMfbO1uGjG0WMQHKXHDBjI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:c1::/48
Signature Algorithm: sha256WithRSAEncryption
30:d0:9a:f9:11:03:e3:20:fc:0d:b8:34:d1:61:cd:c4:97:85:
25:01:26:46:9e:cd:11:53:62:67:db:a8:24:30:c9:0b:e1:83:
b2:2b:1e:70:48:1b:fa:11:1f:ef:3c:f7:ce:b3:8b:26:2b:b1:
eb:9f:b8:9b:7f:ec:4c:c1:04:94:5c:5e:6f:28:e8:54:81:a1:
3a:56:c2:b9:6e:68:1a:9c:4c:b4:cd:cb:e8:03:3a:23:3e:60:
cc:f6:97:ed:a8:53:10:88:3e:57:7f:ca:19:70:56:be:e4:2b:
90:e9:93:a2:26:02:99:39:b6:d1:56:09:0c:03:51:ac:65:eb:
36:d5:72:d5:04:17:f9:ce:9b:35:84:d4:87:e1:30:9c:a0:ee:
22:e3:94:aa:9a:01:fb:4e:cf:32:3d:3a:fc:14:20:74:26:fc:
2c:96:0b:d8:87:76:29:4c:2b:f8:8d:8d:d5:af:da:ce:86:86:
85:a5:98:88:92:63:18:14:85:73:d4:96:10:f4:e6:13:3a:fa:
2d:8a:79:5c:d2:d9:86:d2:3b:29:35:53:e8:86:49:6a:27:69:
4d:66:54:11:db:74:4a:d8:24:df:41:38:14:9a:d7:97:2c:02:
46:f5:96:ee:eb:f4:f6:62:7f:bb:56:5a:60:07:37:bd:c8:e9:
7d:13:6c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:18:29 2026 by rpki-client