Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/9mEgxt9MrIakh3B_5oAG1WP7qZ4.roa
File: 9mEgxt9MrIakh3B_5oAG1WP7qZ4.roa (raw, json)
Hash identifier: YSEU1V7vbZ1XNxh1t96Uo4XIPTgAja8KIC8/yaFz6NM=
Subject key identifier: F6:61:20:C6:DF:4C:AC:86:A4:87:70:7F:E6:80:06:D5:63:FB:A9:9E
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A1209AC381A5CD220473658EAD10DE2C9F
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/9mEgxt9MrIakh3B_5oAG1WP7qZ4.roa
Signing time: Fri 09 Oct 2026 12:19:35 +0000
ROA not before: Fri 09 Oct 2026 12:19:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213427
IP address blocks: 2a06:9801:227::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:9a:c3:81:a5:cd:22:04:73:65:8e:ad:10:de:2c:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Oct 9 12:19:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f66120c6df4cac86a487707fe68006d563fba99e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bd:fd:ba:1b:b1:f8:fd:b2:46:60:d3:e0:72:
63:47:50:9f:3d:2c:8b:0b:50:81:b3:0c:42:a5:39:
51:6f:cb:e5:7e:47:c2:b8:e1:2d:ed:ab:38:68:7a:
94:f7:e6:1e:cf:b5:fd:8b:27:e9:c7:d6:e5:55:17:
53:b8:ae:1d:d5:b7:04:e1:df:ad:a3:75:c3:d1:93:
10:b1:2e:44:a1:0c:16:d8:ac:74:97:79:9f:e2:6e:
dd:f2:a1:6a:5a:05:be:55:08:04:9e:3f:04:b2:71:
b4:f2:dc:bf:21:d6:0e:ac:63:d4:89:b7:bb:e8:52:
f8:5e:9f:1c:03:76:94:7a:2d:02:3c:4e:3a:c1:18:
0a:f6:cb:b1:54:a7:92:62:33:49:88:53:fd:8c:9f:
cd:a7:1b:49:c7:1b:0d:99:28:a0:17:57:27:fd:77:
14:6b:96:46:ab:50:fb:45:cc:aa:91:d4:95:ab:d9:
6a:c7:08:cd:81:34:af:9f:92:70:2f:19:c0:7c:56:
1e:2e:f7:99:c0:4d:1a:d0:2c:d7:d2:95:4f:24:c2:
37:bd:a5:ef:4b:d0:43:f4:8e:37:9d:3b:77:6e:f4:
61:72:a8:ee:c9:fb:1a:32:4c:af:de:fb:72:6f:25:
a8:05:06:63:51:0d:df:12:e9:27:60:c2:92:0c:0e:
ff:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:61:20:C6:DF:4C:AC:86:A4:87:70:7F:E6:80:06:D5:63:FB:A9:9E
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/9mEgxt9MrIakh3B_5oAG1WP7qZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:227::/48
Signature Algorithm: sha256WithRSAEncryption
10:7d:74:b0:3f:ea:01:b4:6b:62:c6:61:49:12:f4:64:91:77:
da:e4:72:ae:6a:38:ef:68:d8:9c:26:74:81:ac:e7:0f:20:47:
ee:6c:6a:41:96:af:1d:e5:bb:b1:96:c4:a9:59:10:68:95:09:
5d:ec:73:79:11:0f:5c:49:22:e8:a8:fa:d2:e4:b5:99:5d:f9:
b7:85:78:4f:ff:e7:5e:0c:90:83:74:b7:3c:8c:cf:85:55:11:
93:22:45:12:80:33:9f:a3:12:21:2f:27:f2:a2:ee:01:3c:b6:
0a:e8:b8:ee:a3:48:79:ad:23:3d:85:19:7a:79:5a:f8:80:60:
6c:11:53:81:50:06:02:f9:b5:dc:a3:cc:2a:45:84:d0:a7:03:
37:e4:32:83:69:3e:28:ec:e8:53:22:3a:e8:16:01:8b:92:44:
98:9c:72:4c:c6:dc:84:74:ab:6d:7a:f5:8c:e2:76:e4:58:00:
83:c3:d3:5a:51:2d:e9:7f:ab:19:47:19:0e:7e:04:05:81:77:
86:bd:c7:65:f2:92:2a:71:d7:7a:15:31:46:7f:17:84:79:3e:
e5:77:e8:da:24:20:07:4f:5e:33:b7:3c:c3:89:b1:6b:f3:28:
96:74:ec:10:76:60:10:94:f4:e3:10:6a:7a:85:65:20:45:d1:
1e:f2:7b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 18:50:47 2026 by rpki-client