Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/3yHCVEOEGkYzl_yUfqicualFbPY.roa
File: 3yHCVEOEGkYzl_yUfqicualFbPY.roa (raw, json)
Hash identifier: 2I8Z5K7hIffAcprUuvVk75g4JafgHpk6qwDtDmO2gT0=
Subject key identifier: DF:21:C2:54:43:84:1A:46:33:97:FC:94:7E:A8:9C:B9:A9:45:6C:F6
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019CE4FADA4C864AA3B04916D7F7E431BE7A
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/3yHCVEOEGkYzl_yUfqicualFbPY.roa
Signing time: Fri 13 Mar 2026 02:16:11 +0000
ROA not before: Fri 13 Mar 2026 02:16:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200181
IP address blocks: 2a06:9801:cd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Mar 2026 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:fa:da:4c:86:4a:a3:b0:49:16:d7:f7:e4:31:be:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Mar 13 02:16:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=df21c25443841a463397fc947ea89cb9a9456cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:94:ca:da:4f:ac:77:98:77:22:2e:52:3b:22:
7a:10:58:b3:50:bd:42:8f:cf:14:4a:c8:67:72:3e:
d5:7a:bf:1c:86:76:66:ec:0d:3c:ec:3a:e1:ec:e1:
95:7c:f7:99:09:2e:f5:65:9b:ff:fe:d7:d0:3a:db:
28:ee:e3:25:e5:1f:1a:e4:59:89:04:91:c8:40:f3:
21:7e:37:d5:0f:13:45:75:8e:a5:95:9a:83:9e:b0:
3a:e6:0b:08:d1:81:8d:e7:b8:37:94:13:e5:4d:29:
8b:76:dd:e3:57:43:13:c2:db:f0:ef:c0:88:75:11:
52:f4:bf:0f:b0:e1:ce:b3:de:17:d7:45:91:ea:09:
7e:45:47:7b:c0:36:d7:a5:5c:91:08:a5:ff:7a:2c:
3e:04:52:d4:d2:cf:e3:f9:c1:2c:f0:33:81:a4:c2:
df:f3:7a:16:ad:27:6d:42:f9:02:ef:95:93:b7:9b:
a5:0d:90:93:83:f1:e5:66:2c:79:41:7d:46:8f:23:
59:e5:40:ed:bd:80:96:0e:31:34:12:15:22:dd:75:
07:dd:c2:a2:ad:44:76:a9:d4:a0:06:cf:04:c8:f9:
dd:88:6a:3e:c5:c0:0c:71:b1:d3:00:5c:33:e9:64:
a4:c4:8f:ac:90:f3:60:3f:af:83:e6:34:11:e9:d9:
e5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:21:C2:54:43:84:1A:46:33:97:FC:94:7E:A8:9C:B9:A9:45:6C:F6
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/3yHCVEOEGkYzl_yUfqicualFbPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:cd::/48
Signature Algorithm: sha256WithRSAEncryption
58:96:55:5a:24:ec:aa:18:e5:84:a2:12:35:3f:b2:b1:db:ef:
8f:8b:86:52:93:f3:9d:ca:fb:e3:87:26:12:31:8b:ee:c8:7c:
41:42:f7:1e:7f:d7:41:95:4c:6d:05:72:1a:a8:99:98:e2:ea:
30:ff:8b:a1:47:60:de:63:f6:4e:9b:d8:de:b3:f6:d9:08:d2:
aa:5b:cc:81:2f:44:fe:bb:32:29:bb:f8:2d:f6:9d:2d:5a:88:
a3:57:c7:69:d9:95:4a:c0:04:61:e8:55:0c:ca:70:c7:22:bd:
fb:fd:58:00:d7:af:42:be:4c:b1:92:86:54:97:3b:fb:ea:ed:
de:89:80:a9:f7:04:00:74:7c:e6:15:76:2e:24:95:f5:af:55:
32:ae:9e:54:06:39:12:8d:47:41:41:67:dd:66:5a:b2:b0:1d:
ac:14:fc:bb:0f:89:0e:da:f4:c9:4d:58:a5:93:cf:79:d8:46:
68:d5:ef:5b:3d:5b:ad:95:b9:93:8e:66:a4:c3:98:8f:02:cb:
a6:4f:92:48:d1:5d:5e:d1:7f:f7:8b:1b:6c:62:a3:bb:06:7b:
56:b1:1d:47:f8:cb:22:e3:c3:03:89:7e:88:67:3b:8d:bf:be:
62:50:35:d5:8b:9f:5e:1c:ac:30:5e:98:5f:52:7f:be:af:fc:
c0:27:84:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 11:40:39 2026 by rpki-client