Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/dPi7LdYa1SKYgN-WIt2v6Kl20fg.roa
File: dPi7LdYa1SKYgN-WIt2v6Kl20fg.roa (raw, json)
Hash identifier: oUL4y4JL05ytn1KQ3/PZ2SZbfc59sJJqUiOEdRdN7mM=
Subject key identifier: 74:F8:BB:2D:D6:1A:D5:22:98:80:DF:96:22:DD:AF:E8:A9:76:D1:F8
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019FBA5EB26690084F9ABB570640E749BC3B
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/dPi7LdYa1SKYgN-WIt2v6Kl20fg.roa
Signing time: Fri 31 Jul 2026 22:49:56 +0000
ROA not before: Fri 31 Jul 2026 22:49:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219082
IP address blocks: 2a06:9801:f45::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ba:5e:b2:66:90:08:4f:9a:bb:57:06:40:e7:49:bc:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jul 31 22:49:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=74f8bb2dd61ad5229880df9622ddafe8a976d1f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:33:3a:bc:3b:f7:8d:8e:60:85:93:65:31:09:
a2:0a:39:7e:53:4e:dc:60:11:45:7c:c9:d3:61:bc:
14:81:ab:41:c9:13:2d:9a:3b:03:9b:1d:ee:48:44:
d0:97:24:ef:79:37:44:ea:e0:bc:c7:49:73:3d:c1:
30:7d:92:a8:3b:bc:87:34:67:61:62:44:25:33:1f:
66:f5:3b:7f:ab:d2:2f:88:e9:a9:d9:2c:ba:ad:a8:
e3:05:d2:3c:ea:0e:df:7a:2f:a9:a3:66:8f:01:72:
51:55:d2:f3:57:42:67:7d:a9:6f:63:c7:b6:52:15:
8c:1c:e4:39:0c:d2:7e:a3:40:15:0a:e9:fd:1c:13:
8c:a3:6e:a3:d1:ff:db:8a:06:6e:98:eb:6f:55:29:
a0:68:9f:4e:61:3e:e4:f0:d4:9a:52:c1:f0:b4:8c:
14:c4:94:f8:39:8a:d9:08:77:ae:00:77:95:d9:2d:
66:b0:93:08:42:49:12:32:c6:5f:e4:3e:f3:84:ae:
8c:93:c6:1a:2f:c5:d7:82:0e:bc:c0:f8:d0:63:45:
56:45:d6:ce:22:63:ca:29:ef:ae:30:2e:75:ff:19:
57:fb:a0:d7:c0:7f:86:94:8f:5f:43:90:61:26:07:
bd:9c:b9:40:20:ea:b7:41:86:dd:36:bb:57:a1:c7:
fd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F8:BB:2D:D6:1A:D5:22:98:80:DF:96:22:DD:AF:E8:A9:76:D1:F8
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/dPi7LdYa1SKYgN-WIt2v6Kl20fg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:f45::/48
Signature Algorithm: sha256WithRSAEncryption
16:72:53:f0:5d:ba:48:52:a9:71:70:ba:98:13:4d:e5:26:1e:
f7:36:01:01:f4:19:81:b6:05:44:b4:c9:bc:66:e2:d6:57:2f:
9e:b4:2b:56:fc:c5:2d:6a:6d:a4:1a:75:f4:d6:e2:17:ca:ef:
9f:6c:4b:c8:0a:7e:a4:85:e2:90:aa:be:29:ee:06:cc:d7:40:
30:71:51:a0:37:d0:5f:2d:d0:e5:30:46:77:fd:88:7b:38:f6:
9f:b4:c0:4d:41:eb:fb:0b:2f:2f:49:94:4b:21:22:1a:01:1d:
4a:2d:e4:48:83:88:d9:05:50:a7:cd:be:d8:58:7f:9a:00:d6:
f9:65:de:59:8f:1b:82:42:81:67:f6:1e:b9:50:8f:ea:67:30:
0a:7c:00:68:36:cf:d1:4a:c1:83:44:89:7b:f9:29:74:21:5d:
ad:22:7b:4f:08:11:55:4f:78:f4:3e:2f:65:27:5e:58:a9:79:
5b:c0:e1:76:9f:bf:94:f0:c7:02:90:c9:f9:9f:89:06:53:45:
fa:81:36:99:3f:5b:8e:4b:1c:d3:35:db:b7:4a:bc:77:4c:66:
0c:86:56:55:13:11:ed:0d:5a:11:e9:1e:ae:6e:32:20:84:10:
c0:4d:b3:c2:73:bb:73:f9:19:c9:da:b9:f9:85:79:09:a4:16:
3b:32:8b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 17:11:34 2026 by rpki-client