Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/EJSQrxabp8LW8wSSCRl9fo4bKJQ.roa
File: EJSQrxabp8LW8wSSCRl9fo4bKJQ.roa (raw, json)
Hash identifier: 5gC4BgqYiy5Usy6LmYXN9s+W8RNNGBp/VK7SdILrEpE=
Subject key identifier: 10:94:90:AF:16:9B:A7:C2:D6:F3:04:92:09:19:7D:7E:8E:1B:28:94
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019FDD395D692CC54B101CF17F5CB84B7D02
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/EJSQrxabp8LW8wSSCRl9fo4bKJQ.roa
Signing time: Fri 07 Aug 2026 17:15:51 +0000
ROA not before: Fri 07 Aug 2026 17:15:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219039
IP address blocks: 2a06:9801:f48::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dd:39:5d:69:2c:c5:4b:10:1c:f1:7f:5c:b8:4b:7d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Aug 7 17:15:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=109490af169ba7c2d6f3049209197d7e8e1b2894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:77:ed:66:86:9e:a9:19:78:c4:90:7f:af:f1:
67:23:df:10:54:7c:ad:76:b0:24:ad:62:79:7b:7c:
c9:27:d0:5f:a9:24:9a:0d:8e:5f:32:68:c7:31:c4:
eb:2a:72:e8:cd:b0:33:f1:78:87:d9:7d:99:42:e2:
b2:71:fb:ec:4d:37:97:7e:3e:ad:bc:a6:23:ff:c6:
02:ea:51:f8:92:ee:c4:7e:d7:80:af:c3:18:4d:74:
18:be:0c:14:77:1c:9f:31:94:a9:87:61:2c:df:61:
49:33:66:1c:f3:20:71:05:c3:d3:d2:99:85:b7:3f:
eb:01:6f:e9:29:68:fa:12:3c:bb:d4:72:60:29:ac:
f9:e2:0b:6a:2d:d2:a1:9e:7c:ab:c7:3c:a1:7e:f6:
04:0e:d3:c7:a2:85:b5:ba:ca:80:66:89:01:3e:d5:
65:74:d1:ed:25:12:f7:6f:0c:8c:53:0c:da:b1:0a:
41:90:36:e0:e7:97:4e:fc:09:4b:39:d3:1d:8c:0d:
43:9e:29:32:b1:5d:5e:a4:73:4c:4f:fa:8d:de:0b:
d6:b6:bb:e5:98:8c:5a:27:e4:37:19:f9:83:22:72:
80:7c:f9:52:21:13:dd:f1:e4:33:8a:9f:23:1c:93:
5e:ea:8d:e9:09:b0:14:25:ab:e8:9f:28:67:51:07:
1d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:94:90:AF:16:9B:A7:C2:D6:F3:04:92:09:19:7D:7E:8E:1B:28:94
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/EJSQrxabp8LW8wSSCRl9fo4bKJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:f48::/48
Signature Algorithm: sha256WithRSAEncryption
b1:d7:00:05:2d:d8:96:32:21:87:fd:f9:16:21:e8:a4:c7:13:
22:7c:8a:2a:d5:91:69:cf:9e:d1:13:49:a3:14:11:f7:38:eb:
ec:fe:f0:1e:80:0f:4c:0a:87:70:34:d2:61:df:e1:73:c7:66:
15:51:50:60:89:70:4b:ad:07:b4:a4:f9:01:dd:e7:20:fb:b7:
5f:bd:a5:f0:5d:5d:29:e6:a2:a5:35:fe:56:aa:bb:61:92:b7:
4f:61:3f:92:f1:fe:cf:99:fe:42:58:8d:d2:80:c0:9d:21:59:
7e:d6:a1:96:60:2d:04:d4:d1:39:36:74:fc:7a:69:85:7d:65:
55:e3:08:a2:70:07:46:88:73:4e:f2:a5:98:30:1e:73:6e:a0:
62:1b:ae:71:e1:b5:75:d1:40:3b:25:47:8f:27:12:49:b7:49:
13:bc:37:57:a1:1f:c6:8c:43:23:29:d2:12:d0:a5:25:6c:27:
4c:78:5d:8f:b2:3c:60:86:89:f6:a4:61:2f:b4:24:5a:f0:aa:
9a:fa:1d:33:bf:cd:84:ec:89:5a:cd:5f:d6:db:da:19:72:63:
cc:89:ef:ed:35:d4:53:f9:0e:7a:d9:7f:bb:9b:e4:1b:ec:06:
55:05:32:9f:21:6d:28:1d:0e:36:25:05:a8:71:d0:96:85:56:
6d:51:ed:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 17:11:38 2026 by rpki-client