Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/5RSDx3mdZpv7A2-GHrcGRSHNg44.roa
File: 5RSDx3mdZpv7A2-GHrcGRSHNg44.roa (raw, json)
Hash identifier: n3aCMxWrFmg7+v575lkKanqAaxc774YMw6UBIl1getg=
Subject key identifier: E5:14:83:C7:79:9D:66:9B:FB:03:6F:86:1E:B7:06:45:21:CD:83:8E
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019FC86615E2BAE7DA3B39CF012F9DC4612E
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/5RSDx3mdZpv7A2-GHrcGRSHNg44.roa
Signing time: Mon 03 Aug 2026 16:12:41 +0000
ROA not before: Mon 03 Aug 2026 16:12:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201957
IP address blocks: 2a06:9801:f72::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c8:66:15:e2:ba:e7:da:3b:39:cf:01:2f:9d:c4:61:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Aug 3 16:12:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e51483c7799d669bfb036f861eb7064521cd838e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:74:33:06:0d:ea:be:d1:28:8b:c8:c0:81:0e:
90:8f:20:fc:58:76:ff:e6:cc:05:6e:63:cf:eb:68:
84:29:f2:2d:1c:af:fa:64:a4:7c:b2:de:35:bd:60:
2f:0d:31:60:62:d6:65:37:1a:2b:26:32:04:2c:72:
a4:74:20:91:81:fc:ae:6d:93:be:7c:93:fb:8c:38:
90:0a:09:8e:57:ea:2f:29:68:44:aa:b4:2f:70:40:
47:71:91:b9:8b:eb:aa:e4:8f:91:aa:b7:b2:71:c1:
85:ff:ab:c6:62:8c:70:d2:5b:11:4a:46:36:9b:45:
78:12:f5:9f:23:f9:96:ed:76:49:3a:0e:a6:62:0d:
8b:e7:ab:2e:e0:83:56:25:cf:a5:53:fe:34:e4:8e:
73:63:ab:47:b5:30:6e:8f:a0:70:e5:4a:f2:fd:d8:
df:af:3b:b5:8a:48:e7:45:82:cd:3e:8a:98:7e:5d:
68:a0:cc:81:7b:de:aa:5d:59:a1:bf:d4:07:94:f7:
1b:d7:29:ef:42:26:71:4a:52:3a:32:33:c0:61:97:
ce:97:ab:f4:9e:df:b2:89:72:46:7b:16:b5:41:63:
60:eb:d7:ff:a1:0b:63:cb:d3:52:7c:3d:c8:5c:0e:
4e:d0:fe:64:6c:4a:94:ac:99:9f:41:81:eb:ea:9b:
b8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:14:83:C7:79:9D:66:9B:FB:03:6F:86:1E:B7:06:45:21:CD:83:8E
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/5RSDx3mdZpv7A2-GHrcGRSHNg44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:f72::/48
Signature Algorithm: sha256WithRSAEncryption
69:cc:75:58:34:b1:1e:97:d2:42:2c:64:a1:e0:78:ad:b3:f5:
86:5e:56:ea:dd:d3:5b:bd:b2:fb:67:09:8d:9a:d9:1e:58:79:
cc:ac:49:b0:df:a8:d2:26:c8:9f:eb:20:ed:dd:58:1c:21:62:
2c:98:08:45:10:c7:c8:91:e8:c7:99:d3:42:b9:02:bc:a9:d6:
d7:4e:54:fc:76:76:f1:5c:e9:c0:e9:54:0b:8f:38:f1:46:b5:
8b:ab:be:b2:2c:5a:70:ca:77:8f:60:d0:8f:82:7b:cd:0f:98:
8b:68:b7:a4:46:e8:09:68:c8:ef:b6:f6:c6:a7:79:7a:1a:b3:
b9:38:1c:ee:e8:cb:d2:78:88:37:97:69:34:c7:e8:06:49:85:
e1:0a:97:6a:8d:e3:95:85:36:ec:57:66:77:97:5a:52:8b:cc:
be:72:c1:22:0b:22:5c:3d:14:b2:9e:90:6e:81:29:8c:d4:92:
01:02:4a:78:e9:f1:31:d8:53:ba:e5:b7:0c:db:cd:f0:1d:1a:
a6:7f:c8:09:db:f8:3b:23:5b:d3:e3:00:7e:bd:6c:22:21:0e:
c5:00:26:05:28:03:a3:05:35:a4:f1:40:f3:82:90:ec:81:f9:
ac:a0:4c:80:50:33:ac:99:f7:90:83:76:05:88:1d:25:6d:a7:
8d:27:df:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 17:11:51 2026 by rpki-client