Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/IH873d9XvIDzRG0HA9GrjBt08HQ.roa
File: IH873d9XvIDzRG0HA9GrjBt08HQ.roa (raw, json)
Hash identifier: R07Xtd5Kr/wfwV+dxqiUVavhi101asNYJQuwXwR6geg=
Subject key identifier: 20:7F:3B:DD:DF:57:BC:80:F3:44:6D:07:03:D1:AB:8C:1B:74:F0:74
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019FFDC7F7ED1E62F02F6B7E7E6DD6079B06
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/IH873d9XvIDzRG0HA9GrjBt08HQ.roa
Signing time: Fri 14 Aug 2026 00:59:28 +0000
ROA not before: Fri 14 Aug 2026 00:59:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219271
IP address blocks: 2a06:9801:f12::/48 maxlen: 48
2a06:9801:f20::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 18:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fd:c7:f7:ed:1e:62:f0:2f:6b:7e:7e:6d:d6:07:9b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Aug 14 00:59:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=207f3bdddf57bc80f3446d0703d1ab8c1b74f074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ae:8a:7d:53:b1:1a:61:8e:ba:cb:54:1f:8b:
27:d8:f1:c2:b3:d2:d5:79:f7:24:af:22:36:6c:50:
bd:2c:be:ac:84:c3:b2:5e:1d:e9:2d:83:33:db:35:
1b:54:62:26:2c:36:3e:04:23:99:f6:25:26:5b:be:
d5:fb:f1:b6:5c:ff:b2:8f:0a:a3:3f:bc:4d:54:ec:
0a:2d:2a:aa:71:fe:47:41:6b:fc:65:a0:a3:fa:7a:
05:cb:b8:65:27:79:9f:25:7a:59:ba:8b:c5:84:87:
f4:4c:5b:90:47:11:39:d8:80:7b:65:5a:a7:32:b6:
11:aa:d9:05:f7:b4:73:44:1d:21:2d:f1:8b:78:7d:
1a:5e:f6:b3:d6:7c:a4:2d:87:da:da:2b:52:68:b5:
85:f4:b7:43:f4:74:e4:5c:a7:89:97:eb:94:70:5a:
2d:c6:93:e6:f0:d3:75:a2:5b:fd:1a:48:ce:06:56:
88:ef:6d:47:b0:20:c1:1d:fb:56:a6:9a:db:f9:2d:
47:7d:e8:41:a1:4f:79:e0:53:2d:11:b4:57:2f:ee:
b3:69:a7:da:bb:b7:5e:a5:8a:e6:34:87:9f:1f:2b:
36:7c:e3:8f:e4:f3:00:2b:12:db:2b:8b:74:43:17:
3f:7c:a6:0f:58:44:90:1b:b5:f7:f9:cf:40:47:68:
ed:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:7F:3B:DD:DF:57:BC:80:F3:44:6D:07:03:D1:AB:8C:1B:74:F0:74
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/IH873d9XvIDzRG0HA9GrjBt08HQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:f12::/48
2a06:9801:f20::/44
Signature Algorithm: sha256WithRSAEncryption
6f:6a:29:25:2b:a0:d9:7c:78:26:4d:76:3b:38:d1:4e:14:7e:
c4:71:5f:75:31:a6:4f:69:87:88:d2:5b:cc:e4:65:a5:1d:8a:
96:eb:96:e9:33:05:a2:ab:5d:d1:55:93:3e:0a:27:2e:0e:ac:
9e:80:dd:f0:51:2a:ae:63:7c:0a:cf:31:a7:88:82:87:b5:8d:
6a:ab:11:c5:3e:29:70:a9:1c:0e:d3:5a:ec:bf:3a:2b:83:fd:
58:fc:31:21:15:97:0e:2a:71:62:06:f1:b8:f6:8e:cf:22:76:
25:e4:c4:9f:63:09:26:21:8d:50:82:41:10:bc:21:24:51:8a:
40:ef:38:4b:61:84:58:5c:83:98:c4:37:12:6f:51:a1:ee:6e:
99:0b:37:8d:00:f2:e3:c4:ad:30:32:81:31:a7:47:30:b7:4e:
6e:b8:3a:05:0c:99:cc:12:3f:68:79:9f:98:ff:11:77:6e:3a:
a1:1f:ce:06:0b:27:94:57:78:c7:fe:83:99:22:f5:d2:14:51:
b8:2d:35:62:cd:41:64:cc:e2:73:4e:66:43:07:e8:b4:ca:52:
9e:7f:36:39:48:1c:66:98:43:fa:72:3e:5b:a9:ed:27:3b:84:
89:43:7f:cc:9e:c0:db:e9:d5:d5:f1:55:db:8e:d7:69:38:b2:
80:28:df:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 6 01:01:33 2026 by rpki-client