Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/URiPhiJrWEul25GTNLiMTVHjcY4.roa
File: URiPhiJrWEul25GTNLiMTVHjcY4.roa (raw, json)
Hash identifier: jEmdVenI2ajaZbVxUmFcwfUPIVuQPD/DvZUZ5CiEfqI=
Subject key identifier: 51:18:8F:86:22:6B:58:4B:A5:DB:91:93:34:B8:8C:4D:51:E3:71:8E
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A0EEDEE6BBDC870ABA2A8B07FFDACCF7A7
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/URiPhiJrWEul25GTNLiMTVHjcY4.roa
Signing time: Tue 29 Sep 2026 20:33:00 +0000
ROA not before: Tue 29 Sep 2026 20:33:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218543
IP address blocks: 2a06:9801:1586::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:de:e6:bb:dc:87:0a:ba:2a:8b:07:ff:da:cc:f7:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Sep 29 20:33:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51188f86226b584ba5db919334b88c4d51e3718e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:db:24:3b:13:00:b7:2c:89:af:8a:ee:b8:0e:
5e:31:65:d5:94:20:e1:ee:68:d8:4d:9d:f4:cd:9a:
f3:40:31:2a:df:c3:e5:bb:3d:0c:b2:36:d4:bd:e1:
81:16:52:d2:79:f6:9c:58:06:6f:49:d0:63:db:ac:
40:d0:19:94:74:8f:c5:7c:79:64:27:4c:0f:ed:4d:
14:8b:db:b7:71:8c:25:23:12:6e:4f:7d:ca:3f:98:
09:03:75:80:42:22:25:dd:f8:1d:5b:09:ae:de:85:
52:74:74:64:be:df:16:60:c7:d0:9c:81:27:32:bd:
e2:91:6e:90:f7:49:5c:5d:ba:7a:77:63:69:f7:cc:
7f:89:2f:99:d8:c1:59:16:c3:30:0c:f8:b6:92:0f:
3e:8b:9c:db:f9:10:0a:ce:3a:e7:59:33:38:d8:f4:
73:e1:e6:ce:e6:1b:ad:1c:a5:76:b0:13:9d:e8:92:
69:9b:6d:8a:66:b5:0a:4e:53:ad:ba:77:b6:e0:2f:
20:ff:ce:5e:57:b6:98:ae:a5:20:00:31:fd:e1:96:
e3:76:9f:cc:b4:6e:9f:d1:74:33:95:8d:f4:33:61:
d8:9c:d6:cf:f6:1b:5a:f1:f2:bf:3e:9c:38:5d:ff:
7f:1c:e3:22:d4:fc:2d:f4:d8:27:9a:98:28:5e:02:
cd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:18:8F:86:22:6B:58:4B:A5:DB:91:93:34:B8:8C:4D:51:E3:71:8E
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/URiPhiJrWEul25GTNLiMTVHjcY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:1586::/48
Signature Algorithm: sha256WithRSAEncryption
6f:75:ff:a2:da:a1:8b:d7:e2:30:2f:5c:f5:3d:98:13:a6:90:
2d:9c:dc:37:e3:61:f7:17:55:eb:e3:5d:c2:5c:3a:1e:67:01:
69:65:de:90:07:15:45:1e:13:1f:79:2c:e2:36:df:dd:cc:02:
9b:ff:b3:63:9e:20:34:61:27:84:74:a2:3b:09:6a:ed:7d:e2:
39:90:9c:01:29:9b:b7:4f:69:2c:80:c3:89:cc:a3:5e:85:bc:
61:33:75:5d:f1:82:64:cd:74:8b:db:ce:7a:ff:1a:68:93:b6:
39:53:33:50:4c:32:23:3c:3c:d8:63:3a:73:aa:c9:c5:44:64:
71:d1:51:eb:10:89:70:df:59:96:72:e1:e8:e5:de:8f:e5:1e:
13:f5:89:6d:ce:73:6d:fb:5d:a0:d9:4e:98:fc:4a:50:8c:b5:
bc:db:32:c0:65:9c:59:f4:93:bb:4e:6c:5e:82:4c:c3:fc:e7:
87:39:3f:a0:5a:2e:64:ff:03:3b:bc:1b:37:18:f1:e4:cd:aa:
f2:2d:33:9d:ba:e8:6e:eb:ec:8c:ac:37:11:db:d4:22:a1:1f:
7d:21:7d:d0:01:04:57:30:54:59:ce:d2:64:2e:72:04:2c:c4:
85:de:b4:a4:da:a3:a2:e8:68:85:3c:cb:a3:23:a3:9a:d1:63:
09:48:78:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 04:51:41 2026 by rpki-client