Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/XBy-rca3HDNTAqZ1OtX3fgOEfKw.roa
File: XBy-rca3HDNTAqZ1OtX3fgOEfKw.roa (raw, json)
Hash identifier: 6HCghHV0j6/BxhnXpvz/FM6W4z9ZKEXOxCajj3p8VSQ=
Subject key identifier: 5C:1C:BE:AD:C6:B7:1C:33:53:02:A6:75:3A:D5:F7:7E:03:84:7C:AC
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A14BE7092CCD255020D0C21960A178BEE9
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/XBy-rca3HDNTAqZ1OtX3fgOEfKw.roa
Signing time: Sat 17 Oct 2026 22:06:34 +0000
ROA not before: Sat 17 Oct 2026 22:06:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218880
IP address blocks: 2a06:9801:15c2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 03:26:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4b:e7:09:2c:cd:25:50:20:d0:c2:19:60:a1:78:be:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Oct 17 22:06:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c1cbeadc6b71c335302a6753ad5f77e03847cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4b:6b:17:9a:78:0d:4b:03:cd:a3:ef:9b:c5:
e9:ff:70:38:ee:be:b9:0f:a5:0a:bb:4e:df:3d:dc:
97:65:88:e0:a9:f3:17:35:1b:d4:42:b1:55:22:b9:
d1:a9:c1:32:f1:9b:ef:23:db:9f:02:2c:ed:40:f9:
db:9b:21:54:b3:92:0d:bc:e0:40:0c:8c:81:dc:5a:
5a:2c:f5:94:25:ef:75:7c:95:51:04:fd:8f:61:e7:
a1:78:94:f0:cf:c0:b5:e3:0b:78:af:f9:d3:dd:6e:
dd:2a:18:b3:18:3e:5b:ee:e7:18:0a:c6:a7:35:00:
d2:41:9c:e2:bf:6e:73:24:bd:24:d6:92:9e:73:c1:
ac:a7:e3:c3:90:e1:f2:b3:33:57:d4:11:28:7a:3b:
2d:0d:f7:84:27:ba:72:b2:8e:0b:e7:ac:94:b1:8f:
d4:3c:20:36:b4:30:84:9b:43:78:b4:d3:7d:7b:0d:
52:d5:b3:09:49:f5:8e:70:0e:cd:9a:de:3e:db:ff:
ac:60:12:25:26:42:76:07:88:de:2a:20:58:6a:c8:
63:29:3a:c1:d6:6e:9a:62:2f:cd:0d:62:ee:64:20:
99:84:16:d2:1a:0f:43:69:0b:24:a3:af:46:b7:62:
c0:24:c9:98:d0:e3:76:69:90:e6:10:36:a1:8e:97:
80:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1C:BE:AD:C6:B7:1C:33:53:02:A6:75:3A:D5:F7:7E:03:84:7C:AC
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/XBy-rca3HDNTAqZ1OtX3fgOEfKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:15c2::/48
Signature Algorithm: sha256WithRSAEncryption
a9:53:8f:2a:d7:b1:ea:59:31:45:21:35:20:60:05:f2:c7:7b:
15:bf:e8:e3:10:d0:00:88:a0:b9:86:be:3b:a5:09:17:db:dc:
88:18:a9:52:49:fe:4f:6b:0c:54:a6:20:29:8e:5f:37:94:50:
8f:4b:f7:cc:13:3c:5a:db:ef:63:f8:93:c9:ed:9f:d4:d7:8a:
9f:60:dd:b5:43:71:e3:63:fd:1c:35:75:15:b7:06:ff:59:8c:
3e:a2:48:2f:24:f4:e0:f2:e5:37:76:45:36:9f:ea:aa:02:c8:
8c:b3:2a:17:e6:7e:cf:bc:04:de:46:e8:f1:34:7f:1d:2d:70:
96:5c:a1:4e:51:65:dd:3b:86:67:c4:00:9c:36:d0:f0:3b:0a:
26:f3:07:40:d7:4f:1c:17:14:e1:91:e6:e1:be:0a:49:c4:13:
ed:0c:91:9a:86:98:b6:16:04:d3:bd:68:17:73:c8:d7:a8:00:
e7:ca:81:c3:92:06:c8:2e:48:5a:06:28:b6:61:65:26:bc:81:
05:13:4c:c9:f8:1b:1c:49:69:39:48:a2:cb:15:81:0d:85:ed:
87:9d:ff:9a:3f:3c:bd:67:06:9a:c7:9d:c1:98:7b:21:db:32:
47:e6:37:40:ce:24:dd:20:c9:87:d2:db:d1:16:b6:9a:8b:72:
a5:68:2b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:30:34 2026 by rpki-client