Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/9yEZ1RPlHac0nDWCHOlkLe13xDc.roa
File: 9yEZ1RPlHac0nDWCHOlkLe13xDc.roa (raw, json)
Hash identifier: +zV+i5uxhLr2DLpMHphbKq5XWQgOcmVAU26LnP94QBE=
Subject key identifier: F7:21:19:D5:13:E5:1D:A7:34:9C:35:82:1C:E9:64:2D:ED:77:C4:37
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019DB29EAD6677D5B9EC1128C7BDD113A612
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/9yEZ1RPlHac0nDWCHOlkLe13xDc.roa
Signing time: Wed 22 Apr 2026 00:37:16 +0000
ROA not before: Wed 22 Apr 2026 00:37:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 2a06:9801:2b0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:9e:ad:66:77:d5:b9:ec:11:28:c7:bd:d1:13:a6:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Apr 22 00:37:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f72119d513e51da7349c35821ce9642ded77c437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fa:6a:67:44:c8:b0:16:e5:88:45:cd:30:52:
78:dc:60:66:a3:a5:2e:68:0d:8e:e0:65:34:4b:e1:
12:dd:5c:06:17:82:ed:02:40:e0:5c:7d:63:4b:27:
75:e9:ea:e4:22:16:4d:23:3c:21:dc:d6:fd:94:fa:
45:4b:71:8b:fc:e3:17:2a:e1:e2:2e:a8:7f:d4:ed:
c9:a5:68:92:17:49:e5:2a:1a:e8:46:03:b0:98:92:
72:fe:a3:5e:0e:72:fb:2a:5e:e3:a2:11:56:35:20:
2d:b9:59:ef:9e:89:ca:39:4d:d8:8b:bf:4f:84:40:
26:27:59:1e:82:58:12:77:20:4c:d2:e9:57:3e:03:
a3:c5:9f:44:00:1c:41:da:57:94:63:98:9c:27:7a:
df:2b:b6:2b:09:20:75:ff:d8:48:ca:27:53:75:31:
e8:2c:4e:b4:f7:36:ac:ff:07:ca:f4:ec:73:14:f2:
05:1d:b7:dd:8b:9a:1a:6a:2f:62:19:d1:e2:bf:80:
6a:ab:13:ca:db:ae:2f:b0:d4:60:30:5d:e7:57:04:
e2:ed:94:c2:fd:ac:31:54:2e:cf:2a:c6:96:41:b8:
c0:ee:b3:4d:85:24:60:28:f6:0f:99:2e:ff:7f:66:
de:59:98:4f:a7:d0:c3:57:e7:a7:a6:91:77:95:c2:
ba:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:21:19:D5:13:E5:1D:A7:34:9C:35:82:1C:E9:64:2D:ED:77:C4:37
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/9yEZ1RPlHac0nDWCHOlkLe13xDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:2b0::/48
Signature Algorithm: sha256WithRSAEncryption
86:4d:15:d6:bc:73:a4:1c:49:69:57:56:c2:62:bb:bb:1b:38:
58:50:15:5e:b9:97:e9:54:89:78:5d:d0:28:13:68:b1:17:61:
d5:02:ea:65:80:ae:b2:68:ba:83:64:72:40:a0:98:e1:db:fb:
cc:ed:df:26:76:9d:1a:03:1d:30:6c:e8:b3:d5:07:73:e7:0b:
50:87:aa:c8:bb:2e:0e:ea:3e:c7:f1:be:70:a9:f6:fd:20:a7:
4f:0a:9b:84:1a:45:30:ce:cf:fe:bb:49:fc:0e:04:c1:a4:49:
0f:91:45:46:53:ab:0d:51:3b:96:39:05:f4:b7:c9:d0:98:e3:
b7:87:55:71:85:1c:5b:c3:3a:90:e8:02:cc:57:0b:b5:9f:9c:
7a:99:6b:c2:2b:5f:26:6d:20:c7:9b:15:b0:52:ec:cc:17:b7:
55:b3:3e:58:6b:eb:0a:57:93:9b:0f:42:ba:43:d4:c5:49:eb:
29:dd:d2:85:db:15:7c:ca:0c:2d:fd:7a:68:2a:c7:41:29:93:
66:8e:e0:28:bb:04:39:71:35:39:e4:61:81:26:1b:c6:ea:cb:
fd:17:ed:16:01:84:7f:dc:a3:0f:2a:39:03:3a:6c:12:44:ea:
58:8a:30:6e:93:d0:79:40:b8:0d:34:11:91:68:47:3b:78:04:
7c:03:c1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 14:47:54 2026 by rpki-client