Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/mG5cZ1f-qJdn7Mbc14pxlx7eEd8.roa
File: mG5cZ1f-qJdn7Mbc14pxlx7eEd8.roa (raw, json)
Hash identifier: NWvoaAX2G1rvgHseXgCtreUbSWRlJrinMQUiNaEdfxk=
Subject key identifier: 98:6E:5C:67:57:FE:A8:97:67:EC:C6:DC:D7:8A:71:97:1E:DE:11:DF
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019FB300B7D655B55018D11B8E66B3A662DE
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/mG5cZ1f-qJdn7Mbc14pxlx7eEd8.roa
Signing time: Thu 30 Jul 2026 12:29:56 +0000
ROA not before: Thu 30 Jul 2026 12:29:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205298
IP address blocks: 2a06:9801:f30::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b3:00:b7:d6:55:b5:50:18:d1:1b:8e:66:b3:a6:62:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jul 30 12:29:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=986e5c6757fea89767ecc6dcd78a71971ede11df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d4:ca:ca:63:f1:48:0d:f6:42:a6:b4:98:3c:
ca:a2:34:d6:32:bf:1f:60:21:ee:69:be:c2:20:2e:
56:49:bb:f4:68:5c:f2:b7:b0:ee:cb:29:ee:cf:34:
08:24:d3:5c:c3:c6:97:8e:a0:35:d6:ba:ce:70:1f:
52:f0:66:df:a6:c4:e9:03:82:d0:4f:30:c9:43:17:
15:1f:22:53:59:ea:5b:a8:29:d5:35:5b:fc:2a:70:
cb:d6:da:60:9f:bd:35:da:b2:a8:f9:3e:52:8e:f6:
00:7e:9a:6f:cb:f7:43:5b:a3:63:24:9e:c5:15:b0:
a6:02:d2:e3:9c:6c:05:34:bc:ba:ab:c8:bd:cf:96:
c5:8e:4e:bd:dc:6f:10:44:69:38:b4:13:0b:67:b5:
f3:20:b6:d6:c7:44:f2:15:31:22:b7:e4:32:93:67:
80:ea:4a:05:01:2f:69:ff:cf:89:ca:62:cf:a8:f0:
44:1e:5d:ad:35:53:1c:ac:8d:e2:46:46:87:18:19:
5c:33:55:72:35:f4:e3:9b:30:36:5d:b5:61:ec:2d:
79:1d:88:62:7c:ca:e3:be:b6:86:f0:83:4f:21:3e:
9f:ab:0e:5c:bb:27:80:96:a6:ca:d8:87:c1:a6:20:
0e:44:12:f2:ca:ae:7c:f8:48:9f:31:ba:5d:74:bd:
ad:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:6E:5C:67:57:FE:A8:97:67:EC:C6:DC:D7:8A:71:97:1E:DE:11:DF
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/mG5cZ1f-qJdn7Mbc14pxlx7eEd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:f30::/44
Signature Algorithm: sha256WithRSAEncryption
94:a1:2b:e2:fb:32:a7:2e:8e:20:1a:55:32:70:34:dd:95:5d:
b5:d2:9a:cc:c6:59:ce:f0:a8:5c:0e:a1:1e:47:f9:af:32:8b:
1a:8c:d7:66:25:fe:9b:da:aa:9c:c9:c2:08:e8:80:c8:91:54:
f0:86:33:28:a5:4c:f2:5f:55:75:4e:e5:54:1f:c4:03:9f:c8:
6b:b2:df:63:ac:fa:c4:40:6a:3d:c1:ec:c7:cc:1a:76:77:62:
ae:8e:b9:5b:8d:ab:73:12:f6:f7:fa:1a:2a:0f:af:30:e9:f7:
17:af:c9:1b:e9:fa:5d:a0:64:1e:c6:6e:3f:14:af:71:81:07:
7c:0e:bf:e0:bb:b3:a2:61:1c:14:ba:bb:bd:13:54:ba:f9:39:
ba:d4:16:d6:eb:be:27:50:df:d4:a0:e5:84:d0:d0:f3:ba:b4:
31:32:30:e1:13:de:55:93:eb:06:c5:a7:55:48:d9:d5:d4:0f:
a8:a0:24:04:da:a6:0b:a7:5f:95:ff:3d:fc:56:c5:cb:d0:85:
41:4f:39:a8:c0:57:d9:c8:1c:c0:e9:55:34:7a:f1:53:82:d4:
20:8a:03:9a:6c:d4:3b:2f:41:07:9a:5b:cb:6a:48:3c:b7:e4:
21:3a:7c:77:d6:4a:77:c1:7a:0a:41:c5:7d:a2:b7:69:28:7a:
91:72:77:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 17:11:37 2026 by rpki-client