Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/JVXfA0g1PPME5oruSzkE2eoETRg.roa
File: JVXfA0g1PPME5oruSzkE2eoETRg.roa (raw, json)
Hash identifier: o8npSRVz93ht8VUCIac0h84HcFxC5Pvf614uGML4T98=
Subject key identifier: 25:55:DF:03:48:35:3C:F3:04:E6:8A:EE:4B:39:04:D9:EA:04:4D:18
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A0260DB80CDD66FC7487E4AAAB17FC2995
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/JVXfA0g1PPME5oruSzkE2eoETRg.roa
Signing time: Fri 21 Aug 2026 20:40:28 +0000
ROA not before: Fri 21 Aug 2026 20:40:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218904
IP address blocks: 2a06:9801:f98::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:53:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:26:0d:b8:0c:dd:66:fc:74:87:e4:aa:ab:17:fc:29:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Aug 21 20:40:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2555df0348353cf304e68aee4b3904d9ea044d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1f:54:ab:76:83:55:59:9d:71:dc:45:1d:b3:
e3:b6:50:e1:73:79:f7:c8:07:be:64:50:aa:5c:cd:
2d:98:e5:7f:56:7b:72:f2:9c:2c:bd:c2:aa:85:22:
81:69:09:61:60:bf:8d:65:7d:14:ba:7b:9e:f1:4c:
5b:c8:5f:e5:9a:9b:82:75:f5:29:a1:ac:f8:4e:5a:
3c:99:68:67:ba:63:46:90:40:44:6f:67:d3:59:44:
5b:1a:f1:9f:59:8a:53:db:ab:da:a3:ce:aa:c2:70:
85:3b:56:02:3c:a6:31:63:d4:82:67:14:ef:87:bb:
96:6c:be:66:99:88:17:fd:31:43:68:c6:55:10:0e:
2a:2a:1b:b4:3c:76:3b:f1:e6:21:e4:7e:5f:55:cf:
26:d7:67:92:79:7f:b8:dd:29:62:d2:8e:04:39:73:
e2:ff:99:48:39:ed:95:1d:9a:26:e8:cf:0c:72:61:
5f:b8:03:35:bc:bb:ee:2e:ff:a4:85:16:15:0b:26:
a1:c0:b9:ca:1c:fe:14:33:fc:39:d7:0c:9b:10:47:
17:b1:49:8e:da:5c:46:91:10:a5:b3:c7:0a:52:5f:
5c:6d:38:ce:f9:f9:5c:c4:8a:40:23:8f:74:d3:f4:
c6:97:00:66:5a:1c:f4:20:b9:e2:5a:c8:da:29:b4:
9a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:55:DF:03:48:35:3C:F3:04:E6:8A:EE:4B:39:04:D9:EA:04:4D:18
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/JVXfA0g1PPME5oruSzkE2eoETRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:f98::/48
Signature Algorithm: sha256WithRSAEncryption
88:33:c3:1e:af:95:69:a6:36:0e:28:32:ec:b5:a0:33:ff:c3:
0b:5c:3b:d0:de:26:9b:da:34:3d:b7:77:25:c2:58:75:1f:af:
1c:c0:c2:78:ef:12:62:71:52:34:25:3f:2a:48:fc:55:08:00:
f4:1e:39:fd:1a:49:5e:e0:98:5c:b3:91:8a:07:a9:1c:d7:fb:
b8:ea:36:c0:61:bc:7c:4f:33:8c:dc:45:21:c7:e6:32:1c:ba:
aa:72:73:53:00:e8:18:b7:de:06:3d:40:60:a0:6d:2c:ea:0d:
60:54:8f:b1:9b:59:51:dc:bc:2e:7d:98:4a:a7:e7:34:d9:ce:
4e:0a:7e:41:12:9f:7b:21:89:05:95:00:d5:44:c0:e5:62:82:
1f:56:d9:a3:6b:c1:41:cb:92:fd:d3:8f:62:da:fd:49:c7:de:
5e:75:a4:63:18:17:75:02:79:59:f0:98:a2:7f:23:16:00:f1:
f2:d0:4a:46:fd:c9:31:88:82:d2:3c:4e:8d:d6:40:fc:ec:13:
20:51:18:d0:aa:55:4b:30:13:c1:fb:49:c4:44:07:d3:0d:1e:
36:14:bf:62:95:05:a6:87:3e:15:7e:f9:09:fc:2a:35:91:ff:
ea:60:f6:28:51:b7:a1:63:82:3a:e1:a8:a0:74:e3:ea:8f:34:
67:19:b2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:23:32 2026 by rpki-client