Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/HKsILsZ1rNgGmqZKqy9v0u4muvc.roa
File: HKsILsZ1rNgGmqZKqy9v0u4muvc.roa (raw, json)
Hash identifier: 8PuVp1JiMNWzu81I8b1pywCj16BTO5nkNnrVy6pjt7o=
Subject key identifier: 1C:AB:08:2E:C6:75:AC:D8:06:9A:A6:4A:AB:2F:6F:D2:EE:26:BA:F7
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A03E6C1F3E055F493A6753CC31DB5AEAE3
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/HKsILsZ1rNgGmqZKqy9v0u4muvc.roa
Signing time: Wed 26 Aug 2026 14:14:28 +0000
ROA not before: Wed 26 Aug 2026 14:14:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211138
IP address blocks: 2a06:9801:fc8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:53:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:6c:1f:3e:05:5f:49:3a:67:53:cc:31:db:5a:ea:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Aug 26 14:14:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1cab082ec675acd8069aa64aab2f6fd2ee26baf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b9:28:d5:df:eb:8b:f1:97:64:96:15:66:80:
05:dd:a4:45:75:88:07:15:21:96:e4:e7:6f:62:75:
6d:b3:10:e9:25:65:d7:d8:cd:a8:08:98:ef:f3:42:
db:a7:c3:e4:fa:91:d6:77:00:92:f8:f3:63:e9:1d:
7a:3d:ec:24:66:bb:14:27:3e:76:23:c0:db:ca:b6:
d5:3b:67:af:31:97:99:da:4d:bb:f4:81:4c:12:37:
27:ed:52:be:a3:0c:8f:1e:82:d5:bc:63:27:20:52:
eb:b3:c1:da:15:ba:81:79:e1:aa:0a:91:36:02:ac:
ce:45:95:fd:fc:87:53:d1:c6:6f:66:b7:b7:1c:75:
51:6e:91:0b:57:31:6e:5a:a5:9f:0c:7a:c0:8b:51:
50:df:29:a9:30:fe:79:5f:4e:6b:42:48:a8:97:e5:
b3:90:18:b1:07:70:ff:af:e5:83:55:61:13:00:90:
ed:00:37:bb:85:67:68:93:b3:83:7a:ea:3f:21:6b:
c7:ff:b6:9a:c8:f3:01:62:50:ac:a3:ea:3b:87:fc:
5c:33:5b:ee:a3:b3:2a:9b:66:1d:1a:43:14:90:e8:
a3:0b:c6:15:c6:68:ac:21:bc:e5:81:67:14:08:d5:
be:af:21:5f:af:f2:06:0a:2f:c1:66:a1:86:a4:93:
63:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:AB:08:2E:C6:75:AC:D8:06:9A:A6:4A:AB:2F:6F:D2:EE:26:BA:F7
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/HKsILsZ1rNgGmqZKqy9v0u4muvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:fc8::/48
Signature Algorithm: sha256WithRSAEncryption
83:f4:3e:46:e7:27:36:ef:c8:1e:45:a0:86:b6:f3:5f:64:c9:
5c:e2:d6:b9:e3:25:71:7b:4d:82:fe:3e:59:50:df:73:f7:65:
99:e0:7b:dc:3b:3f:34:8a:5f:7a:0f:6d:0d:cc:e9:47:b1:9d:
13:96:03:df:d0:8a:ab:b0:b5:41:94:ce:0b:b8:18:16:a2:e3:
48:24:3d:67:4a:b9:aa:5e:7e:83:3a:72:f2:f5:76:30:51:10:
89:e3:9a:37:62:f7:a8:b4:cc:a8:06:e7:35:6d:ff:d7:39:ed:
08:f1:1d:2b:d8:8a:28:70:92:73:5d:9d:0c:eb:ca:f4:57:79:
9c:e0:0a:8a:51:ca:db:4c:d2:cf:73:6d:dd:98:71:40:98:28:
d2:b5:25:db:ec:20:0c:dd:2e:28:82:9b:53:36:2a:06:ac:f5:
51:4f:cf:c3:30:55:fa:9a:5a:d3:92:82:38:1f:37:28:10:52:
39:6a:20:e4:06:6f:30:bf:9d:71:b4:55:55:32:d5:7e:fc:48:
fb:dc:d0:ae:bb:07:a1:f2:c8:c3:1f:80:91:82:89:8c:0b:cb:
24:be:75:3d:e4:02:a1:7a:4f:89:5b:c9:34:78:a7:b4:ec:c0:
c1:17:6c:be:bb:ad:72:b7:12:d9:08:b5:82:f9:d2:a5:6e:ae:
e1:e3:4b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:56:21 2026 by rpki-client