Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/RJtn1hRIzwt_kmY4pt2m8D_YKSQ.roa
File: RJtn1hRIzwt_kmY4pt2m8D_YKSQ.roa (raw, json)
Hash identifier: ZQsYVmL6D6T+PStYUJLvxKi6z+fpZCSSNMTrrAiKd7w=
Subject key identifier: 44:9B:67:D6:14:48:CF:0B:7F:92:66:38:A6:DD:A6:F0:3F:D8:29:24
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A039127E2BB1BEFDD28D62CEA581B41E04
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/RJtn1hRIzwt_kmY4pt2m8D_YKSQ.roa
Signing time: Tue 25 Aug 2026 13:18:28 +0000
ROA not before: Tue 25 Aug 2026 13:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214693
IP address blocks: 2a06:9801:f4c::/48 maxlen: 48
2a06:9801:fc4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:12:7e:2b:b1:be:fd:d2:8d:62:ce:a5:81:b4:1e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Aug 25 13:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=449b67d61448cf0b7f926638a6dda6f03fd82924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a7:12:13:0c:2c:bb:99:51:39:0c:c8:a2:04:
74:ad:66:19:a3:ec:15:57:42:c5:6b:ac:13:5a:04:
e5:94:00:80:20:e7:17:2d:4f:d1:5b:50:ea:59:6c:
ea:78:1e:1b:46:c9:42:0e:b3:cb:ae:aa:9e:61:60:
96:f0:6c:e9:8e:fc:c6:cc:5e:f6:32:21:ba:07:c8:
34:9b:69:66:2f:e2:a1:7e:a8:67:b2:4e:d4:50:44:
22:fe:3f:0b:b5:42:e5:cd:f6:b1:d8:40:68:0b:bb:
1e:48:71:fa:4e:ad:73:be:e1:2c:25:2e:3c:87:70:
16:34:16:66:d3:48:fd:4f:60:2a:c1:72:90:b0:e9:
59:7d:7b:02:3d:50:b4:77:8c:dd:dd:28:e0:2b:7e:
8b:b2:6b:c7:6e:51:cf:06:c6:14:c0:d8:cc:7d:ee:
11:7b:0a:8b:70:8e:e9:06:d1:41:84:f5:72:fa:03:
95:9c:08:5e:de:2a:05:e1:f1:59:37:9b:74:bb:88:
33:86:8b:eb:5b:2f:52:5f:bb:8e:11:40:15:62:b7:
54:22:fa:95:41:af:b0:0d:20:1c:eb:41:fa:0b:22:
7e:ba:9d:8a:37:0f:eb:40:79:8e:ac:2f:9b:da:90:
ab:87:0d:a1:8c:31:c3:0b:cf:0d:cb:d6:fc:85:19:
e6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:9B:67:D6:14:48:CF:0B:7F:92:66:38:A6:DD:A6:F0:3F:D8:29:24
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/RJtn1hRIzwt_kmY4pt2m8D_YKSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:f4c::/48
2a06:9801:fc4::/48
Signature Algorithm: sha256WithRSAEncryption
65:7c:1c:70:49:ee:73:3b:5d:95:b1:1f:30:ea:5f:19:cd:63:
a5:6e:16:be:fc:c6:a8:86:0c:29:aa:9a:d7:d8:9a:3e:b1:57:
34:ff:c1:b1:74:20:42:25:60:89:be:2f:b7:a9:4a:45:e2:28:
a7:e1:f4:07:cd:be:ce:cb:aa:98:26:be:00:65:dc:18:d5:e8:
8b:ad:a0:9e:59:d6:26:5c:b6:a9:58:47:61:c9:3b:04:d1:d6:
d4:c5:e4:25:c9:a0:2f:90:12:61:7b:36:c5:26:3e:53:8e:07:
ea:6c:45:8d:c9:20:85:09:41:7f:b6:cf:4f:6e:00:d4:7a:04:
6f:a3:4d:8c:55:c6:d9:e2:91:c2:17:01:6d:f5:97:00:33:53:
3a:84:09:01:31:dd:a2:a9:ea:ef:0f:80:df:3e:7d:c4:ce:38:
7b:cc:b9:4e:e9:2d:85:56:53:76:ef:4f:aa:31:31:51:a3:e8:
58:38:02:1c:e1:5e:44:87:0b:43:05:0e:23:28:80:cd:c0:dc:
a6:50:fd:97:de:c9:02:96:ec:9e:5b:e4:cd:af:b0:52:0b:22:
fe:d3:01:5f:f3:be:35:87:df:61:2d:75:87:3b:a8:6c:bf:c3:
a1:59:04:76:ec:c0:05:e6:4a:56:2e:21:f2:08:75:1e:11:39:
70:d3:0d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:42:49 2026 by rpki-client