Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/pOVozFJrBnUkZFlFJHzAqxLmwE0.roa
File: pOVozFJrBnUkZFlFJHzAqxLmwE0.roa (raw, json)
Hash identifier: QAJnRWTIQpUBY+j6aM4KLWCVNjU12RS8dJdyUYm0rGQ=
Subject key identifier: A4:E5:68:CC:52:6B:06:75:24:64:59:45:24:7C:C0:AB:12:E6:C0:4D
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019FC1EE1F564566B526D513F666BE0CCF6E
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/pOVozFJrBnUkZFlFJHzAqxLmwE0.roa
Signing time: Sun 02 Aug 2026 10:03:56 +0000
ROA not before: Sun 02 Aug 2026 10:03:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 2a06:9801:2b0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c1:ee:1f:56:45:66:b5:26:d5:13:f6:66:be:0c:cf:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Aug 2 10:03:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a4e568cc526b067524645945247cc0ab12e6c04d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ed:a4:06:05:3f:17:e4:e7:a3:1b:ea:8e:2d:
37:11:50:60:a5:eb:06:24:19:15:f6:77:40:98:30:
77:23:d9:8b:90:f9:5c:7a:ca:d7:00:c0:70:00:d9:
b0:75:40:63:b3:75:4f:56:67:d0:09:4f:20:a9:4f:
c0:41:11:1e:0e:7b:26:cf:80:12:e3:76:fa:78:67:
3c:2d:59:db:b2:4f:57:1c:f1:14:09:24:c9:dc:08:
00:16:fe:3f:43:5d:d4:e4:19:27:e3:0d:a4:35:7a:
97:49:51:3c:d7:af:c3:ef:f8:84:9c:ae:62:26:4b:
9c:82:4a:57:1a:80:96:e2:2b:4f:fd:4c:45:7d:19:
90:ed:b9:b6:74:e8:4b:4a:24:c1:6a:9d:8a:fe:5d:
dc:72:1f:e0:e3:c3:0d:77:c1:ae:4e:af:19:ed:12:
14:d0:67:49:1a:0b:01:f3:1e:06:d1:39:92:3d:2b:
e4:4d:2d:af:86:f3:0b:e5:33:23:e0:f0:1e:8f:81:
20:02:fe:46:6e:c4:9a:bf:66:a7:d6:df:38:e9:a2:
b0:ca:50:c0:32:e0:c2:d8:36:2d:93:f5:cc:26:68:
18:8d:0c:37:0b:f9:88:81:ff:3a:a0:60:ab:93:4e:
45:f2:3a:a7:a3:ca:41:e2:b0:eb:ac:f3:b3:ff:fc:
b2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E5:68:CC:52:6B:06:75:24:64:59:45:24:7C:C0:AB:12:E6:C0:4D
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/pOVozFJrBnUkZFlFJHzAqxLmwE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:2b0::/48
Signature Algorithm: sha256WithRSAEncryption
bb:cb:e5:21:fd:e4:aa:e4:39:65:51:38:10:8f:76:eb:07:6b:
34:6d:bd:92:54:c7:1f:db:a6:64:2f:8f:a7:67:ba:f5:ac:72:
fb:2a:03:7b:2d:f3:37:1a:df:81:f7:cd:1b:9c:d0:db:44:4b:
2e:a2:36:3e:95:da:1f:8d:46:15:a8:cf:59:d7:e7:ca:de:0b:
d2:4d:49:85:8c:74:70:42:bc:0d:0d:eb:6d:43:ef:c7:c1:e0:
89:d0:d9:0c:7c:4d:20:0d:5c:40:f8:08:a4:2d:5a:21:50:cf:
c5:2a:44:4c:de:ce:66:cd:22:37:80:42:81:0a:07:05:e4:3f:
2b:32:5b:e4:0c:26:98:5b:16:8c:f6:94:66:99:b8:ae:bb:f1:
3f:4a:6e:e0:ff:b1:c7:a6:b7:80:f5:f7:d7:07:4c:56:14:b6:
c2:92:6d:28:88:73:92:34:1b:eb:dc:53:70:c0:c4:dc:2c:93:
3d:ff:b1:5f:78:3b:fe:94:25:c4:36:d8:71:e9:0c:65:68:03:
bd:94:78:01:62:82:09:8e:4c:f2:87:3c:a2:ad:b1:be:58:2d:
c5:a2:96:d0:51:b5:d4:d7:41:da:c5:85:8e:50:58:a2:93:f4:
ef:db:d0:2c:43:12:f9:c8:5d:57:28:a8:59:3d:5c:68:d8:92:
fa:73:39:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 17:11:48 2026 by rpki-client