Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/fvdy7J4RMKlbYzzG8OgnksjvFow.roa
File: fvdy7J4RMKlbYzzG8OgnksjvFow.roa (raw, json)
Hash identifier: MTFXrU2yCf08YiG1IcXfPc4A8VdgrEWi8/Ny7wV/pK8=
Subject key identifier: 7E:F7:72:EC:9E:11:30:A9:5B:63:3C:C6:F0:E8:27:92:C8:EF:16:8C
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019DF590047E4F81165B70F770DD56E7149B
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/fvdy7J4RMKlbYzzG8OgnksjvFow.roa
Signing time: Tue 05 May 2026 00:35:49 +0000
ROA not before: Tue 05 May 2026 00:35:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200283
IP address blocks: 2a06:9801:c8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 13:57:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f5:90:04:7e:4f:81:16:5b:70:f7:70:dd:56:e7:14:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: May 5 00:35:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7ef772ec9e1130a95b633cc6f0e82792c8ef168c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:32:6f:84:e2:b4:af:d9:f1:79:fe:ab:9b:b4:
5e:af:2e:d5:99:38:c7:62:bb:5c:c9:43:e1:ac:6d:
09:d6:16:57:04:a8:3e:c1:ad:2f:0a:e1:7d:6a:4f:
90:4a:99:e1:c5:0c:00:33:9a:2f:1b:88:23:5c:13:
42:4d:1d:57:0c:b1:25:fa:48:a2:30:38:d4:a0:a2:
29:b8:a2:56:63:1f:44:02:29:5c:d1:13:4c:42:99:
01:03:fd:bb:9a:f7:40:4a:1b:21:95:08:51:0e:da:
f0:13:bd:71:b8:a9:c9:b8:78:a6:6c:45:33:13:fe:
e0:6d:9f:a0:01:28:e0:fe:a7:39:f9:90:95:fe:0a:
0f:5b:6c:6f:2b:f9:30:b2:d7:9f:45:6d:56:0b:4e:
86:ed:93:6e:47:2b:53:d3:99:e2:3d:cb:9b:42:ab:
dc:7e:40:cd:7f:a4:17:d5:ce:72:32:9c:f9:01:a0:
ef:43:52:ae:eb:31:a6:c0:91:9c:b7:08:67:bb:f3:
e1:77:5a:4b:e1:1c:47:e4:65:aa:78:15:80:da:60:
a9:48:f1:6e:40:af:ce:81:1b:40:83:aa:51:1a:83:
e1:55:d6:3f:20:e0:80:9d:cf:a3:90:4d:28:59:f7:
d7:43:bb:bf:66:dc:e4:44:f7:0c:93:0d:a7:c5:14:
52:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F7:72:EC:9E:11:30:A9:5B:63:3C:C6:F0:E8:27:92:C8:EF:16:8C
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/fvdy7J4RMKlbYzzG8OgnksjvFow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:c8::/48
Signature Algorithm: sha256WithRSAEncryption
37:16:10:74:dd:f2:db:b2:c4:e0:09:c6:99:8d:01:48:e0:09:
e3:87:35:2b:18:93:94:cc:98:74:3e:77:c1:cc:1e:e4:3b:2e:
02:f7:99:a1:56:70:39:10:73:12:56:7e:90:4d:86:35:5c:7e:
d1:c3:63:65:3f:00:78:85:af:90:f5:73:46:09:1b:b4:10:31:
78:2a:4b:8e:f5:bc:d8:38:11:d4:d2:ba:99:39:d5:55:4c:6d:
cc:63:bd:ea:b7:db:2b:4c:fb:f8:45:2f:27:17:ed:20:5e:8f:
6d:fd:03:b7:0b:81:1f:47:13:91:cb:b2:12:d7:47:36:9c:37:
a6:db:26:38:bd:78:ae:d3:9a:ee:aa:57:b9:5f:9c:c3:63:5e:
ec:7d:89:c7:4a:9f:f0:d2:0e:7f:b4:36:94:db:8b:e0:c5:3f:
8a:95:c2:8d:14:3a:ff:a1:d9:f2:a4:1f:31:0a:18:28:95:3d:
14:14:4c:7c:80:27:a3:71:6e:97:ec:7c:05:15:28:39:d9:24:
2d:13:0f:5f:29:a9:ed:cc:c8:48:eb:d7:f9:4f:6c:b4:dd:03:
77:de:1a:c3:40:04:a7:0f:89:f9:ff:ca:4a:5f:89:7c:b5:61:
d7:ee:c3:e1:6d:c7:92:8c:3c:03:36:d5:9c:71:a1:ac:60:73:
90:78:a1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 19:06:10 2026 by rpki-client