Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/GKpQ4WYnxkZpoHP8qnSw1Vrxb6g.roa
File: GKpQ4WYnxkZpoHP8qnSw1Vrxb6g.roa (raw, json)
Hash identifier: 20IatpPVeOLJDxOvHoRcd8CCZgr7E7hEdoszPYUUgj4=
Subject key identifier: 18:AA:50:E1:66:27:C6:46:69:A0:73:FC:AA:74:B0:D5:5A:F1:6F:A8
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019F4CEBB85D68680DE8B70D9CE75198B66C
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/GKpQ4WYnxkZpoHP8qnSw1Vrxb6g.roa
Signing time: Fri 10 Jul 2026 16:45:44 +0000
ROA not before: Fri 10 Jul 2026 16:45:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219271
IP address blocks: 2a06:9801:f12::/48 maxlen: 48
2a06:9801:f20::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:34:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4c:eb:b8:5d:68:68:0d:e8:b7:0d:9c:e7:51:98:b6:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jul 10 16:45:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=18aa50e16627c64669a073fcaa74b0d55af16fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:53:f9:c8:7c:eb:b1:a9:a1:65:7e:c8:b6:57:
ac:00:da:0f:e5:a8:ee:cc:96:af:fe:c1:c6:41:77:
f1:f2:1c:22:0f:43:0e:13:a7:2e:a1:5a:b1:49:cb:
28:ff:64:fb:48:52:9b:c7:70:a5:6c:a5:0a:c3:a3:
28:90:73:cb:63:c5:9a:75:d5:5a:6a:20:14:d4:d6:
70:96:c7:67:33:64:f3:05:36:42:7f:e1:29:49:01:
61:e3:e3:8e:50:8f:5f:77:91:6d:78:28:d5:54:71:
fd:3f:03:36:98:ae:31:34:29:69:b3:dc:2f:81:90:
6c:c2:45:63:cb:3d:fb:a1:1e:5b:b4:53:13:d8:30:
10:ab:8c:9b:e4:43:cf:72:e9:41:cb:0a:48:8c:25:
fe:55:98:8d:21:e2:63:54:7d:67:4c:1a:1d:f2:c5:
59:e9:4e:fb:57:9c:36:6d:8d:0a:92:cd:58:48:c6:
23:9d:9a:62:3e:17:bf:e0:87:7b:56:ec:95:2d:cf:
05:83:6d:c5:80:df:8f:9a:e2:d8:c9:44:65:bf:29:
82:67:72:ba:9b:c3:c0:a7:be:e8:d9:38:f1:e3:4f:
d1:a1:05:85:38:a2:5e:c0:f4:75:63:3d:88:8b:d0:
41:3b:8e:cc:e9:76:5f:4b:90:3f:46:84:07:82:33:
60:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:AA:50:E1:66:27:C6:46:69:A0:73:FC:AA:74:B0:D5:5A:F1:6F:A8
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/GKpQ4WYnxkZpoHP8qnSw1Vrxb6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:f12::/48
2a06:9801:f20::/44
Signature Algorithm: sha256WithRSAEncryption
1f:1e:ee:ee:3e:1d:24:3d:a4:63:c1:13:9e:58:37:24:45:aa:
71:6d:b2:a0:32:61:27:a9:f0:82:7e:d0:c3:65:1a:1e:e3:82:
89:92:95:90:d9:d2:c3:27:29:86:9d:a8:f2:ea:18:74:dc:58:
16:26:e0:74:17:4e:09:cc:c5:c7:8e:8a:f4:a5:f8:5e:53:27:
b5:14:2a:3e:fb:f7:40:cc:a6:71:a9:a7:07:9f:ff:2c:12:e7:
ee:73:47:4d:b7:9c:1f:d1:f1:39:9f:1c:b1:1c:e1:a3:12:d1:
b3:3c:39:1c:f2:36:64:ee:c8:9f:c0:cb:3b:09:cb:31:9a:e0:
ee:ad:d5:f4:fb:45:e8:b7:27:58:fa:8a:c1:7c:0a:39:56:0f:
26:8e:f0:f3:78:cc:a1:13:ae:9f:1f:81:c9:78:b1:3b:4f:6e:
78:bd:9d:d5:45:6f:d7:f2:2c:dd:67:dc:55:d5:cc:a0:fd:1f:
34:f8:c0:5b:c7:69:8e:17:e1:21:73:53:c4:16:4e:e2:a4:25:
32:2e:4d:1a:1b:06:a3:77:51:95:df:fb:c8:8e:69:fd:73:a8:
a5:e4:97:33:41:32:78:2d:f0:92:c8:62:09:5b:7b:2b:1f:b6:
30:8f:9d:f4:c9:3f:dc:76:87:64:78:cb:02:6d:14:e4:60:6c:
f1:47:c2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:57:02 2026 by rpki-client