Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/xONBhXW1bAZ9hNoJ-2DBNmXTJVM.roa
File: xONBhXW1bAZ9hNoJ-2DBNmXTJVM.roa (raw, json)
Hash identifier: lh6IVeXq9J2EpOl7uQ6yTIJOEM+bl7Eh2GBVTSEcVvE=
Subject key identifier: C4:E3:41:85:75:B5:6C:06:7D:84:DA:09:FB:60:C1:36:65:D3:25:53
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019F196EDF4C5339422A4DC4735D66028330
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/xONBhXW1bAZ9hNoJ-2DBNmXTJVM.roa
Signing time: Tue 30 Jun 2026 16:48:44 +0000
ROA not before: Tue 30 Jun 2026 16:48:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219308
IP address blocks: 2a06:9801:7d1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:6e:df:4c:53:39:42:2a:4d:c4:73:5d:66:02:83:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jun 30 16:48:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c4e3418575b56c067d84da09fb60c13665d32553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c7:49:6d:bc:41:d3:04:46:78:48:7f:33:f3:
0d:34:88:27:3e:76:ac:b1:15:92:d7:08:3e:c4:c3:
4c:9c:61:aa:10:e1:ca:0c:f3:ac:03:d0:bd:eb:29:
4b:ad:c6:37:63:dc:d3:a9:a3:dc:0b:1f:67:8e:0b:
b9:5c:0f:1d:b9:42:5f:6b:62:a8:67:0a:d2:4e:8d:
fa:7d:0f:b8:9d:05:6d:9a:67:bb:c0:7f:9e:81:f0:
7f:5a:05:df:d5:35:0b:41:ae:26:f1:80:4b:99:2c:
f7:7c:09:b2:7c:5a:57:f7:87:ff:ed:91:cb:62:dd:
b1:91:09:ac:a5:b6:06:e1:42:6d:48:93:e5:70:c2:
17:de:b0:29:ce:d1:ea:15:75:68:10:c4:7c:88:46:
cb:12:a2:bd:19:c2:de:d8:c7:4c:b9:f9:65:46:39:
66:df:1c:82:a2:38:88:d5:2d:66:9d:d2:09:c0:98:
fc:de:92:28:e4:11:4b:5c:b0:44:b8:3c:0f:5d:b7:
df:de:46:5f:e4:12:ba:01:2b:3c:01:43:a0:b3:2f:
b6:a7:6a:70:14:6a:fd:4a:81:2f:03:3b:dd:c6:58:
5b:37:d7:eb:27:07:37:f8:8d:d1:2e:b7:36:31:e5:
b9:7b:5b:28:89:d7:93:e5:8c:bb:e9:98:d0:35:70:
70:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E3:41:85:75:B5:6C:06:7D:84:DA:09:FB:60:C1:36:65:D3:25:53
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/xONBhXW1bAZ9hNoJ-2DBNmXTJVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:7d1::/48
Signature Algorithm: sha256WithRSAEncryption
b4:96:ae:59:56:bd:a4:7d:73:40:86:67:4e:0c:65:02:2e:63:
20:ab:31:f4:ae:29:93:64:7e:5c:1b:79:a7:3a:1a:4c:ef:9e:
8d:3e:c8:6e:0c:ac:13:8f:96:be:55:fb:d6:68:89:e0:3e:33:
57:0b:73:a6:aa:84:fd:e6:04:40:9f:9a:f9:e6:be:3a:3c:42:
76:2c:d6:f3:60:eb:a4:65:ad:6a:34:9d:05:09:77:55:93:bd:
e9:a0:03:06:44:a3:d8:f7:b9:6a:08:31:58:ea:90:2d:19:90:
40:d4:48:68:27:e9:57:f0:2a:63:60:66:73:97:a6:9e:f7:2c:
c9:48:51:ed:d6:66:ed:22:cd:24:37:81:7a:67:ee:96:0c:ab:
49:05:ba:a2:ea:f5:c1:ef:6d:84:07:28:e4:8b:14:dd:dd:7f:
71:72:20:47:a5:bd:80:73:6b:c7:44:5e:d3:08:73:72:24:b6:
d0:a7:e7:5a:f0:03:1c:cf:44:6d:da:18:19:33:f0:f3:25:d0:
b5:57:fc:76:97:37:99:e9:e6:80:11:43:e8:24:63:04:31:09:
5d:36:73:aa:78:d3:4c:7d:45:b8:25:e5:3e:bb:40:2a:d6:66:
b9:3a:8a:96:eb:5e:ac:6b:15:ed:d5:74:2b:a0:dd:5d:9d:0c:
b5:22:f2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 18:59:02 2026 by rpki-client