Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/Q8Efs1Bqt2G7-vIHO3tnD1W--sw.roa
File: Q8Efs1Bqt2G7-vIHO3tnD1W--sw.roa (raw, json)
Hash identifier: 26MahmtVKASXxjlGD/H+UGf5onhfgRZfURlGsPpcUiQ=
Subject key identifier: 43:C1:1F:B3:50:6A:B7:61:BB:FA:F2:07:3B:7B:67:0F:55:BE:FA:CC
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A0D427D7831CE23469B60BBD05EEF77E8A
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/Q8Efs1Bqt2G7-vIHO3tnD1W--sw.roa
Signing time: Thu 24 Sep 2026 16:02:55 +0000
ROA not before: Thu 24 Sep 2026 16:02:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218589
IP address blocks: 2a06:9801:1518::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:27:d7:83:1c:e2:34:69:b6:0b:bd:05:ee:f7:7e:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Sep 24 16:02:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=43c11fb3506ab761bbfaf2073b7b670f55befacc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:84:d9:a6:77:ca:66:d4:34:75:51:cb:c3:dd:
40:d1:5f:aa:6b:9c:c5:2b:5e:09:5a:01:70:fe:82:
92:77:c9:78:43:6d:fa:e5:94:0d:e2:05:cb:4b:ea:
c8:2d:58:77:95:a6:4b:75:2e:fe:83:27:69:02:d1:
c3:1e:9e:c2:c7:9b:13:78:55:50:6b:7d:4f:c9:a5:
4a:92:a9:c3:b9:6d:47:6f:1e:9d:17:16:0a:ad:6c:
81:80:db:ef:3b:d7:ac:4a:ef:cd:8a:d4:a2:76:5f:
1c:c1:7a:de:af:1f:8f:d9:28:5b:9b:67:2d:3f:cf:
6b:85:f7:49:a5:b2:65:1a:7a:eb:a8:94:73:3e:47:
27:86:d4:bb:df:43:e4:3c:d5:5d:ff:95:9a:2d:e3:
ab:ef:70:e1:b2:3c:42:49:34:de:9f:32:2b:82:55:
ca:71:6f:73:a9:d1:6d:43:92:e0:89:b1:c5:ca:7c:
f9:d7:c3:21:34:94:fc:23:23:d8:eb:d1:6b:8d:1a:
57:29:e6:7b:13:de:17:cd:cf:3f:e7:ae:9e:d2:38:
43:44:a9:21:77:d6:89:38:bc:00:df:48:35:1f:f1:
a5:35:03:9a:52:e5:2b:61:a1:2c:b6:84:62:43:fb:
10:46:27:29:b4:11:08:b3:bd:1b:ad:ad:1e:e1:02:
22:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C1:1F:B3:50:6A:B7:61:BB:FA:F2:07:3B:7B:67:0F:55:BE:FA:CC
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/Q8Efs1Bqt2G7-vIHO3tnD1W--sw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:1518::/48
Signature Algorithm: sha256WithRSAEncryption
14:29:38:fc:77:95:81:b1:51:8f:a1:bc:52:80:a6:13:b8:1a:
8b:b6:99:45:5f:9e:30:b5:76:6c:c3:51:96:be:73:82:36:1e:
79:00:b7:8f:b4:a9:ce:8a:56:7b:7c:ed:e8:92:91:40:7c:bd:
9a:50:52:a5:79:21:a3:7c:a2:a6:74:c6:fd:e7:c6:2f:92:87:
26:0f:97:2c:84:1d:6f:88:c8:f5:3d:9c:ef:43:76:9b:08:0f:
29:5d:f5:79:49:00:bc:70:22:0f:ce:d9:bf:53:a8:68:d1:25:
db:7a:48:2b:4e:0f:49:2c:2a:b0:c1:48:e1:0a:79:84:4b:92:
5f:a1:1f:cd:39:56:9d:67:58:30:8e:84:78:78:56:a1:85:73:
d0:93:6f:94:2c:b3:27:c8:58:a9:f2:32:39:3b:5c:a2:41:98:
7a:ea:d9:e2:ec:ed:31:c8:c8:c9:97:dd:67:65:8d:31:78:e9:
63:4a:ac:8b:79:0a:7e:31:5c:58:7b:bf:28:bf:e2:84:ff:c1:
e8:f8:9b:0f:a7:d9:16:cf:6d:9e:60:bd:73:a6:e5:80:7f:81:
bc:74:c2:37:14:1a:75:e1:39:34:3b:9a:bc:c1:85:57:48:39:
fa:20:39:d6:c4:bb:8f:59:71:e0:6e:f4:f9:bb:04:75:51:85:
dd:7e:6b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 00:56:04 2026 by rpki-client