Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/NN-KQi51jlb-pHnhBkDp2g89qUY.roa
File: NN-KQi51jlb-pHnhBkDp2g89qUY.roa (raw, json)
Hash identifier: /hinmNpKi/cQkbJ8bx32iK1C6yJf69oVt01/Fyu1yh0=
Subject key identifier: 34:DF:8A:42:2E:75:8E:56:FE:A4:79:E1:06:40:E9:DA:0F:3D:A9:46
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019E638F9E6A4E5FEBFD6043B4D9A66CB784
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/NN-KQi51jlb-pHnhBkDp2g89qUY.roa
Signing time: Tue 26 May 2026 09:13:37 +0000
ROA not before: Tue 26 May 2026 09:13:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197576
IP address blocks: 2a06:9801:2fa::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:63:8f:9e:6a:4e:5f:eb:fd:60:43:b4:d9:a6:6c:b7:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: May 26 09:13:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=34df8a422e758e56fea479e10640e9da0f3da946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c3:c5:db:f7:fe:93:a5:39:31:24:80:61:22:
fd:d6:43:b8:7c:8c:c6:59:b8:7a:f5:35:82:c5:8e:
64:b1:37:63:f6:3e:12:91:28:a7:d1:a2:07:32:f6:
a3:d4:33:85:a4:c6:9a:3a:d1:65:19:04:bf:7a:ff:
c3:e7:a0:d5:00:db:48:bc:a4:49:b7:72:5d:d8:07:
c5:89:f9:e8:49:65:ce:39:6e:90:4a:18:66:3a:86:
37:f4:01:93:50:91:d5:b6:96:81:d3:d1:3e:9a:d5:
97:56:e7:e7:ed:d9:d3:70:a6:a1:84:15:ac:b4:2a:
ca:1b:49:07:e8:6c:70:ca:9a:e7:23:f4:8d:39:b3:
64:ee:16:12:2a:3d:87:f0:05:48:fc:2c:7f:aa:9e:
d1:58:d0:a0:7a:c0:ca:8c:d1:1a:92:65:6d:c2:c8:
01:f5:fa:0e:93:41:8b:4b:45:43:1c:67:2d:aa:3d:
64:dd:f1:03:6d:5f:f9:6e:00:0d:da:5f:16:62:79:
83:e9:97:e9:53:c1:d8:8b:67:ec:3f:1e:e0:60:73:
58:1d:0e:93:0e:38:ca:ac:e7:52:14:98:ef:9c:cf:
43:6d:99:17:40:0a:83:8f:49:aa:4e:e8:e2:34:ad:
68:92:d8:7b:b2:f2:d0:31:85:ff:f8:8b:4c:8c:80:
e9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DF:8A:42:2E:75:8E:56:FE:A4:79:E1:06:40:E9:DA:0F:3D:A9:46
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/NN-KQi51jlb-pHnhBkDp2g89qUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:2fa::/48
Signature Algorithm: sha256WithRSAEncryption
b9:a0:82:ce:24:75:93:e8:eb:6f:3d:85:ed:39:da:6f:bb:4a:
eb:3b:15:f9:4f:a4:c6:b0:38:b2:88:ae:89:81:1d:1c:76:ef:
ab:5f:f6:36:44:27:1d:7b:88:01:20:01:88:85:59:d8:5d:2e:
54:d8:f5:da:68:69:c7:c4:0a:17:01:13:3c:13:eb:81:45:fe:
8b:d7:e2:35:2f:88:12:99:44:da:a6:b7:fd:ed:d4:ed:9c:53:
b8:2a:1d:a2:57:d4:db:32:0e:1e:03:e5:04:9a:6d:e2:d1:70:
06:2a:0b:cb:54:be:0b:28:85:13:94:9a:d8:e3:f0:d6:8a:8b:
c1:03:e8:ec:03:32:6a:88:e4:ad:b8:a4:cf:4a:64:20:d9:fc:
08:4f:f1:e4:33:01:2a:5e:37:35:f8:04:98:04:09:4b:5b:e3:
9a:48:7e:e2:9f:40:2b:68:ab:a1:89:3f:be:a4:0b:b4:72:0f:
6e:41:4a:0f:2b:c7:d7:c6:b5:c1:bd:69:46:19:b8:49:49:4c:
fa:2e:33:86:2e:05:91:cf:68:6b:95:02:c2:a5:18:15:54:a4:
20:ca:bc:cd:cb:72:27:9c:e8:5d:61:96:e7:d6:2c:b9:90:e4:
58:d0:f4:60:fd:4a:61:69:6e:5a:fa:41:3f:47:ef:8d:ac:0e:
86:c8:b7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 20:58:42 2026 by rpki-client