Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/erIpoGPJCLGiLcOmsZEqTXvgVQI.roa
File: erIpoGPJCLGiLcOmsZEqTXvgVQI.roa (raw, json)
Hash identifier: LrmMYi9D55umCoBDApO74SWUdor07j/d0v/qlADuMtI=
Subject key identifier: 7A:B2:29:A0:63:C9:08:B1:A2:2D:C3:A6:B1:91:2A:4D:7B:E0:55:02
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019D2CFC2F753009EA52DE99704D5BC29E34
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/erIpoGPJCLGiLcOmsZEqTXvgVQI.roa
Signing time: Fri 27 Mar 2026 01:50:17 +0000
ROA not before: Fri 27 Mar 2026 01:50:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 2a06:9801:214::/48 maxlen: 48
2a06:9801:267::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 20:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:fc:2f:75:30:09:ea:52:de:99:70:4d:5b:c2:9e:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Mar 27 01:50:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7ab229a063c908b1a22dc3a6b1912a4d7be05502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:43:c1:15:fe:8d:3f:33:92:47:f1:f4:dd:a2:
1d:e8:07:71:d5:1e:ce:05:f1:3d:e2:e5:07:bb:cb:
d9:59:67:c1:3a:78:5f:f3:39:21:44:02:33:79:ea:
80:0d:05:8a:9e:c2:d2:93:26:0f:46:3a:c7:a2:ca:
ca:22:d4:bb:e6:28:37:bd:f7:cf:84:c2:0d:42:84:
6a:db:47:f8:e1:2a:fa:64:53:32:82:01:b4:41:0f:
de:74:28:ee:69:29:c5:af:76:13:d3:ed:fd:59:57:
ba:b1:48:a4:fb:80:ab:ec:01:0c:15:3b:b1:ac:b9:
89:80:c9:18:c3:6f:f0:04:e4:bb:74:ca:db:e4:b4:
d7:d5:b5:ab:ba:09:10:c4:3a:93:d5:75:cf:fa:5d:
c1:24:84:68:d6:6b:e8:ca:c2:7e:58:7e:41:de:9e:
f1:d1:f1:44:41:4b:24:94:50:23:23:fd:75:44:d2:
34:2b:90:56:50:25:ea:c9:ac:41:50:57:ee:b7:10:
4c:75:9d:f4:b5:62:5c:e0:33:3a:de:0b:96:02:5a:
93:05:11:01:ae:7d:d1:28:3b:39:5c:7a:65:d2:e2:
26:cb:a8:73:44:9a:19:5d:97:73:72:8f:9d:19:f4:
8d:22:f3:24:a5:ef:00:15:f6:7e:2f:ef:be:38:45:
cb:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B2:29:A0:63:C9:08:B1:A2:2D:C3:A6:B1:91:2A:4D:7B:E0:55:02
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/erIpoGPJCLGiLcOmsZEqTXvgVQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:214::/48
2a06:9801:267::/48
Signature Algorithm: sha256WithRSAEncryption
ab:b4:ef:25:8c:7f:ae:99:8b:d3:51:31:14:ab:72:ad:ac:58:
87:a8:d0:d2:3c:59:3a:10:31:56:88:14:01:03:8a:a9:d7:2e:
43:2a:9f:1a:fe:35:68:a6:cf:de:08:a6:48:fa:69:21:93:72:
46:28:13:2b:6d:45:ca:ad:41:3d:9e:b2:55:30:61:54:4b:de:
8b:28:b9:32:dd:1b:9f:6c:79:9f:63:81:0f:0f:92:d0:fa:ab:
00:80:40:c1:78:d8:34:ba:61:2d:68:d4:78:92:91:42:dd:bf:
fd:ed:a5:02:1c:24:cc:3d:2e:d8:10:2c:98:1c:34:0d:a6:e7:
5c:a2:61:f4:6d:14:8f:8e:42:fb:0c:cb:be:82:7d:7f:d1:0c:
45:3d:20:3e:5a:8e:4e:ec:ab:d5:7f:6a:24:f3:06:0e:3d:79:
91:33:7a:eb:c9:7b:15:e2:5c:a4:1d:c9:58:24:44:51:fc:66:
3c:a3:95:b0:2f:11:6a:42:6f:9b:5f:e0:e9:e9:bc:45:96:64:
e5:a3:13:38:68:80:21:d3:7e:b0:74:5a:88:ae:bf:10:61:df:
ac:ab:0a:07:e9:28:f1:d7:45:04:45:66:ab:1c:a8:ed:f9:f5:
74:eb:1a:82:6b:85:46:ae:fe:3b:a1:bc:dd:55:62:5c:9c:12:
f3:35:45:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 06:09:40 2026 by rpki-client