Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/WldBPu34vzzWEoTtwPU6ln1XZYg.roa
File: WldBPu34vzzWEoTtwPU6ln1XZYg.roa (raw, json)
Hash identifier: XBHq6S3pZAIV9XfcDd4baIuU8ZYD+pPSZXYv3mX3imA=
Subject key identifier: 5A:57:41:3E:ED:F8:BF:3C:D6:12:84:ED:C0:F5:3A:96:7D:57:65:88
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A04E7089A879B9B7A727024B47BCBD57CA
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/WldBPu34vzzWEoTtwPU6ln1XZYg.roa
Signing time: Sat 29 Aug 2026 16:53:13 +0000
ROA not before: Sat 29 Aug 2026 16:53:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206098
IP address blocks: 2a06:9801:fcf::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:53:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4e:70:89:a8:79:b9:b7:a7:27:02:4b:47:bc:bd:57:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Aug 29 16:53:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a57413eedf8bf3cd61284edc0f53a967d576588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c6:4a:de:a4:d6:2f:9a:13:df:04:70:db:be:
8d:dd:95:96:16:29:0c:52:ee:99:c7:34:fb:fc:de:
ad:67:eb:aa:91:53:ac:ea:92:e2:e4:56:03:71:ab:
28:93:2b:43:70:d9:b2:cc:dd:40:0f:b0:a3:2a:7c:
82:c8:d0:23:a0:02:99:21:66:4e:10:21:73:29:9c:
40:99:1d:b0:fd:bf:0d:cd:58:4e:ee:94:ac:32:39:
62:b5:df:cc:39:43:8b:27:c7:4c:a9:85:a0:8f:4b:
5a:6f:54:ae:85:75:c6:56:17:38:94:58:c3:06:e9:
e2:a7:89:99:bf:3c:51:7d:96:47:8e:2b:28:d3:a6:
d1:a6:fb:e4:b6:fe:d2:23:cb:6c:d8:91:00:89:29:
69:6f:91:e9:79:27:eb:80:1a:ab:2e:81:f4:61:11:
ba:6c:df:ad:c4:fe:67:a3:00:34:f5:9a:a9:5c:50:
a2:38:80:9c:2c:af:0d:34:cc:90:fd:a6:e7:76:1e:
92:90:2b:f5:a3:3c:92:82:2b:b7:3d:98:a2:45:b1:
17:7d:00:c5:5e:37:0c:27:1a:11:95:eb:0e:19:5e:
77:fb:c5:3c:6e:67:57:ce:25:16:9d:8e:22:ff:84:
55:1d:15:0f:aa:38:e5:af:f4:f1:c7:79:07:0a:54:
4d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:57:41:3E:ED:F8:BF:3C:D6:12:84:ED:C0:F5:3A:96:7D:57:65:88
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/WldBPu34vzzWEoTtwPU6ln1XZYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:fcf::/48
Signature Algorithm: sha256WithRSAEncryption
2f:22:53:c4:a1:08:11:7e:93:7e:db:06:50:64:94:79:b5:7f:
01:3f:08:24:4d:db:db:54:83:7e:0c:65:f4:08:e9:8b:36:5a:
a7:05:de:39:28:63:df:5a:b5:6c:90:2d:04:53:ff:af:77:7e:
43:d3:d0:2c:78:9c:75:e5:53:bc:a3:43:9c:0d:f4:e5:b9:3c:
ee:8c:62:b5:db:0a:99:ab:c4:92:e2:25:7e:e7:1f:b6:72:cf:
ca:fd:f8:1a:f1:ca:01:b0:90:5a:dc:6b:6c:ea:b6:3a:3b:be:
f6:b3:b0:67:11:b0:b3:54:e2:ba:fb:30:c2:38:33:9d:0c:a5:
8b:f4:37:30:b1:72:b3:f7:a9:cd:4f:44:88:df:19:30:2b:39:
fd:81:ff:c1:ec:85:77:79:55:e8:9d:8d:13:c7:c7:c2:5c:ec:
47:aa:e6:63:c0:18:53:ae:ea:1b:d5:ef:d0:37:3c:27:34:69:
aa:22:3a:5a:33:95:aa:1c:7b:f5:f6:45:39:22:63:b8:da:7c:
ed:5e:ad:4f:c7:14:14:80:1f:24:1b:e7:08:a8:6e:59:00:05:
ce:5e:c4:a3:73:c9:13:6c:f8:0e:88:1e:27:35:d8:ff:2e:aa:
51:db:5f:7d:97:bc:77:24:bc:87:5a:57:63:89:c5:c8:61:fe:
00:73:82:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:19:45 2026 by rpki-client