Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/w2g368Tg88bJ6TARUvgyWgxPuCU.roa
File: w2g368Tg88bJ6TARUvgyWgxPuCU.roa (raw, json)
Hash identifier: spAs/KgGYS5HlP04IFjPg9RNf539Zenx7r/MOjEi/0k=
Subject key identifier: C3:68:37:EB:C4:E0:F3:C6:C9:E9:30:11:52:F8:32:5A:0C:4F:B8:25
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A1AC41EE32B617108B41F082DEDBE74478
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/w2g368Tg88bJ6TARUvgyWgxPuCU.roa
Signing time: Thu 05 Nov 2026 15:09:24 +0000
ROA not before: Thu 05 Nov 2026 15:09:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214693
IP address blocks: 2a06:9801:f4c::/48 maxlen: 48
2a06:9801:fc4::/48 maxlen: 48
2a06:9801:15cd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ac:41:ee:32:b6:17:10:8b:41:f0:82:de:db:e7:44:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Nov 5 15:09:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c36837ebc4e0f3c6c9e9301152f8325a0c4fb825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a5:77:49:60:45:03:48:3c:72:1c:76:fd:ad:
4d:38:55:d6:3c:78:40:98:42:99:4f:9e:a6:ff:16:
45:a8:b5:05:fa:22:6d:66:33:65:99:8c:32:78:65:
fa:99:52:21:0c:7f:0c:5a:ff:c5:db:85:62:6c:3e:
5a:25:ca:cf:9b:e7:01:2e:48:b9:d5:e7:8c:95:00:
c3:2e:34:2a:78:50:aa:53:a6:dc:fd:6d:80:f1:8e:
01:1a:c4:bc:e9:11:cb:c5:9d:08:12:d7:21:da:c1:
41:2a:99:e5:8e:bc:ea:44:38:d9:a5:24:30:bb:05:
57:8b:19:12:6e:05:2b:15:2a:e7:30:6f:25:2c:b5:
82:08:04:9c:0b:ae:fd:4c:25:67:0a:e8:21:6e:79:
9d:a9:7b:f1:d9:3d:54:c5:1d:16:e4:f4:26:11:36:
1a:fa:b6:d3:ee:1c:0d:04:1e:24:d0:66:b1:84:83:
3f:39:37:94:73:a7:1d:23:19:b5:62:ad:8d:c6:3e:
78:72:b2:b2:df:d9:c4:d6:95:64:27:ec:95:29:1a:
07:10:a1:cb:df:f4:2a:ab:44:f4:18:d1:4a:e2:25:
92:46:2a:c1:25:87:51:9e:f1:e3:ad:43:55:cf:cc:
96:73:c1:56:26:b6:fa:a5:b6:fd:24:13:5a:01:1b:
c7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:68:37:EB:C4:E0:F3:C6:C9:E9:30:11:52:F8:32:5A:0C:4F:B8:25
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/w2g368Tg88bJ6TARUvgyWgxPuCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:f4c::/48
2a06:9801:fc4::/48
2a06:9801:15cd::/48
Signature Algorithm: sha256WithRSAEncryption
a7:40:37:cc:b5:b8:fd:52:57:46:fa:47:ba:5f:14:72:9f:64:
48:44:52:18:d3:5b:ce:a6:ca:cb:a8:b7:1e:e7:5a:04:0a:1a:
36:d7:23:22:3d:fe:b0:9d:36:ca:1f:c9:fc:0c:ab:88:7e:26:
79:4e:cf:34:f9:81:f7:c5:c1:5a:2c:76:e6:ed:46:12:b4:0e:
c1:c0:2a:56:bf:13:78:53:28:20:86:96:23:11:47:76:da:eb:
20:42:18:fe:7c:bc:e5:3f:26:e0:23:3b:10:56:29:b1:b3:24:
38:91:a6:57:93:a4:1b:cf:ac:39:37:8b:11:72:2a:5f:f5:f3:
b1:b4:19:16:c3:02:15:8a:06:5e:4d:42:82:e6:9b:2e:1d:e9:
ff:f5:da:5d:88:01:b4:c4:9b:52:4e:4d:d4:76:e8:1c:44:7b:
f8:ae:26:aa:de:cc:70:80:f7:31:88:ad:8a:74:71:7f:49:c2:
83:a3:c8:de:43:c0:8d:81:c0:9a:8b:1e:3c:39:27:b1:20:bb:
29:41:60:ed:fd:02:80:9e:38:6e:1f:61:34:ce:85:74:42:00:
88:fa:b7:52:22:66:c0:bf:ca:24:fe:57:a7:51:04:78:da:d3:
37:25:df:ce:f9:9e:8a:86:04:27:bf:d2:a8:4c:be:95:50:ed:
e6:6e:0b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:32:04 2026 by rpki-client