Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/on35JdEITK6o4n-Axles307MPsw.roa
File: on35JdEITK6o4n-Axles307MPsw.roa (raw, json)
Hash identifier: Py6Xee7RuBVcX+mpt7IUjY2QcNiq+foAlIm/sdT3vRg=
Subject key identifier: A2:7D:F9:25:D1:08:4C:AE:A8:E2:7F:80:C6:57:AC:DF:4E:CC:3E:CC
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019C4F81E73CC47E48E5E1441CCA7DCE120B
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/on35JdEITK6o4n-Axles307MPsw.roa
Signing time: Thu 12 Feb 2026 01:40:39 +0000
ROA not before: Thu 12 Feb 2026 01:40:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201245
IP address blocks: 2a06:9801:2b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 25 Feb 2026 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4f:81:e7:3c:c4:7e:48:e5:e1:44:1c:ca:7d:ce:12:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Feb 12 01:40:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a27df925d1084caea8e27f80c657acdf4ecc3ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:78:47:0d:58:22:5c:b0:60:96:48:ec:42:32:
da:10:68:51:01:37:89:bb:e3:e2:5d:4f:37:1d:59:
93:6b:5f:64:ec:c8:54:76:ad:8a:af:43:34:0b:76:
81:c7:e3:08:f1:61:99:23:60:55:79:19:28:68:2e:
08:1a:2c:59:d2:7a:52:1b:26:12:17:ad:36:ec:80:
82:f9:97:0f:04:fd:69:bc:12:01:c2:d5:55:c9:f1:
17:c0:db:c3:e8:aa:e0:be:19:91:5c:64:f0:e3:34:
f0:86:34:79:65:e4:d6:32:bd:56:79:d9:bf:e6:64:
3e:9a:99:92:fe:2b:25:60:ff:e0:fd:ef:aa:63:95:
f6:f9:ba:7d:60:65:da:4c:20:43:4c:a2:81:e3:16:
0e:7b:0c:62:ad:f2:49:73:11:49:09:fe:54:1a:eb:
37:e6:76:3a:3f:11:ba:e0:1a:d0:bf:98:96:29:20:
3e:cc:9f:56:85:74:9d:ea:e3:4e:60:6f:83:0d:cb:
73:34:84:db:d2:ba:6a:ed:e7:8e:bb:32:6f:5d:0f:
08:b9:ee:3a:9c:50:8a:74:8f:f1:d1:6d:b5:64:67:
55:ff:4f:fc:e9:29:fb:e7:12:95:75:5d:d1:4d:d0:
65:72:bf:ca:96:13:8a:59:f7:ef:bd:a0:c0:85:0c:
99:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:7D:F9:25:D1:08:4C:AE:A8:E2:7F:80:C6:57:AC:DF:4E:CC:3E:CC
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/on35JdEITK6o4n-Axles307MPsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:2b::/48
Signature Algorithm: sha256WithRSAEncryption
8f:bc:6b:37:d3:83:70:07:bd:74:32:87:f9:ce:e1:8c:42:da:
e8:af:0a:04:de:09:04:47:ed:f9:4d:0b:da:3e:8c:6e:db:a8:
17:49:ab:db:3f:13:76:b9:f3:f3:4c:d0:ed:0f:52:95:2b:ee:
3c:10:91:e5:f3:ae:eb:13:ca:fa:97:52:19:35:ae:61:b4:ec:
f1:3e:17:b5:0d:21:1e:75:9a:4d:4a:40:5a:85:a0:74:44:a8:
52:97:1c:7a:71:87:7e:9a:50:62:ee:61:a4:c6:2b:af:b4:90:
6d:95:f2:98:95:a3:8b:60:11:c2:b6:42:66:c4:47:f3:ff:65:
cb:17:56:07:6b:12:4a:c6:1f:d5:56:1c:27:58:36:3e:13:f1:
aa:03:b0:b3:2a:e3:01:dd:b2:a4:63:24:5f:93:8e:40:47:69:
30:c5:7a:34:6e:5f:71:f2:9f:47:a2:bb:26:cf:54:4b:35:68:
c7:fc:cc:dc:6d:63:ed:d4:df:af:61:00:65:e7:3a:d7:fe:48:
b8:8d:2b:1f:70:b8:a5:c7:17:59:9c:aa:80:44:f0:09:18:4b:
b9:21:db:16:21:7c:2f:0f:fa:9b:b6:ec:02:7e:2d:51:56:7f:
b9:c4:2f:2b:66:29:7a:9b:5c:63:e2:e6:f8:31:2e:cd:98:a5:
b9:52:b6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 24 18:52:32 2026 by rpki-client