Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/STeTKcLaHnT51D-QcraRISlKl80.roa
File: STeTKcLaHnT51D-QcraRISlKl80.roa (raw, json)
Hash identifier: vMgSD5A1PL/Tv3+LTnUwroE0hdSYk5AspnDM2yXqdVM=
Subject key identifier: 49:37:93:29:C2:DA:1E:74:F9:D4:3F:90:72:B6:91:21:29:4A:97:CD
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019F95A484EDCC42215ACB1EF439AFF902C8
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/STeTKcLaHnT51D-QcraRISlKl80.roa
Signing time: Fri 24 Jul 2026 19:40:14 +0000
ROA not before: Fri 24 Jul 2026 19:40:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219261
IP address blocks: 2a06:9801:7dc::/48 maxlen: 48
2a06:9801:f46::/48 maxlen: 48
2a06:9801:f60::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:a4:84:ed:cc:42:21:5a:cb:1e:f4:39:af:f9:02:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jul 24 19:40:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=49379329c2da1e74f9d43f9072b69121294a97cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fd:17:73:dc:ff:97:b3:ee:b0:3e:01:4b:74:
e5:ea:e3:bd:16:d8:cf:a7:08:94:94:f8:92:eb:2a:
e2:18:c2:0a:6c:cc:ac:3c:74:32:a7:7c:75:41:db:
cd:17:09:b6:c5:9e:58:22:a6:3c:1a:43:5b:8a:d4:
c8:8d:b8:d5:5d:52:30:81:0c:2b:19:75:ae:42:0f:
28:4a:45:d3:21:80:87:df:8f:5f:6d:b2:5c:8a:b1:
96:3b:be:5c:3e:bc:1d:d6:7d:c3:a7:ab:04:08:a3:
63:96:cc:08:50:ca:0c:5d:81:d4:33:af:e0:68:4f:
64:46:d2:85:13:e9:20:49:bd:33:ff:94:5e:c3:87:
ff:4f:30:71:0e:ca:22:bc:ae:25:52:7f:c3:6d:59:
7b:e0:95:3f:4b:bc:7a:95:fd:c3:ae:21:81:af:3c:
d0:dd:4f:a6:1c:dd:2d:57:fa:e2:30:ca:06:2d:c7:
b3:87:b8:51:ec:ce:c4:6c:33:35:d2:87:d7:d0:c1:
fe:79:63:72:29:18:91:d8:26:2c:4f:12:59:43:c2:
e3:f8:49:45:ed:36:72:67:02:ef:e3:4b:ca:dc:2e:
07:5c:a8:e7:86:d9:ab:97:13:06:f6:ad:c1:c6:87:
bb:72:6c:9e:f7:c8:16:7b:ea:71:70:ad:de:81:90:
f4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:37:93:29:C2:DA:1E:74:F9:D4:3F:90:72:B6:91:21:29:4A:97:CD
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/STeTKcLaHnT51D-QcraRISlKl80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:7dc::/48
2a06:9801:f46::/48
2a06:9801:f60::/44
Signature Algorithm: sha256WithRSAEncryption
bb:df:c5:8f:ad:ae:68:06:98:fe:39:c2:d8:44:6f:ad:3e:f7:
f5:8f:34:5f:ae:be:d8:48:64:87:87:18:30:48:2f:2b:73:99:
0d:9a:6d:06:0b:5a:60:ee:9c:6b:3c:8c:9b:7d:c9:bc:37:3f:
c7:33:87:d2:49:c3:43:1a:ce:25:44:b9:b6:f7:24:9d:bf:fb:
a3:0b:30:da:00:bf:dc:dd:1b:83:5a:95:06:1b:cb:05:eb:a5:
1a:5f:90:bf:fb:77:45:1f:01:0d:fd:19:e2:b0:5c:f6:a8:60:
72:07:01:dc:cd:5f:9f:80:a4:d2:35:c1:03:e8:5b:df:46:07:
1b:d8:2b:bd:a8:df:73:e0:79:b4:2b:8e:ca:94:03:55:6f:26:
89:0e:54:b5:9f:a5:6a:88:60:64:31:dc:31:61:dc:e0:35:bf:
1f:35:a5:31:cf:c9:1d:e1:28:12:01:91:89:86:12:57:a6:cf:
da:f4:5a:f1:bc:26:2f:f1:38:4f:7c:6e:ee:0c:4a:09:70:54:
b1:90:8c:34:9a:30:2d:d2:b6:25:4f:ae:b6:ed:25:11:24:9d:
8e:86:a5:a1:42:62:24:a2:2f:86:7b:dc:ce:68:59:8c:94:60:
ae:75:bb:38:87:a7:d5:7e:65:46:80:07:a0:94:08:30:05:77:
87:e4:3f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 17:11:51 2026 by rpki-client