Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/aRv2gCQ78U2sHGdKpcoAnX6AQ3w.roa
File: aRv2gCQ78U2sHGdKpcoAnX6AQ3w.roa (raw, json)
Hash identifier: drFV393VWtxGsmMiedbX46y4k2DSFVCahpfxhDHpsac=
Subject key identifier: 69:1B:F6:80:24:3B:F1:4D:AC:1C:67:4A:A5:CA:00:9D:7E:80:43:7C
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019F012912AC59E826F07D78741D90289205
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/aRv2gCQ78U2sHGdKpcoAnX6AQ3w.roa
Signing time: Thu 25 Jun 2026 23:41:36 +0000
ROA not before: Thu 25 Jun 2026 23:41:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198750
IP address blocks: 2a06:9801:a00::/40 maxlen: 40
2a06:9801:b00::/40 maxlen: 40
2a06:9801:c00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 13:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:01:29:12:ac:59:e8:26:f0:7d:78:74:1d:90:28:92:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jun 25 23:41:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=691bf680243bf14dac1c674aa5ca009d7e80437c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:18:20:a9:e0:b9:69:aa:bd:e2:91:a6:5b:55:
67:b1:da:c3:44:ba:9a:f5:b2:ea:ef:56:bf:30:ee:
c7:d5:f1:35:73:fa:69:d6:d7:fd:dc:07:85:bc:df:
04:88:95:2b:6f:60:25:7c:80:e6:70:93:d5:b2:cd:
e4:af:5e:94:b1:4a:7f:12:1a:08:2c:0d:73:e8:86:
01:f2:85:f4:01:d5:10:97:44:d5:a6:31:d6:0a:59:
b4:5c:12:e9:51:99:11:2e:86:7f:74:97:21:6f:2e:
ce:1f:58:d9:27:f1:74:83:56:57:03:1b:f3:0c:d2:
64:72:3f:cc:6e:2c:6b:31:18:76:7a:cf:ff:8b:d6:
52:da:7e:8d:10:99:70:dd:9e:2d:0d:11:44:f0:91:
e3:3b:b4:2a:f0:39:c0:6b:cf:a1:cc:48:f5:23:66:
28:f4:58:34:72:d7:e8:4a:42:c9:58:f7:f5:ed:83:
19:07:77:0c:c2:2f:3e:23:b7:72:20:6f:10:ab:6f:
89:d7:f5:56:25:64:3e:a7:cb:e3:0c:39:55:56:1e:
46:96:35:b6:64:a1:38:69:ee:42:17:5d:d0:c8:43:
76:9c:79:cd:b9:08:28:5d:2f:ea:4f:9d:26:1f:3d:
53:1d:bd:8d:e7:41:c4:a0:1f:36:7e:ee:0c:e5:73:
f8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:1B:F6:80:24:3B:F1:4D:AC:1C:67:4A:A5:CA:00:9D:7E:80:43:7C
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/aRv2gCQ78U2sHGdKpcoAnX6AQ3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:a00::-2a06:9801:cff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4f:de:af:a2:cc:e4:dc:cc:86:8a:9c:62:6d:ca:25:02:46:b3:
c5:ab:07:ae:d1:17:5b:2b:af:fd:b7:42:e3:98:2f:f0:37:ba:
6f:14:0a:8e:c3:04:0a:b7:fb:55:9b:87:38:b7:ad:4b:aa:8f:
ad:4b:14:08:39:d9:79:59:ce:ab:f7:d9:a1:7d:50:74:51:d5:
ae:20:80:d2:ff:08:34:1f:9d:47:b7:f4:a9:8d:35:0e:5c:9e:
b6:e6:9c:b4:fb:1f:62:f4:d9:d5:30:35:27:bd:0f:f2:a5:4d:
62:3f:5e:f6:1b:16:7a:a9:9e:3a:25:5c:29:fa:e9:01:62:96:
b1:80:ca:a3:b6:5c:b9:c3:7f:d7:84:09:c1:7f:e3:89:29:b2:
d0:1b:8f:dc:ad:e7:4c:eb:f5:ab:2e:31:be:96:08:4e:2d:12:
95:38:e6:69:f4:c3:e4:de:0b:3c:26:36:20:a0:b0:dd:29:b1:
88:e3:d5:25:bf:fd:d9:04:dc:68:46:10:e5:8c:0b:23:35:50:
69:d5:ef:20:99:e9:57:18:e4:76:58:43:c2:57:45:fa:16:6c:
45:ce:c6:c1:51:57:8d:8f:b8:53:94:59:7a:8f:35:85:59:a7:
1e:5b:34:3a:67:2a:d6:1f:1a:68:be:5c:f9:97:dd:ee:4a:5c:
60:0b:cb:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 21:32:02 2026 by rpki-client