Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/1-bLYSydLbojYYixYhiknZ8j6VzE.roa
File: 1-bLYSydLbojYYixYhiknZ8j6VzE.roa (raw, json)
Hash identifier: CkjTKl71LLnzBHA7meusg51k1GgVD1UKE6yTfvTaLus=
Subject key identifier: F9:B2:D8:4B:27:4B:6E:88:D8:62:2C:58:86:29:27:67:C8:FA:57:31
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A05E67E15B4ACF83A9A6B950EF0D504195
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/1-bLYSydLbojYYixYhiknZ8j6VzE.roa
Signing time: Tue 01 Sep 2026 19:17:41 +0000
ROA not before: Tue 01 Sep 2026 19:17:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207258
IP address blocks: 2a06:9801:1600::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:53:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5e:67:e1:5b:4a:cf:83:a9:a6:b9:50:ef:0d:50:41:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Sep 1 19:17:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f9b2d84b274b6e88d8622c5886292767c8fa5731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:66:96:11:5b:ad:b1:8a:c5:e2:1f:6e:f5:13:
a3:aa:01:ae:f4:a3:26:b8:46:be:02:30:53:59:9c:
23:ff:a1:bf:90:13:3b:24:2d:e6:12:94:9b:12:ab:
91:e9:49:87:8e:e7:c0:e8:10:d6:8a:9f:67:12:e0:
96:12:04:d1:f1:48:98:a0:e7:00:ed:60:11:1f:2c:
82:73:08:fe:9a:f3:ee:fb:f7:06:58:62:14:bb:57:
d9:5f:ab:72:67:ad:18:74:03:90:92:c3:36:38:fc:
bc:63:f6:1a:70:71:7b:93:01:0a:b0:dd:12:61:10:
fd:e3:ae:02:f8:fc:29:8b:b9:bd:8e:56:cf:74:b7:
f1:81:0e:8f:52:c5:a5:67:ad:e8:47:b7:e7:57:9b:
6d:45:bc:0a:66:f5:f0:ad:ed:af:ab:11:5c:f7:7c:
b2:ac:6d:56:d8:cd:50:25:f2:41:7b:52:f7:ba:da:
b5:bd:47:51:d2:9f:c6:01:99:5d:7f:98:c9:f0:77:
27:da:ef:b1:61:0c:42:05:77:ae:a4:8b:32:31:d1:
7b:2a:61:72:89:79:4b:95:44:7a:13:c4:01:c1:6a:
41:d3:05:14:d4:42:46:85:5c:81:26:45:a0:ba:3e:
29:49:36:8c:d5:c5:2d:9e:c6:20:b7:a5:18:91:e3:
f8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B2:D8:4B:27:4B:6E:88:D8:62:2C:58:86:29:27:67:C8:FA:57:31
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/1-bLYSydLbojYYixYhiknZ8j6VzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:1600::/40
Signature Algorithm: sha256WithRSAEncryption
2a:05:e5:7a:28:7a:3c:b5:dd:98:1b:8c:78:f1:c3:2c:51:49:
27:a7:78:1d:61:7a:0d:ac:d3:a6:61:ff:fe:09:a9:e1:ce:51:
22:53:c0:be:25:49:35:ee:41:78:42:12:34:ff:60:7c:5a:9b:
61:77:a7:55:a9:73:9f:bc:8d:77:f7:b1:4b:bf:bf:44:1f:82:
df:ee:ff:83:2b:1f:e9:75:5f:72:84:c0:7f:7d:2a:7a:51:e0:
2c:50:2e:fa:95:69:9c:6c:18:75:e1:ae:54:08:2c:29:50:0f:
a9:06:f0:af:7f:de:4c:66:9d:67:8b:8d:72:0f:9f:01:d5:07:
ad:55:f5:2c:68:22:39:af:63:ad:76:0e:1a:fe:6c:fa:7c:e7:
ac:a5:16:81:f3:3a:29:5b:e8:83:7e:5d:2f:b5:30:99:c7:2d:
16:cc:09:c0:ac:44:06:4c:f7:66:df:eb:25:a9:5a:f2:0b:61:
77:f3:fc:f4:01:ff:2b:2d:ed:ee:2c:27:4f:74:b7:f7:1b:db:
1f:f0:1f:88:82:d7:ec:31:59:3d:71:c8:df:ff:b5:25:e5:f1:
a0:61:ea:dc:5b:aa:84:f2:59:66:34:0b:f4:1b:82:41:a9:bd:
02:f2:1f:48:e6:e6:3c:c3:81:42:9d:d7:cb:b9:56:b4:f0:f1:
bf:8e:75:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:29 2026 by rpki-client