Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/pQ3FTNCrG1WpGioHBq16aYW9XNk.roa
File: pQ3FTNCrG1WpGioHBq16aYW9XNk.roa (raw, json)
Hash identifier: Op1SgLXom804EpkHsr/d8MRz3LJKIZuOAuPGbLsOPJo=
Subject key identifier: A5:0D:C5:4C:D0:AB:1B:55:A9:1A:2A:07:06:AD:7A:69:85:BD:5C:D9
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019DF56E24A8D40149462CB108F57C3CEBFF
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/pQ3FTNCrG1WpGioHBq16aYW9XNk.roa
Signing time: Mon 04 May 2026 23:58:49 +0000
ROA not before: Mon 04 May 2026 23:58:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209735
IP address blocks: 2a06:9807::/48 maxlen: 48
2a06:9807:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f5:6e:24:a8:d4:01:49:46:2c:b1:08:f5:7c:3c:eb:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: May 4 23:58:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a50dc54cd0ab1b55a91a2a0706ad7a6985bd5cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:81:c9:89:96:dc:47:bd:6a:00:61:a0:bb:51:
90:37:76:c9:41:c2:3e:50:35:87:44:e7:43:ba:10:
e3:14:e2:51:db:ad:3b:2a:ad:c1:d3:49:07:11:0f:
d6:1d:a6:6c:65:0f:02:1c:64:79:f6:86:a4:e3:ee:
62:27:e9:ad:75:27:5a:d9:d5:4e:7d:57:7a:50:71:
4b:2f:07:84:70:8a:7d:67:79:08:26:b2:f6:49:4e:
e8:a2:ed:0b:c0:eb:b3:07:b3:3b:3f:16:f1:7b:28:
65:9c:97:84:c9:85:b5:cc:bf:f0:48:13:ae:f1:82:
e3:ff:68:bb:46:4f:70:f7:6d:83:ff:3a:3d:ef:67:
79:25:db:41:63:ea:51:4b:7d:7b:72:f3:9b:54:69:
e0:ea:a5:46:e6:07:44:e5:c7:f5:f3:f2:5e:ef:8b:
f9:3b:4b:0d:a0:43:1f:d5:d6:61:ee:6b:ec:89:47:
ed:d7:ff:15:e4:06:57:92:d7:2f:21:12:f7:49:11:
ca:40:79:13:25:0e:76:f8:fe:42:7b:ab:d8:b8:7c:
7b:62:13:f2:67:f7:35:61:0f:ee:ea:d6:97:5a:51:
2d:bf:10:c2:23:a1:03:e2:78:4d:c4:b7:f1:cd:c0:
32:9d:c9:7e:c2:94:6b:4a:ef:1a:15:8c:2b:db:5f:
92:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:0D:C5:4C:D0:AB:1B:55:A9:1A:2A:07:06:AD:7A:69:85:BD:5C:D9
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/pQ3FTNCrG1WpGioHBq16aYW9XNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9807::/47
Signature Algorithm: sha256WithRSAEncryption
17:99:93:ca:61:27:b9:80:e9:94:3b:c3:d8:bc:6a:ee:2f:e5:
36:c9:ff:80:3f:bc:57:1b:bc:55:7a:8f:73:3b:69:68:90:60:
5a:a4:a0:2a:e9:94:79:92:eb:c0:54:f5:de:a0:20:e0:3f:0e:
8a:05:5e:64:01:ab:bb:c8:1b:cf:5b:d1:7d:6a:38:f7:32:ba:
7f:83:18:6f:37:f0:55:22:b7:2a:d9:cd:9e:30:f1:1a:86:00:
bf:dd:c6:cd:3f:a2:e7:7a:4c:55:bf:91:47:f9:5b:2d:2c:64:
25:25:78:be:f7:f1:d9:67:34:b0:b8:99:50:c8:de:f0:05:72:
9a:34:58:f7:f5:8c:4e:4a:98:9d:78:68:81:8d:d4:57:4a:53:
1d:95:97:62:d2:a7:15:75:0b:f0:29:9a:db:0e:a2:5b:e8:b1:
83:70:46:21:1d:aa:ea:2c:e7:9b:ee:57:17:c0:54:a5:18:17:
40:f9:49:5f:a3:62:04:14:52:14:c6:fc:2a:bd:06:85:a2:0d:
97:94:82:f0:0a:c3:20:13:3b:cb:29:9b:39:15:14:fd:61:48:
f5:63:f7:9d:9e:ac:75:2d:c0:d5:d0:cf:35:90:37:81:75:9f:
81:99:a0:56:30:54:c3:8c:08:24:c1:49:7f:d0:d0:2c:d5:5e:
ba:d5:1f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:09:58 2026 by rpki-client