Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/piE2qIm_9zXQTA6HRUeylwmADIc.roa
File: piE2qIm_9zXQTA6HRUeylwmADIc.roa (raw, json)
Hash identifier: qcS3/0EdVVQ1YVIYjORoIY2su6b9E/YH0w48u9EJs9o=
Subject key identifier: A6:21:36:A8:89:BF:F7:35:D0:4C:0E:87:45:47:B2:97:09:80:0C:87
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019C4BF77572A686DBBC0F1DC6310D9EC128
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/piE2qIm_9zXQTA6HRUeylwmADIc.roa
Signing time: Wed 11 Feb 2026 09:10:34 +0000
ROA not before: Wed 11 Feb 2026 09:10:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201392
IP address blocks: 2a06:9801:17::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 24 Feb 2026 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4b:f7:75:72:a6:86:db:bc:0f:1d:c6:31:0d:9e:c1:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Feb 11 09:10:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a62136a889bff735d04c0e874547b29709800c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7d:4d:e6:18:0e:ff:12:a4:5c:3f:94:73:77:
41:e6:d1:85:6e:ca:98:54:3c:4d:61:4a:80:6c:59:
3a:03:4d:6a:25:8f:d6:5d:79:1c:95:d5:1e:af:1d:
cd:c5:15:b0:af:f9:9e:40:01:60:2a:b2:a5:58:3f:
9a:db:f3:22:2c:d2:da:c4:3c:75:67:2f:41:0c:43:
03:be:57:35:ca:e6:c1:4f:b5:81:34:9f:fc:bc:eb:
aa:f4:38:21:ee:32:13:d1:31:1d:e6:01:ca:22:23:
94:76:d0:46:9e:08:de:27:b5:a1:2d:c0:a7:2d:87:
4c:3f:67:0d:67:72:41:3b:aa:3b:27:6d:eb:19:97:
c5:bc:30:68:a7:5e:c4:60:aa:b2:43:94:ae:e7:8f:
39:81:a2:4a:da:a2:6e:9f:38:8c:f8:38:c2:b3:fb:
89:7c:59:e5:b9:20:62:95:0a:ad:4a:33:cc:24:86:
3c:1f:cb:14:c6:39:20:82:3f:1f:0e:f2:42:28:89:
52:b4:2f:7e:d3:6c:c1:78:0d:41:31:91:08:9c:31:
10:7c:7a:2c:c1:21:b5:6c:50:d1:1a:f9:81:f6:8d:
35:a9:3d:67:63:b4:a4:d9:de:fb:c8:28:a8:2e:9c:
e4:70:19:e8:c7:46:49:ad:69:dd:1e:93:98:0c:ea:
91:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:21:36:A8:89:BF:F7:35:D0:4C:0E:87:45:47:B2:97:09:80:0C:87
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/piE2qIm_9zXQTA6HRUeylwmADIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:17::/48
Signature Algorithm: sha256WithRSAEncryption
6c:d4:0f:78:d9:c0:23:a1:37:63:e6:d7:50:e4:81:12:77:26:
7b:42:bc:f9:8d:42:b3:e3:ef:cc:17:19:fe:fd:e3:f3:53:7e:
73:c5:ae:62:38:e2:08:ad:de:14:21:75:6a:21:ae:12:be:55:
a5:21:6b:0b:42:19:ca:4d:85:26:ce:87:f2:fa:b2:65:24:fc:
d1:fd:52:7b:01:80:a6:fc:31:55:57:07:14:ce:9f:52:ff:8a:
1f:4e:a4:e4:56:79:ef:4f:e8:d1:c2:f4:f3:e4:10:3a:63:fd:
38:87:f2:9f:43:10:eb:7c:24:67:13:36:d6:15:c0:80:18:29:
7a:f8:da:97:2f:cf:18:6e:a1:ed:78:41:21:bb:74:93:78:25:
6b:6e:aa:a9:e0:90:a0:8b:8f:a1:d7:ff:42:0e:4a:6a:98:5a:
f4:63:ca:18:4b:18:06:38:b4:45:0b:4f:4c:b6:08:65:7e:ca:
8c:df:7a:e4:89:64:dc:8d:4a:a9:26:57:dd:00:99:8d:97:c3:
33:1a:ba:13:e3:7c:d9:c0:7b:65:c8:67:73:bb:ff:5a:0f:43:
99:20:75:69:22:21:8a:08:4c:5b:a8:40:15:e1:dd:af:c2:b4:
2c:8a:2f:ae:2f:37:72:29:db:47:30:bf:08:5d:23:a7:7e:f9:
bc:75:0c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 14:34:15 2026 by rpki-client