Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/UIsBqobZxN3KpMpSUYr4k27mF-o.roa
File: UIsBqobZxN3KpMpSUYr4k27mF-o.roa (raw, json)
Hash identifier: GHudX11clCRoYMb9W6pZcOQAnKKfvld/FDogsVCyOi0=
Subject key identifier: 50:8B:01:AA:86:D9:C4:DD:CA:A4:CA:52:51:8A:F8:93:6E:E6:17:EA
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019E64C16914B6D8CE5D7E18956E4597AB4E
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/UIsBqobZxN3KpMpSUYr4k27mF-o.roa
Signing time: Tue 26 May 2026 14:47:37 +0000
ROA not before: Tue 26 May 2026 14:47:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212027
IP address blocks: 2a06:9801:250::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:64:c1:69:14:b6:d8:ce:5d:7e:18:95:6e:45:97:ab:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: May 26 14:47:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=508b01aa86d9c4ddcaa4ca52518af8936ee617ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5b:e0:f3:79:3e:39:a9:77:98:56:38:17:dc:
e4:fa:a4:66:ac:9d:42:39:a6:38:1c:fe:f4:cc:14:
c1:09:45:05:f3:19:2b:79:f4:a5:cb:d6:86:8e:b5:
7c:51:a2:a9:87:57:13:92:49:0a:b6:36:3a:ca:68:
db:eb:01:a6:4e:66:4e:fd:2e:ac:a4:f4:e7:8b:c1:
bb:09:77:ed:cb:39:80:d7:b4:bd:be:33:df:ac:f4:
07:43:c4:bb:5b:e9:a3:06:cc:a9:e9:66:08:fb:af:
b0:fb:cf:7a:92:52:ca:f5:cc:0b:4c:e5:4b:8e:4b:
17:b7:00:d0:6e:57:55:83:6c:b4:9d:78:a5:54:ce:
b1:dd:57:a5:93:96:67:44:67:34:a0:2c:d3:11:3b:
1a:d8:7b:fc:4f:c0:b3:bc:de:ec:9a:f6:89:a1:39:
28:d6:4f:17:fe:65:65:32:d4:0d:c3:ed:e4:32:4f:
46:85:c6:d5:35:b2:b9:b2:fc:36:ac:45:ca:3a:b2:
b0:55:a1:7a:5e:dd:cf:bc:5d:eb:c5:46:48:59:45:
54:4e:5e:60:8f:24:e9:e4:de:85:62:9a:ac:fa:b5:
59:da:b5:88:89:e7:71:93:11:4d:01:a2:01:40:8e:
a1:bb:86:fb:e0:6c:e4:8f:1a:b7:51:6f:43:3b:58:
17:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:8B:01:AA:86:D9:C4:DD:CA:A4:CA:52:51:8A:F8:93:6E:E6:17:EA
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/UIsBqobZxN3KpMpSUYr4k27mF-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:250::/44
Signature Algorithm: sha256WithRSAEncryption
80:85:83:c0:1d:6f:44:52:f8:fd:22:9b:e8:44:34:54:1c:9d:
5c:95:cb:cd:b4:ba:9f:75:9d:19:6d:ef:06:d5:ca:fa:54:93:
e5:fa:79:d5:22:c9:f0:ea:00:f5:01:8f:b9:19:21:76:ec:09:
fb:c1:cf:39:3a:cc:ee:8c:0b:5b:ba:9f:5c:66:ae:5a:9b:0b:
21:a5:07:0b:ae:f8:8f:0e:81:86:61:8f:e9:13:fc:70:99:4b:
10:4e:1d:d1:40:ca:97:3d:a8:f1:a6:9d:77:19:a5:0a:a7:07:
86:db:f6:66:f6:66:30:26:c7:ca:cc:d0:bb:a9:29:0d:94:de:
00:b5:9f:05:a2:b7:b6:f0:5f:35:7f:47:5e:44:78:3e:b9:ab:
0b:11:13:06:1c:49:8d:55:53:37:30:2a:16:cb:e9:08:46:01:
74:e8:1f:b5:61:6b:1d:22:42:a3:2e:1b:5b:2b:a1:8c:a4:97:
8f:c7:78:a3:9d:6b:bb:4e:26:a5:a2:6a:de:fa:6b:ca:7c:f0:
f1:51:f8:6a:54:5a:b9:24:ed:e3:2d:e6:73:11:3b:6f:43:ca:
75:99:19:e2:10:3a:28:7d:61:9e:ba:c3:b5:1e:a5:90:5b:43:
c3:c0:5b:2b:cb:b7:f6:cd:19:74:1a:a0:6e:53:8c:61:93:4c:
2a:36:4b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:55:16 2026 by rpki-client