Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/RQFNWUvuMYVAomLXmZbWPY4AbZg.roa
File: RQFNWUvuMYVAomLXmZbWPY4AbZg.roa (raw, json)
Hash identifier: yaa4uZFUXl99FtxLaWyBsgvr716tdR4EGiCtmevC5e4=
Subject key identifier: 45:01:4D:59:4B:EE:31:85:40:A2:62:D7:99:96:D6:3D:8E:00:6D:98
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019CAE75E239F743465EFB35557C766A6D25
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/RQFNWUvuMYVAomLXmZbWPY4AbZg.roa
Signing time: Mon 02 Mar 2026 12:11:27 +0000
ROA not before: Mon 02 Mar 2026 12:11:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200586
IP address blocks: 2a06:9801:8b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 01:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:75:e2:39:f7:43:46:5e:fb:35:55:7c:76:6a:6d:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Mar 2 12:11:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45014d594bee318540a262d79996d63d8e006d98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6a:dd:13:38:6f:86:b8:f9:47:25:79:8e:5d:
0b:d3:11:48:be:3a:62:78:22:41:dc:13:a1:21:6c:
56:e1:6e:29:20:8d:bf:47:ad:c0:31:20:8f:69:fa:
9f:06:63:a2:35:f3:f3:60:3c:42:c8:0e:d7:af:36:
6b:ab:a1:61:24:15:b8:78:c5:fc:f1:ae:f2:57:85:
6b:b8:b4:6a:6b:8a:b0:98:85:aa:c9:e8:ba:dc:be:
c6:bf:a9:63:3d:8b:f2:ce:0f:92:55:05:6f:4c:02:
a0:f3:48:64:f7:75:c7:e7:8c:6c:19:cd:c2:8b:5f:
7c:61:76:f3:f0:ac:8c:ae:05:d0:f7:b4:4e:99:db:
0c:f8:00:94:40:ac:d5:11:77:53:d6:40:72:06:52:
a0:9f:20:d3:2f:c1:e6:ab:b1:bc:cb:ba:44:1e:57:
04:5c:e8:9c:79:19:99:a2:b4:bb:e9:3d:0e:2d:72:
32:e5:fb:61:17:4f:b7:c8:89:4b:43:93:cf:a8:fa:
9d:d6:92:a9:9e:2f:a3:31:88:14:fb:57:b3:a2:50:
d3:a7:2b:44:d5:73:f4:e3:08:37:75:d5:9d:da:3f:
83:cc:b9:8b:13:bc:83:13:cd:fe:b5:dc:56:3d:9e:
4a:af:c2:58:3a:81:9e:f6:17:c3:25:00:b4:0d:26:
81:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:01:4D:59:4B:EE:31:85:40:A2:62:D7:99:96:D6:3D:8E:00:6D:98
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/RQFNWUvuMYVAomLXmZbWPY4AbZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:8b::/48
Signature Algorithm: sha256WithRSAEncryption
0e:ca:6a:30:b8:6c:4b:e6:b2:27:3f:d6:82:db:e2:b6:57:fd:
09:01:c9:5e:a2:c8:88:57:76:6d:d2:c0:33:95:53:1e:58:ec:
7e:47:0a:ad:6d:cb:0e:43:62:0f:68:5e:b1:0c:32:92:5c:1c:
12:1d:2c:a5:44:8b:b8:94:ef:22:7c:fd:64:90:99:a7:9c:26:
b8:f3:04:fe:14:00:15:bb:31:a6:85:40:f5:35:79:8f:55:de:
88:44:f7:ee:b3:5d:54:9f:f7:e4:85:42:bc:1e:43:de:88:c4:
bd:b1:00:83:28:54:71:28:07:82:79:5f:63:2e:1f:8e:da:8d:
6f:9e:2c:13:c7:a6:39:41:05:d1:23:bf:8c:7f:79:e9:72:e4:
51:dc:a2:7e:81:56:71:53:98:f2:c5:c7:65:fb:da:e6:d9:27:
d4:fb:12:f5:cf:f3:5c:44:cd:80:ed:b9:7b:8e:15:19:13:3f:
4d:a6:c2:8b:5a:db:21:59:a4:a3:a5:bc:e5:bc:66:c7:3c:b2:
fe:85:23:94:fc:f3:43:97:ad:18:c6:d7:60:8e:4f:e0:af:11:
34:af:59:73:41:db:e6:cd:e5:ee:1e:4a:57:0e:15:e2:b6:26:
0d:4d:ec:29:b0:58:34:9d:2a:d9:ce:42:de:36:da:7e:ff:78:
46:e4:dc:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 10:01:18 2026 by rpki-client