Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/brU06nIGELF7BzJUKyyTQtvzapI.roa
File: brU06nIGELF7BzJUKyyTQtvzapI.roa (raw, json)
Hash identifier: cETDWTvC7L1HcGyow1HPhj+eP9gRY9b17jX/Z5lzijo=
Subject key identifier: 6E:B5:34:EA:72:06:10:B1:7B:07:32:54:2B:2C:93:42:DB:F3:6A:92
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019E12E7BC0FB9D122B3E37F9EF89C18868F
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/brU06nIGELF7BzJUKyyTQtvzapI.roa
Signing time: Sun 10 May 2026 17:20:37 +0000
ROA not before: Sun 10 May 2026 17:20:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201038
IP address blocks: 2a06:9801:5e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:12:e7:bc:0f:b9:d1:22:b3:e3:7f:9e:f8:9c:18:86:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: May 10 17:20:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6eb534ea720610b17b0732542b2c9342dbf36a92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8e:7e:56:bf:f9:ac:19:a4:d7:bd:e5:d4:cd:
fc:f1:12:3a:dc:72:da:3e:a4:56:12:d0:d9:dd:9f:
58:26:71:9d:12:70:a7:1a:e1:4f:77:b0:da:b6:05:
ab:86:12:d8:5f:45:5f:3e:97:c9:9f:8c:08:67:7a:
13:4c:5f:0c:bf:18:d5:e4:d1:09:59:e4:69:75:e0:
7b:b5:51:66:7b:38:fc:ca:36:61:18:69:4c:b7:34:
c7:f3:19:eb:21:73:1d:44:13:ae:11:4a:73:9e:34:
be:4f:4c:6d:c9:68:19:7f:53:7f:71:ae:59:02:e4:
f9:31:3d:98:8a:c3:73:da:81:8a:32:06:d1:3e:a0:
da:89:af:b8:46:f4:7d:20:23:f2:99:db:4a:ce:c2:
dd:b3:0e:94:bf:65:dc:87:11:67:12:78:e1:94:e2:
3d:85:3f:81:f8:ca:3a:47:cb:41:ec:46:70:9f:0c:
75:54:2a:0c:f1:95:68:de:2e:16:ce:ea:5a:e4:de:
fa:a8:6b:7a:1d:4d:d2:8a:84:4c:a1:fc:2c:9b:2b:
1b:20:ac:86:7a:bd:11:43:9b:2e:a6:5b:96:ad:d4:
a6:ec:29:04:a3:37:f8:d8:ec:fa:fe:ec:d8:5b:28:
a8:36:9b:72:1d:99:94:4e:33:f1:5d:3d:c2:f3:0c:
89:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B5:34:EA:72:06:10:B1:7B:07:32:54:2B:2C:93:42:DB:F3:6A:92
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/brU06nIGELF7BzJUKyyTQtvzapI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:5e::/48
Signature Algorithm: sha256WithRSAEncryption
45:e5:9d:9f:2d:74:09:9d:30:33:9f:ee:61:f6:bc:22:c7:e4:
8a:9d:b4:59:0f:c8:0d:af:30:09:47:ca:1f:bb:bf:74:db:e9:
af:46:57:dd:60:c6:51:2d:ca:b8:18:84:24:6b:27:7c:3e:cc:
af:8c:e6:42:04:6a:9b:04:2c:7a:1d:96:df:27:4a:5d:7f:08:
71:56:6f:72:11:b1:65:87:7c:ff:65:92:0a:08:fd:87:23:1a:
0e:63:f5:3e:60:ea:04:ec:59:04:06:ce:53:95:b9:29:de:fb:
d4:ad:b7:d2:98:03:31:6f:a8:34:0e:01:20:e3:6b:c3:5a:58:
f6:9b:b2:55:e5:ee:11:55:b1:fc:9b:92:e1:de:2f:a0:a7:3a:
7b:ca:f3:bb:0b:68:f9:e3:16:59:c8:6e:d6:cd:bd:33:b1:34:
6e:e7:0e:fc:73:af:2d:9b:0c:1d:b2:8b:e2:31:c2:2f:ec:82:
c0:3e:79:01:5f:96:8a:c6:cb:0e:b8:ef:c3:d5:52:65:86:2c:
db:7a:92:4d:c5:64:7e:33:a0:f3:7f:46:c2:db:29:42:b9:7a:
6b:7e:db:be:1c:d3:09:7f:ca:03:54:55:c3:a1:50:f1:65:04:
b7:87:19:4d:03:4b:bf:13:30:ef:57:e9:df:81:a4:16:3a:03:
78:07:5d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:09:59 2026 by rpki-client