Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/xA-HGzKChasWiGzVupXKq_G8EnA.roa
File: xA-HGzKChasWiGzVupXKq_G8EnA.roa (raw, json)
Hash identifier: VxJzLbBIql1QjKZvEbSf91popOPiKGSikxQ4M1PSUvw=
Subject key identifier: C4:0F:87:1B:32:82:85:AB:16:88:6C:D5:BA:95:CA:AB:F1:BC:12:70
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A186E18116FDDB666805529EE5EDDC2066
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/xA-HGzKChasWiGzVupXKq_G8EnA.roa
Signing time: Thu 29 Oct 2026 08:58:07 +0000
ROA not before: Thu 29 Oct 2026 08:58:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208743
IP address blocks: 2a06:9801:1564::/48 maxlen: 48
2a06:9801:1566::/48 maxlen: 48
2a06:9801:159b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:e1:81:16:fd:db:66:68:05:52:9e:e5:ed:dc:20:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Oct 29 08:58:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c40f871b328285ab16886cd5ba95caabf1bc1270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8e:d5:78:a9:5c:cf:75:4f:74:ea:da:d5:db:
21:60:a6:1c:19:9e:16:19:88:8f:45:42:60:58:b4:
20:8f:01:84:0d:58:b8:8e:f0:6c:c5:e8:d6:7a:e5:
96:d8:aa:eb:20:c2:f8:04:73:9e:be:ab:fb:9f:e9:
93:68:74:fc:4a:48:d4:f0:73:27:d9:ac:5e:27:29:
f0:0f:05:d9:82:e4:66:ad:07:9b:16:97:96:fc:a8:
60:86:fb:14:7f:37:2b:4d:6b:fc:0d:51:e9:2e:bf:
64:26:7b:62:70:2f:7b:1c:7c:74:bf:d1:72:3d:c5:
38:47:5b:45:be:f2:3b:8a:21:6b:16:4d:e8:13:bb:
d0:84:cb:f5:f8:ae:f0:c4:f0:30:57:3b:35:e7:a5:
fe:41:32:66:61:66:19:bf:20:22:d2:57:7c:79:a9:
a2:aa:8f:c8:e7:45:13:c6:b2:dd:c9:dd:7f:ff:ac:
22:9d:fe:e1:c5:da:a6:d7:3d:8b:de:6e:a7:06:f5:
39:df:77:94:b8:91:01:67:56:5a:00:21:ff:8f:f8:
a9:23:43:f2:88:d6:17:de:5e:08:1b:45:0b:d5:a8:
1a:ff:ff:bf:ca:ec:5d:21:ef:58:eb:e0:1f:90:ab:
27:8f:49:7b:93:f3:68:63:5f:5b:fe:97:29:3b:dc:
15:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0F:87:1B:32:82:85:AB:16:88:6C:D5:BA:95:CA:AB:F1:BC:12:70
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/xA-HGzKChasWiGzVupXKq_G8EnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:1564::/48
2a06:9801:1566::/48
2a06:9801:159b::/48
Signature Algorithm: sha256WithRSAEncryption
0c:35:ae:78:15:5c:e3:f5:fd:24:11:cc:a2:97:64:9b:3b:ab:
4f:a5:91:ca:02:75:9a:5f:60:22:25:bc:0e:75:ec:45:dd:a4:
66:89:af:e4:57:36:19:76:d0:6e:8a:84:7f:7e:50:f7:dc:9f:
fb:37:18:15:b6:8a:fc:2e:70:a1:f9:79:64:3f:60:c2:af:57:
29:60:10:28:3a:fb:ed:3f:3e:1b:25:46:3e:6f:1e:01:6c:e4:
5e:cd:cf:0a:da:d9:b2:e3:85:77:37:2f:01:3e:b7:91:71:31:
fe:f3:12:22:f2:c1:b3:9c:13:d5:2b:8f:6b:7b:3e:fe:c3:74:
1b:5c:dd:52:64:55:f1:04:6f:d1:e2:df:8a:69:75:55:77:3a:
ec:9e:22:0a:ff:fa:8a:8b:ec:53:41:f1:54:f3:47:4d:82:b6:
de:b6:d8:24:33:d7:be:01:55:fb:a4:0a:72:4d:95:88:b0:2b:
19:e7:be:de:f0:c5:39:2c:43:57:ee:0f:dc:76:cf:ee:cf:c4:
09:cc:ec:5f:09:7c:db:d8:29:2c:ca:4b:25:7d:fd:4e:de:6a:
4a:4f:9d:20:ad:e5:b4:df:0d:dc:ef:41:e9:ee:fe:33:29:58:
dc:ff:c8:4c:ff:66:8f:92:fa:9d:12:4a:5a:7a:16:c7:0c:1a:
11:e3:1c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:25:40 2026 by rpki-client