Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/bsLPy1pgJQ5TMcheIDbfeDq88bo.roa
File: bsLPy1pgJQ5TMcheIDbfeDq88bo.roa (raw, json)
Hash identifier: Ddj21mV8ZMrNIR18GlwM+CG++r5Du1xB3LF0cqwGfgQ=
Subject key identifier: 6E:C2:CF:CB:5A:60:25:0E:53:31:C8:5E:20:36:DF:78:3A:BC:F1:BA
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A005EAC9E83543069D1C59F21D97FA53A6
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/bsLPy1pgJQ5TMcheIDbfeDq88bo.roa
Signing time: Sat 15 Aug 2026 14:54:28 +0000
ROA not before: Sat 15 Aug 2026 14:54:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218985
IP address blocks: 2a06:9801:f95::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 08:58:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:05:ea:c9:e8:35:43:06:9d:1c:59:f2:1d:97:fa:53:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Aug 15 14:54:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ec2cfcb5a60250e5331c85e2036df783abcf1ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d5:83:b6:89:75:f7:8f:a6:39:da:92:a0:ec:
0b:5d:f6:ed:af:33:d9:7f:f3:88:7c:de:4a:40:d7:
cd:e2:d4:ed:20:85:65:cb:06:86:1e:6d:a5:06:6c:
98:de:6f:9b:64:35:05:f5:d7:f4:c8:dc:72:83:a8:
11:a5:68:a1:48:e0:d5:66:0e:d4:ad:4b:bb:71:a8:
68:8c:8d:80:57:70:5a:2f:f0:9e:af:d1:77:b9:79:
8b:c5:10:45:db:14:98:01:ed:a3:f9:43:5d:5d:e0:
e1:4e:05:94:df:79:44:b1:69:d1:09:b6:11:16:66:
7c:b6:c1:86:b8:c9:14:3d:ee:cb:47:5c:0b:1c:a9:
cc:0d:e6:a0:d7:86:17:3e:8a:fc:9b:40:31:d8:5a:
f5:fd:5d:43:e5:fd:92:58:42:b3:b3:25:c2:65:b5:
42:bd:15:22:d8:a3:22:24:fb:95:08:a6:61:c3:3d:
63:56:10:ee:40:3c:a5:d5:6d:4b:83:53:2c:da:4e:
63:f2:df:38:a1:c2:33:98:38:93:e3:e2:ac:07:1a:
ee:da:61:ad:68:ad:f9:bd:0a:88:f1:e9:b3:a8:23:
5b:ed:81:5a:3c:8c:2d:99:82:53:65:c7:e6:da:52:
06:2b:28:e8:f8:a6:d0:cb:fa:c4:73:20:5c:dd:44:
12:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C2:CF:CB:5A:60:25:0E:53:31:C8:5E:20:36:DF:78:3A:BC:F1:BA
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/bsLPy1pgJQ5TMcheIDbfeDq88bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:f95::/48
Signature Algorithm: sha256WithRSAEncryption
8e:6f:aa:42:dc:27:8f:4c:18:36:5d:61:30:a1:c5:09:8a:8b:
00:12:c1:28:60:54:d1:83:8b:bb:9a:99:f2:4d:e7:8a:35:c4:
75:eb:28:ee:27:04:d8:1e:3d:db:86:54:5e:b1:6a:2e:9c:8f:
1d:bb:39:1c:eb:4f:bd:02:8f:98:f4:7f:42:19:93:54:d1:31:
d4:07:31:f0:12:51:d5:88:e0:e8:9d:64:60:60:66:b0:2c:a2:
af:b5:0e:2e:88:7c:0d:49:93:c4:f7:e5:9a:f1:d3:0e:5f:7a:
72:0a:75:83:be:e4:3e:30:96:2c:ed:e4:6e:13:99:c5:94:94:
5d:14:a1:66:a2:20:07:a1:84:37:c9:53:cd:5e:b8:27:49:40:
32:ac:60:6e:34:1b:67:85:3e:c2:c5:d7:60:a2:b2:c3:c2:08:
fa:81:4d:0c:a2:9a:97:9f:9c:b5:c7:e5:f8:27:9b:c6:86:1e:
20:3f:b5:61:8c:d2:ac:c2:c6:6b:15:90:9c:cd:8f:d7:ab:05:
47:ae:58:f9:51:39:c9:b0:8c:b8:f9:6b:ee:b7:08:ee:99:ec:
9a:dd:30:b0:6a:32:03:8c:62:7d:a5:e5:7e:2e:d0:cc:7c:27:
89:58:8c:dc:24:70:b5:be:0f:b7:fd:1c:c0:c0:06:17:05:f4:
a9:ad:9d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 16:55:48 2026 by rpki-client