Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/HUbW3YJLofuKHjztwmJjOVamN8w.roa
File: HUbW3YJLofuKHjztwmJjOVamN8w.roa (raw, json)
Hash identifier: PFp6K185deZlsxGZFyho4WCGQ+A870XzrbqsfBKIL8I=
Subject key identifier: 1D:46:D6:DD:82:4B:A1:FB:8A:1E:3C:ED:C2:62:63:39:56:A6:37:CC
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A155AF6045687F3EAA56F3E80C76B34600
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/HUbW3YJLofuKHjztwmJjOVamN8w.roa
Signing time: Mon 19 Oct 2026 19:41:59 +0000
ROA not before: Mon 19 Oct 2026 19:41:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197959
IP address blocks: 2a06:9801:1b00::/40 maxlen: 48
2a06:9801:1f00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:af:60:45:68:7f:3e:aa:56:f3:e8:0c:76:b3:46:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Oct 19 19:41:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d46d6dd824ba1fb8a1e3cedc262633956a637cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5a:55:53:f0:79:53:f5:d0:36:ba:9c:58:56:
d3:56:fc:7f:f2:cc:1c:b7:94:38:7b:2a:ef:05:4e:
1e:a8:38:97:13:be:d5:84:56:43:22:04:eb:ba:c7:
8a:9b:a5:cf:75:94:a6:a3:cb:b1:57:05:71:ef:33:
29:9c:70:d8:5a:1b:0b:f5:92:42:86:ae:f3:a4:ba:
8c:48:18:ae:8d:e3:e7:40:14:c4:56:5e:72:ee:a7:
0e:01:9e:19:ea:ca:c5:4f:5b:0c:09:7e:ad:b6:b6:
a2:a8:e0:91:03:f3:d2:d9:d5:9b:0a:e2:c4:8c:e0:
8e:ba:0a:31:47:54:0d:7a:c8:3a:50:5c:3a:31:bd:
a8:47:58:7b:67:fe:17:71:06:46:2a:e5:48:e9:b5:
03:91:31:57:98:78:c9:90:ac:99:84:f3:06:a4:be:
c6:b2:8e:b0:c3:f6:bd:5a:3b:77:7a:6f:60:58:12:
83:ae:2a:c0:02:8a:92:21:ee:bc:1c:a5:a3:6d:8b:
25:3b:75:e7:3a:df:7d:f0:56:1b:35:db:df:a1:f0:
fa:17:0e:2e:7d:7b:26:a7:3b:1a:e7:96:5e:4a:ed:
60:67:72:4b:82:43:60:4e:63:d3:ef:eb:7b:11:45:
6f:2f:d5:e8:56:08:b8:74:50:ae:93:31:2f:8d:c1:
48:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:46:D6:DD:82:4B:A1:FB:8A:1E:3C:ED:C2:62:63:39:56:A6:37:CC
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/HUbW3YJLofuKHjztwmJjOVamN8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:1b00::/40
2a06:9801:1f00::/40
Signature Algorithm: sha256WithRSAEncryption
53:7d:38:1f:c6:ac:85:07:fd:c6:f4:f5:cf:86:98:10:c1:58:
cc:8c:90:85:b5:d9:c2:06:84:b0:a0:ce:05:2e:2f:84:39:92:
13:19:9c:f3:12:40:e6:1a:de:3d:95:56:48:68:2d:79:bc:e3:
1a:cc:6d:44:0b:2d:74:81:60:c9:6a:eb:a5:3c:cc:8f:54:c0:
ed:0c:72:68:a4:d1:cf:2b:0e:83:98:7c:e9:20:ea:59:2b:cc:
42:e7:49:58:16:97:4b:62:ca:c9:f2:32:e9:e0:73:94:69:e7:
ba:d4:d6:5f:fc:9c:f7:a0:e7:aa:b3:f0:01:f8:e0:1f:e8:ad:
27:60:a9:bf:35:87:59:05:bb:8f:40:2d:40:19:0d:9a:f2:4b:
41:65:4c:9f:fb:64:b4:14:be:c3:78:19:17:a6:ea:42:2a:04:
04:24:ec:ac:3a:6d:bb:d8:99:68:1f:1a:cd:b6:dd:c1:df:02:
90:f5:c0:ce:1c:02:5f:c3:84:1c:b4:e4:6a:12:d9:73:14:03:
e6:56:93:96:19:8d:6e:b7:a2:10:3a:2f:2d:24:58:f4:33:9d:
79:d6:25:b6:1a:b6:ca:0c:2d:79:51:73:58:82:e4:6b:72:c3:
0d:57:6a:d0:2b:7c:fb:7b:93:16:f1:90:1a:e1:6e:9b:20:a3:
41:50:58:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:11:44 2026 by rpki-client