Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/jqDZWz7ErA9rdqpiRZ7-i_PT8GA.roa
File: jqDZWz7ErA9rdqpiRZ7-i_PT8GA.roa (raw, json)
Hash identifier: qocshc5mkMmpehwLEA/veWKbD7RhQtFnFs160zfFuLw=
Subject key identifier: 8E:A0:D9:5B:3E:C4:AC:0F:6B:76:AA:62:45:9E:FE:8B:F3:D3:F0:60
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019CD57BDFF069BB05F9C1A0CFD0B4045C18
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/jqDZWz7ErA9rdqpiRZ7-i_PT8GA.roa
Signing time: Tue 10 Mar 2026 02:03:11 +0000
ROA not before: Tue 10 Mar 2026 02:03:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 2a06:9801:214::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d5:7b:df:f0:69:bb:05:f9:c1:a0:cf:d0:b4:04:5c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Mar 10 02:03:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ea0d95b3ec4ac0f6b76aa62459efe8bf3d3f060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:dd:fd:88:08:60:70:8f:5a:ff:f7:10:a9:d0:
ff:4a:44:b6:4b:df:06:f1:ff:e6:29:ce:cd:30:a1:
79:cf:fe:0c:d0:a8:cd:ec:38:8e:55:54:16:6e:77:
29:68:00:d5:e4:13:d1:24:4d:f4:f9:73:f5:55:33:
af:d4:d6:32:0d:b3:c3:40:08:a5:40:b6:26:ed:a0:
26:6f:f9:6e:13:01:d4:a7:f9:53:bb:08:b1:31:e0:
48:8d:d7:0f:93:ca:87:a4:89:c6:fd:c5:7d:e7:9c:
d7:32:29:73:6f:d4:74:9c:ae:fc:24:fb:6b:ca:cd:
d9:2f:8c:00:b2:03:ab:b3:4b:9c:15:8c:35:5b:85:
0e:af:35:3d:f7:c7:c3:85:20:69:4a:a4:61:c2:0c:
e8:b8:cf:71:b9:af:ba:9b:36:5b:85:cb:e0:09:72:
8b:0f:55:37:6f:8d:55:31:9c:a6:24:36:73:b9:ca:
d0:1c:c1:4f:0a:d3:b3:59:d4:46:aa:9d:ea:8b:bb:
c4:50:ea:0a:3d:28:ef:79:67:f1:67:5e:e6:a7:9f:
a1:71:1c:2c:37:67:da:e0:41:77:0c:46:9d:2a:3c:
91:c4:8f:ec:71:10:86:4c:a8:b9:fa:8b:c1:e2:04:
f5:c5:8a:58:7e:01:9e:33:04:83:6f:28:00:76:c1:
06:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A0:D9:5B:3E:C4:AC:0F:6B:76:AA:62:45:9E:FE:8B:F3:D3:F0:60
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/jqDZWz7ErA9rdqpiRZ7-i_PT8GA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:214::/48
Signature Algorithm: sha256WithRSAEncryption
32:46:08:69:a4:79:0a:97:6e:1f:2c:49:d9:57:aa:ec:41:ee:
e9:af:1f:8b:a8:e4:d5:d6:a9:e9:13:92:a0:8e:82:e2:26:1d:
3d:63:7c:93:8e:04:a8:19:5f:7a:bf:dc:87:ab:96:c5:72:54:
9a:50:b2:86:86:9d:39:e5:16:89:6d:e6:41:4b:17:c6:8d:2b:
0d:e9:b9:e8:97:99:85:b0:ca:b3:8f:28:90:da:da:24:0c:74:
33:76:06:ff:e3:a7:61:e0:34:6f:d9:b4:57:59:e9:31:ef:03:
d4:4d:d2:29:99:4a:87:a2:b2:98:12:84:35:d6:7e:8d:bb:a7:
b9:ff:01:70:45:de:ae:c2:fb:93:18:d4:c3:b4:d7:c1:4d:fc:
9a:51:59:8a:c5:09:98:81:96:6f:98:0e:3b:b8:6d:6b:7a:e7:
c9:c4:ba:1f:49:48:34:11:e7:8d:c7:d6:4d:91:fc:9f:a5:63:
cc:49:e4:5a:58:f1:cf:0e:99:8b:fa:58:a5:83:9d:dd:1a:2b:
d7:f1:69:aa:c2:58:bd:5d:11:da:82:21:8f:ff:98:88:9d:cc:
89:8c:16:7d:a5:50:cb:35:3b:3c:45:02:6b:69:25:69:ed:c4:
dd:d9:7a:49:94:4f:dc:8a:65:74:83:77:1b:36:16:e7:7a:13:
ba:db:8a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 02:17:59 2026 by rpki-client