Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/31l2AEY7GEWjc18V1qPVuLkYPL4.roa
File: 31l2AEY7GEWjc18V1qPVuLkYPL4.roa (raw, json)
Hash identifier: UXAOQ0yqtiNWFo6LMrL4Bcg9J7Sis3T1nNglAtR6do0=
Subject key identifier: DF:59:76:00:46:3B:18:45:A3:73:5F:15:D6:A3:D5:B8:B9:18:3C:BE
Certificate issuer: /CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
Certificate serial: 01A0867F36CEDACC10E1D5B6A3E32FACB39C
Authority key identifier: 61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/31l2AEY7GEWjc18V1qPVuLkYPL4.roa
Signing time: Wed 09 Sep 2026 14:07:59 +0000
ROA not before: Wed 09 Sep 2026 14:07:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 52000
IP address blocks: 2a0f:4240::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:7f:36:ce:da:cc:10:e1:d5:b6:a3:e3:2f:ac:b3:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
Validity
Not Before: Sep 9 14:07:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df597600463b1845a3735f15d6a3d5b8b9183cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5e:82:bb:c9:77:43:15:d2:a2:2d:52:d5:33:
07:b2:8a:91:16:8f:d5:56:81:d2:f1:f4:6e:a4:b2:
1e:65:32:5a:ac:84:3f:72:78:48:69:d5:d8:0b:35:
83:23:c8:8b:98:63:39:04:20:32:66:75:6c:ed:10:
71:39:3c:a0:5e:a6:35:d3:7e:3c:20:e3:9f:aa:5d:
a3:65:9b:8a:87:fd:aa:d3:19:33:1f:a3:63:a4:62:
35:5f:dc:67:b1:20:6b:ff:9c:87:9a:a5:cd:25:4f:
7f:2e:08:9d:81:da:df:9d:b8:0e:be:f9:32:69:bc:
d6:5d:ab:3f:45:52:83:c6:2d:07:99:cb:25:0f:11:
f7:aa:70:43:52:cd:fa:0f:52:e8:4c:8f:a7:e0:f8:
1a:5b:51:f9:05:b5:59:59:ea:f5:09:54:35:f5:80:
7c:96:c5:ed:cb:c3:40:83:ec:ac:0f:e7:e8:33:1a:
1c:15:e8:7b:73:91:96:65:4a:f3:d8:f6:ef:db:2c:
ad:1e:eb:cc:0e:4b:83:07:2b:87:fb:b0:61:68:01:
1f:b5:c8:10:23:51:e6:06:09:3b:0a:89:d3:49:3e:
72:59:02:c9:56:fd:02:a6:c7:ec:31:44:8d:bc:4f:
62:32:3c:92:e8:9d:3b:47:e9:54:4d:25:bf:d6:4d:
db:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:59:76:00:46:3B:18:45:A3:73:5F:15:D6:A3:D5:B8:B9:18:3C:BE
X509v3 Authority Key Identifier:
keyid:61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/31l2AEY7GEWjc18V1qPVuLkYPL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:4240::/29
Signature Algorithm: sha256WithRSAEncryption
10:1d:e5:72:a6:72:b4:ec:e0:7b:1a:d6:fa:6a:9c:4e:4d:53:
03:1a:01:1e:50:21:1b:ee:63:4a:16:ff:b2:af:b2:ff:e8:5f:
d8:fb:3e:b9:d7:34:d8:21:96:b6:1e:b0:d7:1b:65:1d:ba:08:
0c:a4:4f:cc:11:b3:b6:a8:e7:c6:70:3d:df:79:dc:4e:3b:57:
fa:b7:4b:cc:ba:94:0d:6c:fc:42:4b:d7:fb:2b:68:21:2f:ee:
9a:41:47:69:20:ea:78:ce:ba:cf:8b:0c:d7:0f:e9:14:a3:37:
0d:7e:64:c3:cb:b6:d7:fc:7c:23:c2:0b:b8:8f:08:b4:dd:41:
c2:6a:4b:90:25:c3:8a:af:08:8a:c4:8e:2c:d7:5b:ab:a5:23:
f5:36:ed:23:66:53:31:b2:9f:a3:1e:7f:82:da:e1:3e:e3:a2:
a2:74:04:0d:4d:43:fe:0e:8e:c8:2a:31:e7:f5:ae:66:e9:7a:
0b:bc:70:36:d1:1d:ae:fd:72:d0:c4:f5:ef:f0:25:60:71:2f:
22:ae:ce:0b:05:8d:c0:fd:2d:37:3d:74:48:fa:3a:ac:cc:d4:
6e:7f:85:a4:d4:b4:3b:17:7b:b0:85:19:0a:02:77:d0:56:a7:
32:26:1d:c7:5f:82:a6:f2:f7:52:46:d3:d7:35:d8:b2:28:76:
d1:f2:51:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:09:54 2026 by rpki-client