Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/7ljzURdYx17RqdVYaGgb20EDXVc.roa
File: 7ljzURdYx17RqdVYaGgb20EDXVc.roa (raw, json)
Hash identifier: m7wu8qszsR1Q3xZOUkR5DTNzNKVQEm+pTgrGXORTBLU=
Subject key identifier: EE:58:F3:51:17:58:C7:5E:D1:A9:D5:58:68:68:1B:DB:41:03:5D:57
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019DB73833FDC9C032F896262B3A4B7383FA
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/7ljzURdYx17RqdVYaGgb20EDXVc.roa
Signing time: Wed 22 Apr 2026 22:03:26 +0000
ROA not before: Wed 22 Apr 2026 22:03:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214616
IP address blocks: 2a06:9801:223::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b7:38:33:fd:c9:c0:32:f8:96:26:2b:3a:4b:73:83:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Apr 22 22:03:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee58f3511758c75ed1a9d55868681bdb41035d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:97:c2:3c:ee:72:5d:94:6b:3f:fc:d1:49:7c:
9a:d1:b5:ee:31:66:11:0b:ba:14:7f:07:a4:f0:14:
01:8a:74:ce:3b:52:6a:79:66:91:0a:2e:40:46:7a:
70:61:84:ed:51:9d:a2:00:35:71:b5:51:3f:55:87:
8c:d0:49:64:8e:4f:23:0f:2c:20:6a:01:4a:2b:a7:
04:a5:a8:99:a0:b2:48:6a:6f:3d:9f:bc:95:8d:35:
be:6a:0c:bd:51:db:73:e2:b0:3f:13:77:cd:04:3c:
a0:5d:c9:a9:82:62:c2:ce:01:09:0c:11:18:8d:41:
57:f2:4c:4d:28:b0:77:61:bf:b9:16:7d:97:c7:b9:
a3:ee:df:39:65:93:12:ba:eb:5f:4c:80:57:9a:3a:
f2:22:9b:e1:a7:9a:29:ca:ae:86:0a:42:2c:64:fe:
db:b4:4c:ae:e5:d1:a2:c6:b2:d0:69:ec:be:9b:64:
cd:8d:aa:81:c6:3a:f6:d1:7a:08:a5:2a:5a:6e:31:
b0:90:33:a1:a4:b0:19:13:76:af:0e:1a:19:f3:b8:
57:90:b6:7a:d6:14:58:f2:1e:68:a3:7b:a2:0e:e3:
15:09:c1:fb:83:c8:6a:24:de:88:37:00:4e:68:ba:
b6:98:b8:f0:8d:ac:c1:e6:40:01:e4:63:02:d3:16:
e1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:58:F3:51:17:58:C7:5E:D1:A9:D5:58:68:68:1B:DB:41:03:5D:57
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/7ljzURdYx17RqdVYaGgb20EDXVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:223::/48
Signature Algorithm: sha256WithRSAEncryption
3f:00:74:e3:01:c3:4a:f9:ec:c4:b7:d2:f9:a6:1a:f9:ab:15:
6a:ce:ff:db:ae:2b:47:9b:5e:3e:dd:a2:2d:5f:98:c7:48:a1:
fa:12:73:44:6d:04:54:56:c5:37:44:90:18:6b:a4:2c:b4:d5:
b8:14:a7:af:6b:47:81:c4:f0:3a:fb:31:78:d0:36:59:cd:01:
b0:dc:38:00:88:71:5d:f9:c0:b4:64:6c:ae:5d:c7:e3:6d:62:
91:99:ad:43:c4:f6:35:93:c6:6d:61:11:82:0a:c1:85:00:ff:
c2:39:d3:53:c3:b8:09:41:f0:df:e2:82:94:81:b9:d0:66:ab:
fa:af:78:d8:e5:3f:1b:04:34:29:40:17:fa:2f:10:44:ab:b3:
2e:bc:4c:1a:7e:b4:61:0b:85:b0:23:71:06:23:00:3c:95:15:
cc:07:41:8e:ff:d3:22:79:a2:f3:86:2f:0f:b6:78:a2:1e:ce:
da:37:79:2c:4f:a8:3a:24:2d:4e:10:54:32:eb:16:52:a6:16:
fc:f1:81:aa:94:aa:2f:e8:10:87:9d:4b:58:4f:4b:d4:cb:e7:
5a:57:6d:59:0e:02:9e:08:04:bd:20:3c:df:ec:b0:6e:df:a5:
74:ad:a0:10:10:37:f3:bd:d2:2d:69:a4:39:04:14:09:5e:90:
46:05:fd:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:10:01 2026 by rpki-client