Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/c2UVssTja5sx2aVksMQLrpmfqOc.roa
File: c2UVssTja5sx2aVksMQLrpmfqOc.roa (raw, json)
Hash identifier: Y869sShm7sBFfYIg3OM84/lnpuzPPkTfMDym7fCrcJE=
Subject key identifier: 73:65:15:B2:C4:E3:6B:9B:31:D9:A5:64:B0:C4:0B:AE:99:9F:A8:E7
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019EFF43D8826D445A8F1567E4C68821F3AF
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/c2UVssTja5sx2aVksMQLrpmfqOc.roa
Signing time: Thu 25 Jun 2026 14:51:36 +0000
ROA not before: Thu 25 Jun 2026 14:51:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219347
IP address blocks: 2a06:9801:7d0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 13:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ff:43:d8:82:6d:44:5a:8f:15:67:e4:c6:88:21:f3:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jun 25 14:51:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=736515b2c4e36b9b31d9a564b0c40bae999fa8e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:50:dd:75:af:88:82:12:b9:23:72:06:2e:05:
92:3d:a2:bb:18:32:01:3c:fb:3a:12:d0:4c:ec:5c:
f2:84:94:9a:50:18:6e:38:f1:70:c7:0e:76:ec:80:
b5:cb:61:39:ce:05:6a:2b:a2:92:64:19:30:69:34:
a3:60:18:0d:5c:13:24:89:dd:03:06:6b:74:a1:0f:
48:ce:fc:89:f5:cb:76:14:e4:e1:15:41:0f:1f:63:
f4:ef:0f:cc:80:ee:1e:2e:14:2a:27:0b:8c:68:30:
4d:47:16:5d:76:56:de:ce:82:1a:09:64:5c:72:2e:
34:f3:72:79:d5:9d:76:05:f4:de:4a:1a:ff:12:91:
21:75:9e:2d:c4:e4:4b:3b:b5:07:20:78:64:78:45:
b2:5d:48:16:64:a4:f2:d3:a9:9a:a2:e5:d1:53:dd:
6a:21:f9:84:ea:25:45:26:9b:32:49:5c:39:e0:f4:
5a:82:3a:10:55:06:e4:c9:fe:9c:6c:fd:01:be:3a:
6a:bc:75:35:b4:42:8d:ab:55:17:05:f1:aa:2e:0e:
08:6c:f6:85:64:02:06:a5:39:4c:fb:f8:c5:bd:b9:
be:fa:b7:1a:e7:d4:03:d1:8d:93:7d:64:21:00:96:
7d:46:0c:1e:98:0e:d3:94:44:c4:6e:a2:41:63:10:
95:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:65:15:B2:C4:E3:6B:9B:31:D9:A5:64:B0:C4:0B:AE:99:9F:A8:E7
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/c2UVssTja5sx2aVksMQLrpmfqOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:7d0::/48
Signature Algorithm: sha256WithRSAEncryption
71:13:8d:4b:e5:b5:d0:a0:67:75:91:ff:70:37:51:5f:83:0e:
31:f6:69:bf:33:ed:d5:16:a7:74:b3:f5:ed:2d:b9:07:41:62:
ef:38:cf:b6:84:10:6f:bc:31:6a:09:8d:4c:a2:0c:6b:e2:b9:
9e:50:75:c8:3b:d2:56:e7:e6:e4:a1:b7:72:46:72:0e:39:67:
18:e8:1a:b2:0e:ab:9b:dc:b6:07:88:86:c7:69:58:ec:87:83:
ec:30:03:c9:6d:e4:06:1b:81:a7:13:35:16:ce:2d:7a:21:5f:
d3:f3:39:01:01:de:66:ff:ba:ee:76:c6:fe:51:16:17:e6:e9:
35:b3:6c:ba:53:22:ee:ea:dd:e4:f7:f9:15:8b:b4:09:33:ab:
8d:3b:43:23:0f:5f:c3:10:3e:a5:e7:75:0f:d1:98:89:aa:58:
d2:0b:d9:4d:91:65:52:19:2b:4e:7b:9e:d6:72:53:dd:61:2a:
f6:70:5c:a4:01:03:43:31:ce:3c:e5:64:d3:6f:3c:69:03:b0:
53:d7:08:74:48:6c:c6:2e:06:dc:09:46:2e:8c:6b:5e:76:89:
61:92:60:84:b7:ff:30:05:1a:b2:b7:c1:34:98:e0:96:f5:99:
41:4d:c9:64:54:7f:77:04:43:73:db:02:2e:40:d3:2d:17:59:
f1:f8:a3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 21:31:12 2026 by rpki-client