Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/vyOJgpy3lGcqWuVn6EnhZ1MPKs4.roa
File: vyOJgpy3lGcqWuVn6EnhZ1MPKs4.roa (raw, json)
Hash identifier: NYk6DaePh6RhIIG3Lq2kU6mGAecZjldv9iY78fX1hng=
Subject key identifier: BF:23:89:82:9C:B7:94:67:2A:5A:E5:67:E8:49:E1:67:53:0F:2A:CE
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019DE11EDDBF13CA1FD27FA536B8B70BE8BD
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/vyOJgpy3lGcqWuVn6EnhZ1MPKs4.roa
Signing time: Fri 01 May 2026 01:19:49 +0000
ROA not before: Fri 01 May 2026 01:19:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199734
IP address blocks: 2a06:9801:229::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e1:1e:dd:bf:13:ca:1f:d2:7f:a5:36:b8:b7:0b:e8:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: May 1 01:19:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf2389829cb794672a5ae567e849e167530f2ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d3:76:db:1b:54:1c:70:3a:c8:07:40:a9:e3:
2b:99:70:a2:7a:0a:c8:34:1e:26:36:be:77:50:4e:
23:36:81:f4:14:39:0f:4f:e0:3d:e6:67:cf:08:70:
d9:fe:62:91:c0:44:df:54:81:e6:81:56:98:4c:97:
76:a1:6e:67:e5:96:39:4d:c4:07:ff:e4:cc:5a:6e:
2b:c9:11:f7:76:3b:01:59:6d:cd:44:57:fe:78:26:
fd:1e:64:38:ee:ed:7e:e0:4e:2e:93:ba:3b:cc:e9:
b2:5d:7f:21:6d:44:df:2f:54:c4:81:73:8e:7b:44:
1b:5e:d6:51:03:13:24:30:c1:65:10:24:0d:ac:19:
c2:40:d7:75:f3:fd:6b:c9:6f:5b:ec:d3:0e:0d:29:
a8:a9:43:4f:0f:1c:18:d0:3d:c5:82:54:af:ea:48:
5a:07:38:9f:e7:11:82:d2:23:d1:45:a0:80:b0:80:
10:06:24:69:dc:18:5d:00:6b:e9:0e:88:bf:1e:c0:
db:c6:38:51:f2:6b:3d:e0:f5:97:c4:04:2b:48:f7:
78:af:33:0d:0b:88:a1:43:ca:0b:af:10:c7:78:82:
53:42:40:4e:bc:20:b0:63:1e:fa:bf:01:2b:11:7e:
d1:3c:bb:36:ad:e5:ab:db:ae:98:10:1f:e0:fd:79:
e6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:23:89:82:9C:B7:94:67:2A:5A:E5:67:E8:49:E1:67:53:0F:2A:CE
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/vyOJgpy3lGcqWuVn6EnhZ1MPKs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:229::/48
Signature Algorithm: sha256WithRSAEncryption
b5:2c:c0:a5:79:81:1b:06:ff:11:21:f8:16:b2:30:d6:01:a2:
3b:d0:9f:04:d3:a5:26:ba:c6:55:b0:b5:ea:c8:35:9f:0a:dc:
48:86:9a:b0:a6:71:59:4b:07:5f:0f:b0:6a:07:e4:f6:8e:bb:
43:f3:d9:20:87:e3:72:eb:5d:32:cf:37:27:95:e6:9a:f2:3a:
a8:e5:f0:9d:c8:0e:26:ce:9f:bd:53:72:50:30:81:ae:41:b7:
24:50:34:79:78:7a:94:c3:65:11:7d:3c:b1:23:0e:f7:72:d7:
8d:fe:0a:81:d4:ae:f4:6b:bc:be:cd:77:61:d5:71:0c:9a:ab:
cc:28:42:da:27:60:7a:11:e3:6b:12:ed:b8:97:47:94:21:f3:
9e:fe:2d:ab:2c:f4:c1:04:0c:53:ed:49:d0:80:9e:aa:5a:aa:
7b:15:f5:c3:1f:06:35:23:39:f2:07:c9:64:75:1d:90:6d:10:
9d:bc:47:2f:5c:50:c0:72:03:ce:74:46:cb:92:70:3e:55:4e:
7f:8b:c0:5b:73:7c:e5:2f:28:48:9b:0e:c5:a0:3c:31:0f:e2:
b4:a6:43:57:d3:8c:a2:df:54:9d:bd:7d:6f:04:ad:fc:ed:66:
0a:8c:09:12:bd:be:d1:14:db:ed:bd:d1:e5:6b:18:a7:6b:8d:
1d:f5:51:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:21:10 2026 by rpki-client