Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/dQ1_KhdkHaCD6QMkUQmYCs1wgA0.roa
File: dQ1_KhdkHaCD6QMkUQmYCs1wgA0.roa (raw, json)
Hash identifier: YjxmF561HaQFR8tBr0QKFwH0zq/XOmweqUnnhoLm2iY=
Subject key identifier: 75:0D:7F:2A:17:64:1D:A0:83:E9:03:24:51:09:98:0A:CD:70:80:0D
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019FA89E50C6BC74A996F655285C21B524DA
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/dQ1_KhdkHaCD6QMkUQmYCs1wgA0.roa
Signing time: Tue 28 Jul 2026 12:06:15 +0000
ROA not before: Tue 28 Jul 2026 12:06:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219115
IP address blocks: 2a06:9801:74a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9e:50:c6:bc:74:a9:96:f6:55:28:5c:21:b5:24:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jul 28 12:06:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=750d7f2a17641da083e903245109980acd70800d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:62:09:53:45:a1:25:b9:f1:db:da:02:14:39:
40:2f:ba:55:37:31:f6:f2:42:63:7a:b8:22:8a:f1:
6b:ae:3d:6d:9a:b1:f4:f0:35:57:84:f1:0b:d9:f2:
07:81:66:02:3e:ef:7f:45:3f:5b:4a:63:e4:0d:8d:
83:8d:83:6a:4b:d9:d8:a5:ee:ff:53:ee:13:ed:f6:
b9:5f:cc:68:f7:da:f0:16:1a:44:db:3b:9f:40:2d:
5f:1b:fb:1a:90:8d:c5:d8:d2:ee:b9:9d:6d:94:32:
0e:c6:1b:8d:7b:97:20:32:3f:3e:44:57:1c:95:44:
e3:4c:b5:f5:2b:73:ef:1c:e2:ea:58:b2:b0:95:9a:
52:f5:31:86:de:79:49:fc:29:b7:ba:4c:e9:ba:70:
fd:80:aa:75:d9:eb:70:0b:05:ee:3d:9a:1e:0a:37:
a5:69:b9:9f:22:53:3f:a8:e5:1c:82:4c:31:0a:dd:
07:d6:07:3a:49:68:5e:06:e2:2a:31:52:55:8b:5f:
fa:df:0d:45:44:6b:0e:27:13:df:50:d9:8b:91:58:
88:09:1e:54:bb:26:84:00:c4:22:bc:02:f1:ca:6a:
a0:ed:3a:e4:35:9a:1a:33:ce:11:fd:34:89:e8:46:
0b:1e:e9:a7:3f:ba:a9:4f:f2:e2:82:37:55:23:5d:
39:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:0D:7F:2A:17:64:1D:A0:83:E9:03:24:51:09:98:0A:CD:70:80:0D
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/dQ1_KhdkHaCD6QMkUQmYCs1wgA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:74a::/48
Signature Algorithm: sha256WithRSAEncryption
67:47:0e:ad:c5:58:ea:cf:f6:40:db:fb:7f:e9:df:61:19:82:
25:cd:a7:f1:90:63:d4:49:41:0c:85:7e:50:0d:bd:9a:44:81:
47:7b:2d:ed:7b:a2:ee:45:a2:06:7e:cc:9d:6c:20:2d:39:46:
9d:25:db:ee:53:99:fb:ba:b7:0b:51:c2:63:93:a3:41:3f:82:
c8:77:f9:cf:80:9e:5c:0b:55:eb:a5:2a:2f:54:a4:6f:a8:13:
68:37:4e:4a:f3:d8:68:b0:f3:60:d9:9c:47:ed:93:5a:9c:e2:
c3:5b:be:5c:4e:88:5d:7f:d2:45:e0:5e:11:03:8b:dd:3e:ae:
07:64:45:a7:50:bd:93:bc:a5:8f:b3:fe:e4:94:f8:d8:45:e4:
53:8e:92:ea:14:0b:f1:3c:ed:57:27:e8:d3:e9:7c:53:30:d8:
5b:ef:c6:09:40:5e:1f:db:4a:e1:b5:ce:39:f6:6e:8f:40:43:
dc:6e:1f:03:b2:03:14:8c:8a:89:ff:1a:30:ac:4a:fe:02:91:
ff:29:d9:1f:94:59:71:c8:23:b0:06:3d:c3:88:9c:fe:9b:b5:
71:fd:56:23:9d:d2:1f:c0:1e:dc:07:a1:bb:01:08:e0:89:ff:
21:76:a3:dc:33:01:71:05:9f:5b:5c:ac:07:61:4f:11:94:ec:
0f:5c:96:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 17:11:50 2026 by rpki-client