Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/ptctYY3v5w1mcw4yXxCA7m3P1jI.roa
File: ptctYY3v5w1mcw4yXxCA7m3P1jI.roa (raw, json)
Hash identifier: KszIRHDRczzaoLtvzqjWP7Lga8Fy+9Hkc+a7RzoP278=
Subject key identifier: A6:D7:2D:61:8D:EF:E7:0D:66:73:0E:32:5F:10:80:EE:6D:CF:D6:32
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019FEBD1A0FC9BA43A603F76C5FA3409B62D
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/ptctYY3v5w1mcw4yXxCA7m3P1jI.roa
Signing time: Mon 10 Aug 2026 13:16:51 +0000
ROA not before: Mon 10 Aug 2026 13:16:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219248
IP address blocks: 2a06:9801:2f9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:eb:d1:a0:fc:9b:a4:3a:60:3f:76:c5:fa:34:09:b6:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Aug 10 13:16:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6d72d618defe70d66730e325f1080ee6dcfd632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:88:ed:cc:0c:56:54:df:35:c6:8f:07:23:3c:
73:9a:5d:83:11:86:71:e1:75:1d:90:be:8e:b1:d4:
43:88:73:09:4d:6c:dc:90:0e:74:82:3c:ba:6f:16:
d2:d0:71:09:a2:66:14:d5:d1:54:00:f8:9d:b4:58:
2c:ec:b7:05:09:be:c0:96:32:c2:85:40:ee:c7:b9:
a3:bf:72:f6:90:7f:2f:db:31:c1:ed:b2:b6:4a:8c:
3d:46:53:81:99:04:a3:da:00:da:1d:9e:57:ac:9c:
2b:0a:a0:ab:b9:3a:68:c3:d1:de:0f:28:88:72:fb:
d6:12:e3:c9:6b:ac:28:f7:3d:55:fa:1c:b6:8d:91:
de:6d:ad:3a:dc:60:90:f3:88:6a:0b:af:2c:df:01:
13:c9:0f:83:16:de:63:0c:c9:21:ce:45:66:a3:10:
23:e2:15:36:34:7c:17:98:43:28:68:9c:9f:ff:6f:
de:6c:10:5d:b4:7e:0e:13:83:05:d8:0e:49:47:72:
a8:12:21:27:d5:32:d0:6d:17:40:c8:46:13:c7:96:
80:72:76:ca:94:db:34:11:ee:3d:d1:44:7a:a0:fe:
8d:8f:3b:c3:3e:75:0e:91:43:05:b0:0a:07:f5:a6:
b9:d5:cc:53:42:23:10:e4:e1:c7:6f:9a:04:95:01:
73:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D7:2D:61:8D:EF:E7:0D:66:73:0E:32:5F:10:80:EE:6D:CF:D6:32
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/ptctYY3v5w1mcw4yXxCA7m3P1jI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:2f9::/48
Signature Algorithm: sha256WithRSAEncryption
70:d5:60:fb:08:01:c1:dd:15:b8:14:b9:29:e3:5f:62:f8:76:
07:f1:f5:da:19:bd:3e:de:76:f0:38:d7:1a:23:4c:d7:94:d3:
de:51:39:1a:ac:74:5e:4a:b3:70:74:03:f7:cc:bb:33:8f:9e:
47:6d:a1:7f:9c:85:41:27:dd:bb:c6:8d:e0:b7:93:06:b4:e4:
04:d0:78:90:29:42:f7:af:85:81:df:52:f7:d8:b3:45:37:11:
7c:77:09:b4:80:d2:28:f7:09:08:3c:50:e6:8a:73:75:c7:90:
ec:9d:3f:10:0c:ac:aa:bb:62:41:f1:34:97:b8:75:ce:ba:6e:
85:17:04:c1:f9:d0:d7:22:91:e7:b7:31:2c:5f:4f:fb:73:da:
44:1e:e0:05:6e:69:b9:9c:6a:12:49:48:00:ea:53:ba:5b:4d:
83:4f:eb:a4:30:b4:63:f6:ee:38:6f:59:a8:d6:a1:ed:66:62:
38:65:63:cb:93:c8:ba:b6:c2:5c:a0:ed:85:e6:08:28:c7:bd:
9a:d2:d3:08:a1:88:9c:b3:40:b3:aa:bc:b2:55:17:e9:15:cf:
11:96:df:4d:30:4a:f9:7b:a0:6d:99:d3:5f:10:7c:69:25:3a:
37:fa:f3:66:0b:7f:7b:c4:d5:a1:97:d3:80:9a:1e:3b:40:a0:
fb:26:d4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 17:11:31 2026 by rpki-client