Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/5TmxX7ajFLKD4RyQ0NUTleeBVL8.roa
File: 5TmxX7ajFLKD4RyQ0NUTleeBVL8.roa (raw, json)
Hash identifier: xM+ULz3GXiUDZw5zOHJpls8XKxJ4QsvvC+7WfNK1GCQ=
Subject key identifier: E5:39:B1:5F:B6:A3:14:B2:83:E1:1C:90:D0:D5:13:95:E7:81:54:BF
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019F1D520E3B0E8A48D6C0015FA8A42AF013
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/5TmxX7ajFLKD4RyQ0NUTleeBVL8.roa
Signing time: Wed 01 Jul 2026 10:55:44 +0000
ROA not before: Wed 01 Jul 2026 10:55:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208755
IP address blocks: 2a06:9801:7f1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Jul 2026 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:52:0e:3b:0e:8a:48:d6:c0:01:5f:a8:a4:2a:f0:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jul 1 10:55:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e539b15fb6a314b283e11c90d0d51395e78154bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:00:de:46:64:a7:92:bc:5d:e0:40:db:fe:94:
33:ef:e8:c0:d0:65:10:a2:b2:64:58:6b:78:31:b0:
24:ec:aa:c1:fd:da:cf:75:9f:45:8b:90:c7:f4:ee:
e6:0d:4f:fe:f7:ca:a0:09:9f:aa:15:1b:98:3c:23:
b9:a4:10:50:dc:6b:3e:f0:33:db:25:5a:e2:f6:23:
9d:9d:19:b5:b9:d7:b3:13:13:14:7a:8a:a2:79:b8:
31:7d:72:b6:6d:34:7b:5d:df:4b:a3:5d:3c:a3:a2:
fc:3e:9f:96:3d:32:03:27:b7:60:98:19:64:c8:1b:
f4:09:c9:e2:d9:09:92:e0:a3:1c:05:9f:b9:89:76:
57:c6:96:a4:b6:d0:dc:93:fd:06:f5:b0:b7:6e:b7:
70:d3:85:9a:e1:dc:29:be:d6:81:1c:39:fb:43:b6:
7d:7d:df:62:a0:d2:63:3d:2f:74:81:a8:78:da:e3:
85:59:bf:c8:a9:7e:9f:d7:db:5b:cd:4e:56:05:fc:
00:52:28:db:04:32:3a:27:98:6b:2f:4b:4a:e9:e3:
13:08:79:81:e7:a4:c4:82:c7:d2:3e:35:03:c9:aa:
f7:5c:07:b3:97:de:5a:df:7e:00:9e:af:b6:eb:25:
72:22:a3:ee:13:4b:31:62:75:48:c7:58:3e:8a:d7:
fb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:39:B1:5F:B6:A3:14:B2:83:E1:1C:90:D0:D5:13:95:E7:81:54:BF
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/5TmxX7ajFLKD4RyQ0NUTleeBVL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:7f1::/48
Signature Algorithm: sha256WithRSAEncryption
b0:0d:cd:5e:ea:4e:a5:41:7a:2f:61:83:12:ef:97:04:82:2c:
8e:76:e6:6e:78:75:f7:89:b5:85:4b:8e:4a:51:1a:18:fd:c8:
38:e4:53:ea:62:b5:c5:f8:5e:f5:2f:37:6b:b6:92:ae:4f:81:
76:39:7f:19:63:f3:2b:6d:36:02:12:c4:ce:58:de:d8:af:cc:
8a:b7:68:a9:a9:ea:5a:87:48:2c:95:8c:d5:98:04:2d:6a:60:
9d:df:32:30:5f:c7:70:11:9b:b0:6e:0f:13:43:29:4a:5e:f0:
24:52:8a:4f:20:8a:d3:7a:94:bb:44:7c:b1:2e:05:3b:06:7e:
f8:cb:9e:cc:8c:48:be:1e:a8:af:a1:b1:79:e3:c9:72:7d:ac:
d2:db:e4:5f:5b:aa:66:f3:b8:9f:8b:7b:b6:c4:cf:dc:e3:5a:
37:1e:e1:90:b3:09:46:e4:04:2b:ad:72:0f:b3:ed:3b:f1:92:
f2:a0:0e:f9:86:36:0f:e6:d6:44:bf:f4:5f:15:21:f6:08:5e:
45:39:ed:bd:94:53:fa:86:1b:86:b3:56:a7:17:ac:79:1d:a6:
d8:d3:13:ed:24:17:a2:2b:e2:f5:fe:99:23:2c:6b:d6:67:16:
0c:59:91:a8:24:ce:2a:e2:01:9c:4a:5f:65:35:74:22:f4:21:
86:d1:57:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 11:49:03 2026 by rpki-client