Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/Azcd0V88c74na9NXRgBnWkKEi-w.roa
File: Azcd0V88c74na9NXRgBnWkKEi-w.roa (raw, json)
Hash identifier: 884xqbf7Y/IliF9b31KSOcUMor0ct2FDiaxKa4wfMPw=
Subject key identifier: 03:37:1D:D1:5F:3C:73:BE:27:6B:D3:57:46:00:67:5A:42:84:8B:EC
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019FC9F3A83D7D06E152114C98B3F3CCCCED
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/Azcd0V88c74na9NXRgBnWkKEi-w.roa
Signing time: Mon 03 Aug 2026 23:26:56 +0000
ROA not before: Mon 03 Aug 2026 23:26:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219175
IP address blocks: 2a06:9801:f1a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c9:f3:a8:3d:7d:06:e1:52:11:4c:98:b3:f3:cc:cc:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Aug 3 23:26:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=03371dd15f3c73be276bd3574600675a42848bec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dc:8c:9e:34:63:c3:ca:b2:22:ca:21:b4:21:
28:96:61:5f:77:80:fb:d9:9a:39:4f:a6:41:fd:ee:
ed:a0:ae:e4:d6:04:d7:45:3d:71:c3:6a:c8:99:2a:
f6:80:e1:ef:6b:27:42:52:3b:d4:dd:1b:60:d3:4c:
df:5c:5e:5e:11:c4:a7:04:7a:64:30:dc:76:76:a9:
13:64:da:b4:c1:88:83:a2:64:bf:e0:0f:6e:f0:43:
d8:cd:b5:41:2e:40:16:99:6c:7e:2f:a6:ca:60:74:
9c:5c:f8:21:5f:f7:ef:01:ff:79:e1:a8:21:7e:70:
11:97:aa:b4:ba:fe:f5:3f:cd:63:e1:ad:5c:23:5d:
2e:f2:a3:9a:06:f8:0d:6b:5e:23:a6:b9:60:dc:2e:
60:99:20:26:64:32:f5:f7:75:1a:70:0c:16:01:3a:
78:3c:8c:43:4d:d6:c0:a8:6b:23:ef:6e:cd:00:c3:
f7:1c:84:8e:f7:f3:ee:da:f8:dc:95:62:02:d3:6d:
be:10:22:e4:c3:f2:80:38:23:42:78:01:c3:fb:0f:
90:0e:01:0b:72:0c:e7:ea:1e:02:88:fb:e7:d9:66:
fa:ae:2f:9e:f4:30:94:93:ee:f3:f9:0a:96:01:4f:
17:13:9d:e1:89:eb:a1:59:04:73:02:44:a7:16:ca:
15:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:37:1D:D1:5F:3C:73:BE:27:6B:D3:57:46:00:67:5A:42:84:8B:EC
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/Azcd0V88c74na9NXRgBnWkKEi-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:f1a::/48
Signature Algorithm: sha256WithRSAEncryption
5e:a1:cf:b4:86:92:22:37:bc:28:16:d2:0d:bf:34:c2:d5:4d:
43:ac:41:59:eb:11:35:03:05:3e:aa:46:b2:dd:50:be:f8:7b:
6d:99:4c:dc:74:f3:2a:01:ac:03:26:36:c8:17:d9:69:22:95:
15:51:39:7c:64:ed:58:17:1f:62:da:21:54:f0:79:dd:c4:bb:
40:45:24:97:54:6d:ea:1f:4e:a5:36:84:b1:7b:ba:d5:07:1f:
49:27:39:02:a2:a6:56:8b:19:a5:e8:27:e1:16:68:44:cc:ce:
ac:0f:04:12:34:a1:51:fc:6c:05:32:61:6a:67:02:54:8d:c6:
2e:2f:f9:26:c3:b5:9a:14:aa:01:85:26:8d:85:e9:79:25:98:
d8:12:da:14:82:e9:17:bc:b4:58:b8:43:a0:82:72:35:cb:c2:
e0:79:2f:41:c7:15:b2:4f:0c:94:6c:bc:79:44:5a:d6:6a:e3:
82:7c:56:47:d2:fc:54:b5:9a:c6:1d:5d:57:09:ee:03:97:3e:
7e:ef:3e:e7:3c:54:2b:7d:f9:1a:be:d0:56:b6:18:c4:2d:e6:
36:f1:18:4f:01:6e:fc:ca:64:f6:9a:6c:d3:59:4f:52:12:80:
47:26:07:ce:73:7f:6d:18:d5:9e:b8:90:37:2d:d9:27:79:d8:
9d:53:b5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 17:11:48 2026 by rpki-client