Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/_AqNcSjF9ebbBk9Gr2Aj4jfqfwQ.roa
File: _AqNcSjF9ebbBk9Gr2Aj4jfqfwQ.roa (raw, json)
Hash identifier: pDu/7l9JBRsgE4zpZ59AxCqVywgkEO2P0KsaMBSDBhk=
Subject key identifier: FC:0A:8D:71:28:C5:F5:E6:DB:06:4F:46:AF:60:23:E2:37:EA:7F:04
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019DD15D9F67FCA0439B38E3A82B664685A9
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/_AqNcSjF9ebbBk9Gr2Aj4jfqfwQ.roa
Signing time: Mon 27 Apr 2026 23:54:26 +0000
ROA not before: Mon 27 Apr 2026 23:54:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198621
IP address blocks: 2a06:9801:281::/48 maxlen: 48
2a06:9801:2bc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 18:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:5d:9f:67:fc:a0:43:9b:38:e3:a8:2b:66:46:85:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Apr 27 23:54:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc0a8d7128c5f5e6db064f46af6023e237ea7f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:23:c3:0d:cc:ce:08:5d:47:0e:94:63:af:34:
b6:63:a0:9e:bd:4b:08:eb:04:e7:e7:38:cb:73:40:
de:d8:15:01:62:8b:ed:29:b7:e6:35:96:ce:a2:44:
1e:c7:de:29:8b:8c:a8:a1:d4:83:df:a4:32:c2:51:
bf:d1:8d:da:93:65:77:c9:b1:fe:10:f3:22:a0:05:
4b:8c:10:15:90:e7:c3:f6:91:ab:24:37:3d:57:3f:
c1:8a:05:3f:af:8b:49:40:52:7b:97:35:91:b1:98:
96:b0:25:50:5c:42:6f:ab:8e:db:cf:a0:b5:86:98:
da:ae:e6:b1:5e:80:ed:cf:22:f7:f8:f9:86:68:92:
7e:a6:4c:f6:7a:62:60:fa:e4:ba:6e:47:93:f4:55:
63:4b:7a:6d:3d:74:30:ea:35:a9:1e:60:17:be:f7:
71:f2:f9:24:fd:45:87:d8:bc:80:e5:2e:8a:83:43:
26:55:bc:88:32:fa:24:12:fb:ab:29:fb:5c:21:57:
1e:6e:f6:b3:d8:6c:7c:e5:4d:dc:6c:fe:d7:81:86:
13:c9:6c:d9:08:f2:12:b8:ed:bc:30:f3:f2:db:5f:
c5:f1:44:be:77:89:4a:64:60:ea:90:29:4f:68:c8:
92:47:e1:4f:1c:ab:75:b0:4c:d9:be:a2:d0:56:f1:
05:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0A:8D:71:28:C5:F5:E6:DB:06:4F:46:AF:60:23:E2:37:EA:7F:04
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/_AqNcSjF9ebbBk9Gr2Aj4jfqfwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:281::/48
2a06:9801:2bc::/48
Signature Algorithm: sha256WithRSAEncryption
97:d8:e3:95:28:64:76:5b:51:0e:a5:f4:be:c1:e3:d6:5b:f4:
9d:f7:70:dc:66:5e:e8:ea:39:0f:86:bc:5e:38:60:d4:7d:d1:
ec:8d:5a:a4:64:92:b5:99:c1:91:a3:ec:1c:c2:37:0b:10:b8:
36:3d:70:50:b3:b2:38:d3:85:e1:5d:f9:7c:f5:53:61:0a:f7:
de:d0:8b:3e:02:b0:2e:da:39:47:6c:ec:5a:cd:06:1e:a7:f4:
cc:30:56:7d:84:83:b5:04:a0:03:67:25:9a:2e:f7:c2:18:f6:
d5:58:8f:48:4a:ed:a4:a3:a2:7b:01:1c:73:97:bb:bd:2a:01:
68:b4:ec:b4:ed:70:9c:a6:6b:94:c1:a9:b5:9e:67:69:2d:e6:
ad:a6:82:15:78:9d:9d:5e:9a:6d:bb:d7:99:d5:85:d0:c8:d0:
d2:75:5b:ff:71:a4:bf:fc:7f:45:e5:be:cc:c5:9d:5b:50:f4:
8a:ff:13:35:b8:6b:e0:9e:ed:75:91:46:1f:3b:37:b7:37:50:
c0:5b:a5:55:d2:cf:ab:53:c3:67:6e:12:f8:08:fb:7e:9c:f4:
86:25:fb:d8:c7:64:2a:c0:50:4e:40:c6:40:e3:ed:fd:dc:17:
eb:71:55:cb:cc:a9:8d:36:49:4a:3a:78:ae:9d:ed:f8:6f:2f:
5e:75:10:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 02:40:16 2026 by rpki-client