Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/6NH8vQrr85VPozItwUWrw9MGhlM.roa
File: 6NH8vQrr85VPozItwUWrw9MGhlM.roa (raw, json)
Hash identifier: rDFVjUzooJGxZ9Lz7xZU1jYS1FLO87XYNRdRjN+72Mc=
Subject key identifier: E8:D1:FC:BD:0A:EB:F3:95:4F:A3:32:2D:C1:45:AB:C3:D3:06:86:53
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019F42CAF18943D832ABC9F43452A96AF0E4
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/6NH8vQrr85VPozItwUWrw9MGhlM.roa
Signing time: Wed 08 Jul 2026 17:33:44 +0000
ROA not before: Wed 08 Jul 2026 17:33:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219252
IP address blocks: 2a06:9801:7f2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:42:ca:f1:89:43:d8:32:ab:c9:f4:34:52:a9:6a:f0:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jul 8 17:33:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e8d1fcbd0aebf3954fa3322dc145abc3d3068653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f6:52:cf:d9:79:66:4d:ad:0f:4a:58:06:46:
5a:f1:35:8a:f2:69:a5:b2:23:a1:7f:f1:d0:f3:92:
4a:e0:9c:f4:c8:83:17:25:2f:bf:cd:3a:6c:1e:9c:
4a:a6:83:f8:97:09:a3:87:e7:60:8a:3d:b7:ce:65:
8e:4c:25:ca:4c:a4:e8:f7:43:c9:73:69:84:4b:0c:
3a:56:28:32:ab:16:55:7b:8d:47:19:37:83:45:93:
6a:5c:08:02:2b:22:4a:68:41:59:86:0a:fd:e5:49:
9e:b9:79:74:ab:75:3e:0b:ab:38:db:4f:44:19:d3:
4e:08:19:9d:46:1b:0e:9a:93:27:21:b6:36:af:b1:
75:82:62:8d:66:92:54:83:65:79:c5:ee:89:62:41:
7c:08:9c:90:93:02:fd:99:eb:fd:92:da:88:99:f1:
91:20:47:19:3d:8d:50:74:a3:92:d0:41:3f:3e:cc:
98:3a:a8:18:4c:f4:bb:c6:30:8c:7f:42:16:49:15:
e2:b7:d2:2a:bf:f9:a5:cc:b2:0a:5f:a5:1f:37:d7:
6e:60:d3:8a:fb:c4:cc:19:ce:f0:42:d5:92:17:25:
14:9a:61:e9:ca:38:c6:ab:97:7b:51:1a:f1:2d:18:
05:14:9b:5d:58:9c:d9:c3:31:ec:32:75:2f:6f:59:
4c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D1:FC:BD:0A:EB:F3:95:4F:A3:32:2D:C1:45:AB:C3:D3:06:86:53
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/6NH8vQrr85VPozItwUWrw9MGhlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:7f2::/48
Signature Algorithm: sha256WithRSAEncryption
40:e5:61:59:8a:a5:77:43:91:9e:f0:a9:7e:5d:63:a5:d6:04:
bd:e7:d8:8b:68:f0:b2:a1:ad:32:55:3a:9e:4e:50:21:ec:0f:
c1:e1:ae:bf:41:39:dd:06:d6:3e:7e:bd:ba:f4:6b:7a:ac:b6:
16:06:3d:6a:06:7b:46:a4:c2:07:fb:7c:39:2d:da:87:df:98:
88:a5:4c:23:c8:ba:69:9e:73:d0:21:9d:70:d8:26:10:23:33:
d2:fc:18:85:4c:b4:83:df:9e:60:b8:4c:be:8d:1d:8b:38:e1:
50:1d:60:05:ae:17:ea:5b:44:82:80:ac:fe:5f:3a:cd:78:21:
01:16:b5:12:2c:f3:18:62:9e:0c:be:30:14:ff:06:55:f1:9d:
7e:90:f6:af:c6:0e:1b:7b:d7:bb:e0:46:d6:eb:34:32:d1:a8:
62:16:f9:34:c5:0d:55:dd:b5:9a:5b:ba:23:26:80:7e:2f:89:
25:39:58:32:ab:f9:f6:98:57:69:88:11:5e:27:73:08:8d:4f:
a2:ee:43:7f:99:b7:e1:66:7d:f7:9a:77:13:a9:4a:9b:49:e5:
cc:eb:ed:be:b3:4e:f6:84:47:c0:f5:fc:21:ae:e7:50:d0:5f:
8d:3f:38:34:d0:89:46:c7:f7:03:b6:f7:76:ca:47:bc:ec:00:
a8:9c:2a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:45:53 2026 by rpki-client