Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/UF4HqcimSKK7BcNw1ySGEQriFx0.roa
File: UF4HqcimSKK7BcNw1ySGEQriFx0.roa (raw, json)
Hash identifier: Od0WYev6iWLbCtGUlB2R40dC6nV53Sralxu5HnOWdXc=
Subject key identifier: 50:5E:07:A9:C8:A6:48:A2:BB:05:C3:70:D7:24:86:11:0A:E2:17:1D
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019FD337C382DCF43FFEE202502167205397
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/UF4HqcimSKK7BcNw1ySGEQriFx0.roa
Signing time: Wed 05 Aug 2026 18:37:54 +0000
ROA not before: Wed 05 Aug 2026 18:37:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200279
IP address blocks: 2a06:9801:cf::/48 maxlen: 48
2a06:9801:200::/44 maxlen: 44
2a06:9801:200::/48 maxlen: 48
2a06:9801:201::/48 maxlen: 48
2a06:9801:202::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d3:37:c3:82:dc:f4:3f:fe:e2:02:50:21:67:20:53:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Aug 5 18:37:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=505e07a9c8a648a2bb05c370d72486110ae2171d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a3:62:db:27:8c:35:2a:41:30:a1:b5:44:82:
e9:5a:93:50:e4:d7:9f:db:65:ef:cb:03:6f:13:65:
0d:ff:0e:e0:05:07:b4:2d:1c:98:5f:62:1b:2b:8b:
e1:cd:29:34:5c:79:be:c4:f1:b2:4c:21:df:3f:c4:
2a:15:27:0a:cd:cd:a8:1c:91:e6:7c:4a:2b:7d:46:
b5:1b:5e:1f:59:a0:10:60:66:8b:50:be:80:1e:7c:
e5:78:9b:01:d7:8d:3b:a0:dd:76:4d:0b:a1:a0:54:
87:08:9c:44:26:c8:1f:e7:95:57:09:c7:63:bd:b4:
e4:c8:97:a5:a6:47:f1:23:18:c1:26:49:b7:da:28:
d1:84:9f:1f:2a:fe:2d:74:9c:51:b0:85:5a:9e:a7:
bc:46:d3:1b:61:2b:06:f8:9a:18:23:f3:a1:9f:75:
8d:3c:a1:8e:38:db:8d:4f:18:b9:d5:37:1f:84:48:
ff:50:05:5b:a7:10:2b:13:b7:9a:3d:de:9e:94:28:
06:f2:d3:80:27:6c:39:82:47:ef:1f:4b:b7:26:c8:
dc:26:0a:6c:28:18:e1:b7:b7:87:0c:e8:52:12:48:
c5:08:bc:c9:b2:c4:74:30:40:38:4c:45:e1:11:68:
25:7a:6e:c1:2e:4d:2d:8f:66:28:ea:7a:72:81:af:
6c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:5E:07:A9:C8:A6:48:A2:BB:05:C3:70:D7:24:86:11:0A:E2:17:1D
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/UF4HqcimSKK7BcNw1ySGEQriFx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:cf::/48
2a06:9801:200::/44
Signature Algorithm: sha256WithRSAEncryption
3e:b1:a5:32:1f:60:85:54:0f:8c:af:35:18:12:44:53:9b:86:
e2:39:2d:80:5f:0e:c1:36:78:6f:4a:99:a1:f8:7d:8f:95:29:
3c:6e:e6:49:0d:f0:06:0f:58:75:59:ce:0c:f7:30:d9:6e:a8:
6d:63:0d:2e:94:18:84:51:21:6c:c1:e2:77:3b:1b:ad:81:5e:
12:91:b3:6c:18:b2:52:f3:b5:ff:70:68:70:29:b6:77:6b:14:
5f:22:fe:d6:9a:3f:42:8a:27:24:b3:31:ef:1b:be:1a:5d:09:
38:03:04:4e:11:27:29:87:6b:65:49:a2:1b:b3:da:7c:55:0a:
3a:55:19:f6:4f:d5:51:8e:de:44:4c:4b:aa:bf:84:a0:6f:aa:
17:13:68:f2:c0:c0:76:66:e6:f3:7f:a5:61:b5:25:bb:d2:7d:
65:75:80:39:83:39:86:5f:08:38:0a:0a:e0:fe:07:1f:4f:61:
49:0a:6b:0d:f8:e1:1a:7f:8e:26:39:65:6b:93:93:da:3b:8f:
12:12:04:6f:bd:21:c6:06:54:ab:a4:29:f0:f3:e5:1a:6c:69:
e3:6c:c9:37:a3:76:41:bb:fc:cf:55:b2:01:e4:09:16:8f:23:
ff:15:62:d4:3c:5a:fc:7b:d2:54:95:e6:f7:51:8c:c0:84:ec:
33:c8:88:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 17:13:32 2026 by rpki-client