Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/pNFr4b85vww5ZS3dNvzylaDFG3Y.roa
File: pNFr4b85vww5ZS3dNvzylaDFG3Y.roa (raw, json)
Hash identifier: x5NX8uJ9QcK2ETYmUC6TCth5q+AySew2+CBHT5LVUPw=
Subject key identifier: A4:D1:6B:E1:BF:39:BF:0C:39:65:2D:DD:36:FC:F2:95:A0:C5:1B:76
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A015795678280FDF1CC5D39FBD09AD106F
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/pNFr4b85vww5ZS3dNvzylaDFG3Y.roa
Signing time: Tue 18 Aug 2026 15:24:28 +0000
ROA not before: Tue 18 Aug 2026 15:24:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219283
IP address blocks: 2a06:9801:1300::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:15:79:56:78:28:0f:df:1c:c5:d3:9f:bd:09:ad:10:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Aug 18 15:24:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a4d16be1bf39bf0c39652ddd36fcf295a0c51b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:52:16:10:1e:88:7b:54:d3:62:7c:e6:08:23:
e4:7b:b0:c7:39:15:55:5d:0d:28:24:24:94:c4:b3:
3e:de:e6:3e:f9:77:56:c9:50:aa:e0:f6:28:ba:55:
62:d8:95:fb:fc:12:55:ba:4b:3d:9d:f4:db:98:68:
d3:0d:89:0b:41:59:1c:98:72:95:69:17:af:5a:c2:
30:a2:ac:c0:8b:40:e1:f2:b5:b8:66:b2:ec:08:b0:
05:e2:fb:6e:24:c9:51:b3:a7:36:64:36:05:95:ea:
b3:5e:dc:56:8b:1f:83:8a:5d:9e:1e:73:9d:f1:d3:
74:98:7c:ef:6e:48:df:f9:fb:0d:8a:f8:15:0a:fd:
91:9f:c2:42:94:c9:51:02:01:b8:5e:ee:33:4e:9a:
a5:26:a8:83:38:88:c3:1b:47:9d:07:3d:30:67:cf:
11:7d:10:e7:09:f5:c8:f7:ac:98:8c:27:fa:b6:b2:
4d:0c:47:a9:23:30:34:3a:9a:cd:d3:9d:d5:44:25:
1c:01:88:a4:1b:f6:d3:52:bf:cb:eb:e6:f9:31:e2:
aa:4f:46:be:75:f8:42:f0:5a:da:51:dc:51:5e:c5:
22:6c:db:5a:e3:84:b5:a7:38:4d:b6:39:03:72:d2:
2f:d1:1f:1e:80:5b:8a:dd:5a:26:69:1b:2f:39:9e:
98:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D1:6B:E1:BF:39:BF:0C:39:65:2D:DD:36:FC:F2:95:A0:C5:1B:76
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/pNFr4b85vww5ZS3dNvzylaDFG3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:1300::/40
Signature Algorithm: sha256WithRSAEncryption
26:6b:2a:a6:b2:7b:fd:9a:7a:b9:b4:31:76:95:7e:30:d0:0a:
48:a7:68:36:6e:75:3c:56:4e:7f:e2:59:89:35:ea:1b:09:33:
80:8a:55:d4:fd:0d:06:99:9c:66:6a:30:d8:09:c0:89:62:85:
45:aa:88:3c:07:70:b4:6b:8d:2e:90:57:6d:a3:eb:a8:0d:bd:
89:ba:4c:57:04:6c:b3:34:92:9f:c4:6e:6c:27:9d:00:83:0e:
3a:4f:dc:1e:66:c6:8e:c3:ce:0c:88:3d:22:d5:d5:c9:de:7b:
ab:50:48:a5:28:9c:87:30:63:03:05:6c:1e:41:05:19:c0:b1:
d9:63:8f:4e:2f:a9:5c:47:81:2f:e0:a3:c6:c4:31:92:89:b7:
23:3f:18:44:61:5c:b4:64:90:53:8a:78:00:00:5e:b6:30:37:
60:85:20:59:4c:fc:6c:ff:bd:63:a0:30:c0:b9:28:55:6c:57:
12:2e:11:b8:1a:a1:fb:55:ee:20:2d:8f:87:03:36:1f:fe:c8:
81:cc:49:b7:a1:50:d3:d5:9d:c8:98:01:8d:02:8e:a0:f4:17:
e4:a3:6c:61:cd:e8:07:00:c8:e0:0d:2d:06:fc:23:92:d8:ec:
c6:f6:7a:d6:a5:23:25:1f:b8:c0:1e:b8:3b:f1:af:28:2b:1f:
18:a6:9d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:33:05 2026 by rpki-client