Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/0l7edeRaEXR8F0R9-4QB_qSYVfg.roa
File: 0l7edeRaEXR8F0R9-4QB_qSYVfg.roa (raw, json)
Hash identifier: HqezK/qyjHCOo6UX7eaaRYNHP5kScL2kHmGa/5fXLZA=
Subject key identifier: D2:5E:DE:75:E4:5A:11:74:7C:17:44:7D:FB:84:01:FE:A4:98:55:F8
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A01BB7DA4DEA5BE5A99879F5E199141969
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/0l7edeRaEXR8F0R9-4QB_qSYVfg.roa
Signing time: Wed 19 Aug 2026 20:30:28 +0000
ROA not before: Wed 19 Aug 2026 20:30:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208755
IP address blocks: 2a06:9801:7f1::/48 maxlen: 48
2a06:9801:fb0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Aug 2026 06:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1b:b7:da:4d:ea:5b:e5:a9:98:79:f5:e1:99:14:19:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Aug 19 20:30:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d25ede75e45a11747c17447dfb8401fea49855f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d0:c6:76:24:a1:89:fb:e6:12:5c:a8:8f:66:
19:0b:f5:5d:89:e9:ce:89:9e:87:12:76:d2:27:b6:
dc:01:5e:0f:ed:1c:f7:60:35:49:0a:46:f8:4a:07:
48:e6:7b:9c:cd:fa:6d:b4:1c:28:e8:28:cf:b5:52:
c1:b8:45:a6:ad:c3:97:43:a7:88:22:43:ae:30:8d:
59:b1:85:c5:bb:57:de:6d:4e:07:32:a1:e0:34:b1:
c4:36:06:1b:20:ae:51:8c:5d:f1:1b:24:6d:5d:5b:
0d:5c:ee:05:4e:79:17:bc:a6:52:38:a1:15:b9:e7:
95:e7:44:b6:86:eb:d9:75:c8:70:96:1c:fc:3d:db:
17:a4:89:cb:d5:f1:09:29:34:59:45:66:57:a7:81:
73:1a:c4:23:23:2a:de:16:2f:7f:c5:f9:d4:f3:9b:
b8:01:8c:b0:a6:be:e9:1b:2f:20:c9:d9:50:bb:45:
87:6e:41:2a:48:b5:5e:03:88:8f:f2:01:f0:7a:60:
47:e9:4d:9c:23:79:1f:86:87:25:8f:70:c2:05:3b:
42:26:56:cf:76:0d:70:60:6b:c4:66:2c:42:59:88:
72:66:0c:b4:fa:4d:67:69:1d:51:7b:f7:e9:ce:1b:
89:a1:16:9e:be:43:93:9c:9e:ab:82:4a:33:8b:6f:
93:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:5E:DE:75:E4:5A:11:74:7C:17:44:7D:FB:84:01:FE:A4:98:55:F8
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/0l7edeRaEXR8F0R9-4QB_qSYVfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:7f1::/48
2a06:9801:fb0::/44
Signature Algorithm: sha256WithRSAEncryption
be:1d:46:f3:a0:84:fa:0d:02:d7:81:37:52:00:5d:dd:c6:9a:
c3:ec:24:8a:2d:38:93:56:3e:d9:27:6b:af:49:b3:1d:b8:5f:
69:48:12:84:a0:2f:61:07:c7:be:54:85:15:43:0a:c7:2c:b9:
bb:53:40:d5:8d:cd:7a:79:64:fe:2d:51:8d:81:d1:a3:8c:30:
86:95:62:88:79:60:f8:15:e8:b9:72:2f:4c:5c:13:a0:37:cc:
26:54:72:88:2e:fb:91:95:5a:07:57:5d:cd:2e:52:ed:31:05:
8d:36:b3:5f:02:b1:4a:11:9a:a4:4d:ec:77:81:93:cf:85:e8:
3e:25:e4:03:81:b9:70:91:ab:1e:bb:28:86:d6:10:55:c2:51:
84:c4:3c:c9:33:f6:24:b9:29:5d:b6:7d:42:b5:c6:29:27:87:
92:b1:e7:52:c0:0a:e2:48:c8:bd:81:90:c4:53:05:0a:cb:8d:
6b:51:49:78:f7:db:6a:36:73:13:d1:ad:f4:41:7c:71:e6:51:
37:5a:76:ee:b1:e8:0d:c1:bb:d6:83:37:86:38:fa:b9:d4:5d:
f5:8f:43:31:8a:4c:15:a5:fc:d4:05:7f:63:5e:44:cb:e9:f9:
b5:fe:9d:11:1c:68:39:b8:9f:73:40:ec:90:e7:d3:70:53:8a:
2b:a4:db:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 28 12:12:40 2026 by rpki-client