Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/dijkAm9icBADCzt14h9gilHC4CU.roa
File: dijkAm9icBADCzt14h9gilHC4CU.roa (raw, json)
Hash identifier: V+P+q+wmh9iqiRTzpmnlrfEUHZb921szy08sRfDJj0g=
Subject key identifier: 76:28:E4:02:6F:62:70:10:03:0B:3B:75:E2:1F:60:8A:51:C2:E0:25
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A1446AD759D1A8A99D4877EA147F9DA539
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/dijkAm9icBADCzt14h9gilHC4CU.roa
Signing time: Fri 16 Oct 2026 11:13:35 +0000
ROA not before: Fri 16 Oct 2026 11:13:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 38826
IP address blocks: 2a06:9801:15bd::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 10:50:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:6a:d7:59:d1:a8:a9:9d:48:77:ea:14:7f:9d:a5:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Oct 16 11:13:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7628e4026f627010030b3b75e21f608a51c2e025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:31:9c:97:a3:bd:e8:06:71:5c:42:af:09:66:
6d:c6:9d:0b:66:4a:31:fd:dd:43:56:e9:11:dd:ac:
90:90:8b:27:5a:2f:38:68:c5:58:70:80:ba:22:ca:
4e:2d:52:81:30:4b:e9:de:d4:7e:08:eb:9d:7e:96:
cc:43:ee:af:ec:58:b9:29:38:f8:ed:46:0d:52:61:
f5:03:a9:ab:8e:da:f8:23:ae:72:81:89:da:9a:4a:
b8:50:07:20:5f:44:4e:75:f9:0c:0d:f3:44:63:9c:
88:8e:17:c7:0f:4b:4a:81:67:f6:a2:cb:3c:21:42:
ba:21:cc:5c:5a:9a:a4:0a:f8:19:e1:1c:27:ec:79:
43:ad:29:86:b2:43:7c:ae:ab:58:fd:90:fe:89:bc:
c4:ad:1e:9c:58:f1:73:e3:16:35:37:06:e6:9c:94:
d8:ce:5c:4a:24:b5:37:ed:60:77:6e:37:91:b2:f5:
24:50:2a:b4:2c:cb:71:25:44:ac:a3:de:a1:0f:da:
dc:63:30:d3:26:53:64:4f:7f:a3:4c:5b:03:ef:7a:
f4:80:a2:34:87:c7:81:82:e0:f1:62:f8:1e:e0:f2:
aa:21:9c:76:47:a4:e4:26:2f:21:a9:6a:d3:4f:50:
c2:9f:76:65:5c:bd:3b:8f:80:b3:02:86:d0:42:c2:
1c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:28:E4:02:6F:62:70:10:03:0B:3B:75:E2:1F:60:8A:51:C2:E0:25
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/dijkAm9icBADCzt14h9gilHC4CU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:15bd::/48
Signature Algorithm: sha256WithRSAEncryption
16:6d:99:85:43:82:db:b1:b2:9c:3d:86:26:18:10:04:7f:b0:
01:7b:0f:fa:1f:9c:98:ef:23:58:2c:46:98:e5:54:00:3f:11:
18:8f:ab:22:a5:ca:b1:7e:78:29:c1:22:5c:87:ad:99:37:63:
5e:b5:dc:9d:ec:76:00:ff:eb:ee:29:65:7e:16:b7:10:70:a6:
73:9b:87:95:f9:b3:eb:00:c1:14:09:dc:8e:77:12:0d:c8:3b:
dc:6e:61:87:ae:e2:ef:d9:07:0b:af:f9:49:0d:2a:0c:eb:cf:
37:d7:22:2b:e8:4d:88:73:e5:51:a5:c7:72:ee:f6:12:78:4b:
1b:16:b9:e4:39:74:b0:b0:7a:71:fe:0a:91:88:36:97:b8:0e:
0c:e5:75:1a:91:ef:1e:41:72:c6:46:9f:c7:4f:3f:88:e2:0d:
c4:e6:c7:d0:96:4d:a4:f0:bf:38:2d:ba:5e:ad:4c:7a:33:2e:
7c:00:52:b1:84:71:dc:13:33:c1:cb:7d:41:f9:3c:e6:92:57:
f5:36:1e:5f:bb:a1:ba:18:73:8d:21:81:6c:76:31:13:db:ad:
19:58:a7:04:1a:a0:6d:dd:e5:5d:0b:30:5e:f5:74:4d:c8:c4:
29:c0:ba:d2:94:70:ce:7d:ab:05:2f:c9:e7:10:1f:21:76:63:
d1:37:8f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:40:57 2026 by rpki-client