Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/6zMXKZptWDPGaPxpzJxBSvII8AI.roa
File: 6zMXKZptWDPGaPxpzJxBSvII8AI.roa (raw, json)
Hash identifier: LxoabukYBOieAlRDAb/ZJyLqbMPZxNXeBzidsTk1Rrw=
Subject key identifier: EB:33:17:29:9A:6D:58:33:C6:68:FC:69:CC:9C:41:4A:F2:08:F0:02
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A0D1B215BEB5B1377E2391F047D09C4CBD
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/6zMXKZptWDPGaPxpzJxBSvII8AI.roa
Signing time: Thu 24 Sep 2026 04:35:04 +0000
ROA not before: Thu 24 Sep 2026 04:35:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218605
IP address blocks: 2a06:9801:1567::/48 maxlen: 48
2a06:9801:156e::/48 maxlen: 48
2a06:9801:156f::/48 maxlen: 48
2a06:9801:1580::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:b2:15:be:b5:b1:37:7e:23:91:f0:47:d0:9c:4c:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Sep 24 04:35:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eb3317299a6d5833c668fc69cc9c414af208f002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9c:0f:f6:8b:8b:ba:0e:36:5f:f4:0e:89:6b:
8a:4c:91:46:c4:ab:1e:44:78:8b:6e:5b:08:b8:4f:
a6:8d:35:c7:f3:e0:4f:9c:8e:68:f1:87:80:a6:07:
a2:18:7a:85:72:21:5f:01:b6:de:78:a8:97:ca:da:
d6:86:cb:ff:62:fe:77:fb:ba:d1:41:27:e4:9d:aa:
5f:36:87:39:70:82:00:1d:6a:ee:14:a3:f0:19:5a:
0c:9b:f1:3d:ca:e4:75:ae:bc:df:38:97:7d:83:86:
7c:3f:81:f1:20:da:fe:e2:cc:c4:ae:f9:c4:cb:26:
22:e7:91:5a:40:0f:6e:98:f6:18:77:e6:bd:dc:df:
5e:20:d8:bf:78:c6:50:12:51:5e:89:19:0e:9e:29:
fe:79:52:d8:dd:cc:1d:59:21:0a:c5:23:4b:b3:29:
6c:ab:65:28:f7:c3:d9:03:46:ab:d4:8f:a8:79:be:
b3:c8:41:31:21:bc:8c:55:95:39:5e:bf:33:c4:33:
64:cb:e3:52:7e:60:4e:d2:bd:80:1f:32:66:ba:99:
a9:df:64:e4:75:1d:1c:76:4c:09:ea:06:5a:d7:af:
b0:55:6c:c0:e7:bf:9f:cb:af:8b:c7:38:f8:a6:73:
2c:b9:98:d2:8b:35:c1:7d:f7:9a:f2:f1:ef:33:1c:
5f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:33:17:29:9A:6D:58:33:C6:68:FC:69:CC:9C:41:4A:F2:08:F0:02
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/6zMXKZptWDPGaPxpzJxBSvII8AI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:1567::/48
2a06:9801:156e::/47
2a06:9801:1580::/48
Signature Algorithm: sha256WithRSAEncryption
66:43:05:3b:ad:3e:e8:c3:d8:5c:2a:1e:bf:e7:a3:89:95:c9:
5b:1d:e2:14:57:a8:81:16:0d:0a:5c:57:47:21:97:cb:bf:e3:
58:74:6c:ae:e8:3e:35:d7:e2:26:65:41:b1:8c:e2:13:82:60:
48:63:a5:54:25:b5:86:34:a8:a4:af:64:c0:3a:14:ce:98:f4:
29:83:45:60:64:d4:af:3e:68:86:b5:a7:90:01:a7:22:af:00:
f9:d4:c6:85:8f:5b:1b:39:7a:79:bb:24:1d:28:e7:e9:1b:e1:
9f:b4:5a:32:9f:e0:14:f1:21:bb:e5:e0:c3:11:02:45:7a:92:
14:0c:02:ea:7e:70:a3:4c:59:3e:0b:10:5b:1c:21:6a:3f:bb:
7d:24:75:bd:a3:6c:4b:d9:95:b9:bd:70:f4:81:c7:3f:a0:f0:
cd:ca:7d:b7:84:5c:43:1c:dd:c3:6c:31:2c:15:94:d9:d8:97:
61:cf:c6:ec:30:ea:95:44:c1:a8:87:ca:69:69:66:b4:d8:9c:
1e:c6:2b:a1:25:18:5e:14:bb:87:c4:b5:82:ee:70:34:23:e6:
49:05:6d:28:57:6d:65:19:ed:b6:b8:b5:cb:f8:da:80:55:3a:
3f:26:39:c2:ed:b3:80:1f:59:c8:bd:c7:44:74:90:37:37:b4:
df:a3:e3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 20:11:40 2026 by rpki-client