Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/psKoW1b3A8v0CrlmpoVdt6KDq_E.roa
File: psKoW1b3A8v0CrlmpoVdt6KDq_E.roa (raw, json)
Hash identifier: 5ysIESDb1CzhEK7LPQaK4qD1ZYK00FSOnWMXonTR08E=
Subject key identifier: A6:C2:A8:5B:56:F7:03:CB:F4:0A:B9:66:A6:85:5D:B7:A2:83:AB:F1
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A0F75A364D24A7BEED47F3D60A6E08D483
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/psKoW1b3A8v0CrlmpoVdt6KDq_E.roa
Signing time: Thu 01 Oct 2026 12:04:39 +0000
ROA not before: Thu 01 Oct 2026 12:04:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213570
IP address blocks: 2a06:9801:f13::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 09:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:5a:36:4d:24:a7:be:ed:47:f3:d6:0a:6e:08:d4:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Oct 1 12:04:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6c2a85b56f703cbf40ab966a6855db7a283abf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b8:62:50:84:90:e3:c4:6d:5d:d2:fb:12:7b:
d3:e2:66:14:67:28:41:c8:8d:de:d9:c9:d1:32:6c:
12:29:52:c4:09:65:98:0c:e5:1f:b7:ee:21:6d:0c:
78:e8:38:ee:44:bd:f6:98:b9:a1:b5:3b:e1:fc:11:
82:95:3b:b3:6f:cf:29:19:73:34:9f:7e:2a:55:4e:
ab:49:36:e9:d1:d7:fc:d4:d0:f0:a5:1a:6f:4d:ee:
dc:5b:59:3b:e3:78:22:67:4b:d0:3f:82:79:3e:95:
ed:79:02:d0:6a:98:2c:57:be:8f:9a:2a:44:f6:31:
b2:aa:ac:a3:44:fa:a5:02:9b:9a:15:3d:72:04:d1:
fd:6e:5d:d7:1c:e0:23:4e:b7:39:b9:02:02:48:41:
ae:35:fa:34:f0:54:b1:ed:d3:0c:a6:75:0f:1f:f1:
a7:40:bd:bd:58:a2:8b:a9:63:fb:41:e5:86:7e:19:
c5:83:d6:8b:93:86:cd:53:2d:63:20:32:fe:ff:9d:
43:04:36:3b:7f:b6:d9:a5:20:c2:d7:86:f0:20:f9:
66:ff:89:59:42:1d:9d:fd:5d:4d:c5:79:84:60:bc:
10:b3:ba:dd:f5:df:66:c0:31:6f:23:ad:8c:e5:13:
af:b2:ef:0c:bd:ed:a0:66:08:96:c6:42:34:5d:96:
7e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C2:A8:5B:56:F7:03:CB:F4:0A:B9:66:A6:85:5D:B7:A2:83:AB:F1
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/psKoW1b3A8v0CrlmpoVdt6KDq_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:f13::/48
Signature Algorithm: sha256WithRSAEncryption
93:d0:94:43:e4:6b:df:a3:08:f6:50:26:82:8c:22:c6:50:80:
02:db:12:02:27:f6:67:23:79:6e:5b:51:e0:ef:b5:ff:4b:59:
b3:c5:17:59:2e:1c:da:30:fc:f8:47:94:1e:be:c2:9d:d2:c4:
4a:3a:3d:c1:1b:f8:7d:5a:90:65:7e:18:c3:3d:96:4c:9f:a5:
57:cb:77:1d:2d:a0:87:d8:58:5d:a9:b0:a3:2a:0a:92:8d:8d:
c4:4c:4d:97:7f:44:b9:86:d3:26:84:14:17:64:66:85:40:97:
c4:d5:d1:a6:b4:83:35:aa:1b:80:46:40:44:b3:89:1d:f8:da:
2b:ae:65:2b:1f:92:f1:b8:59:23:7e:f1:14:50:a8:a4:11:50:
89:f5:ad:76:cc:e5:57:3a:7d:48:3d:b7:76:fe:fa:0f:42:98:
7d:8a:50:11:3a:91:1f:35:19:f8:e6:f2:1d:79:bb:bf:66:60:
34:8a:15:c5:30:b6:70:55:0d:d0:55:c2:2b:a2:4d:76:8f:ba:
6b:c2:50:2a:e6:82:e8:18:5f:ca:45:63:3f:b4:46:64:0e:4a:
99:24:cf:f1:fd:8d:3d:71:b6:58:bb:d5:7c:7a:25:b9:cf:b7:
e7:b0:f9:fe:d6:89:d8:2e:61:0d:46:7d:4b:e9:90:44:ad:99:
a7:83:94:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 14:50:30 2026 by rpki-client