Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/SAMRhJoMcvF6ARV4MqEfWK70ybY.roa
File: SAMRhJoMcvF6ARV4MqEfWK70ybY.roa (raw, json)
Hash identifier: KZWmU+wANAtZ9rPuqBdxYYz7kUGIKT6HJYFYiQjy7js=
Subject key identifier: 48:03:11:84:9A:0C:72:F1:7A:01:15:78:32:A1:1F:58:AE:F4:C9:B6
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019FBD47F07499B768492449127C0E08C3A3
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/SAMRhJoMcvF6ARV4MqEfWK70ybY.roa
Signing time: Sat 01 Aug 2026 12:23:56 +0000
ROA not before: Sat 01 Aug 2026 12:23:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219271
IP address blocks: 2a06:9801:f12::/48 maxlen: 48
2a06:9801:f20::/44 maxlen: 48
2a06:9801:f22::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:bd:47:f0:74:99:b7:68:49:24:49:12:7c:0e:08:c3:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Aug 1 12:23:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=480311849a0c72f17a01157832a11f58aef4c9b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8c:30:61:46:65:b8:da:5f:b8:ef:a2:fb:e8:
d6:7a:4c:67:1c:45:ac:ef:3e:53:15:65:5e:44:a5:
b5:63:88:f8:8d:c1:74:84:9c:d6:71:90:24:83:c1:
6e:8d:6b:e5:44:5c:91:8e:2d:0a:da:0a:4e:b5:39:
55:7e:df:6e:b0:91:8e:74:5b:b9:75:24:52:79:af:
2b:7c:0b:3a:18:06:ca:02:91:d3:24:49:57:66:df:
cf:71:29:d2:60:74:53:9d:ea:2b:9f:8b:e3:dc:93:
4a:18:34:65:15:21:59:c6:1c:1f:ba:d6:87:c0:f7:
27:1f:2c:80:67:e7:1d:d6:66:8c:a4:c4:f0:d1:b8:
c9:73:92:9b:b6:d7:2e:cc:a4:d9:13:20:3f:1a:f4:
18:87:bb:f1:3f:dc:de:fb:aa:4b:dc:49:82:60:16:
59:47:08:ca:23:70:c8:25:8f:a4:fa:1b:af:2a:b7:
ab:fc:1c:38:09:b4:c6:c4:8b:d7:f3:73:f5:45:13:
c6:52:30:1f:ec:bf:4f:5e:de:29:f5:6c:c5:cd:f7:
73:b6:52:bb:13:2d:55:59:2d:40:73:f0:b8:cd:fa:
36:ac:8e:97:50:fb:ce:83:94:7d:4c:44:f1:7a:39:
93:1e:b8:66:04:87:84:95:1e:ae:c3:4f:12:8a:f7:
78:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:03:11:84:9A:0C:72:F1:7A:01:15:78:32:A1:1F:58:AE:F4:C9:B6
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/SAMRhJoMcvF6ARV4MqEfWK70ybY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:f12::/48
2a06:9801:f20::/44
Signature Algorithm: sha256WithRSAEncryption
a0:db:fc:8e:13:18:f7:26:ac:45:c0:67:24:47:56:04:69:a6:
62:cb:2f:30:a1:e5:cf:f8:e9:26:27:fb:ad:a2:16:0f:6e:18:
32:e4:30:05:98:6c:3e:eb:09:f0:3c:55:19:70:cf:ac:30:c6:
01:fc:4e:a1:e6:57:86:c2:e6:b4:1b:7b:ac:d9:1f:9e:21:b9:
9d:a6:04:54:80:a8:3b:fe:16:c8:61:a3:aa:7b:46:97:db:7d:
13:9b:06:56:9a:53:04:f8:21:70:fc:64:ec:87:00:04:95:e3:
2e:52:41:4c:c2:2e:c0:1a:d2:7a:3e:5e:c6:1b:30:25:ef:50:
6e:08:dd:ef:70:d7:fc:50:fd:cf:0e:6e:9a:e9:9e:98:a2:70:
b3:22:7d:ba:42:b6:2f:63:b9:a7:8e:cf:a5:5c:2d:8f:96:74:
c7:a1:95:d7:cb:d4:b6:04:7b:ad:26:7e:9a:9a:73:0f:f8:21:
c0:4d:a7:85:f0:f4:ba:ae:69:ed:dc:07:77:51:8b:a0:fb:48:
fc:47:75:69:6e:8e:b5:78:ea:75:06:c3:3c:5c:a4:f1:04:b6:
75:f4:d7:21:62:c2:6c:5b:27:ae:93:d2:89:e3:d4:c0:35:3a:
55:0b:5b:7f:b8:f3:91:41:ab:f8:6c:f9:1e:d2:ee:09:8e:32:
3b:e6:04:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 17:11:50 2026 by rpki-client