Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/qnmlgmQcMV5HnRPF8g4N2GctkD0.roa
File: qnmlgmQcMV5HnRPF8g4N2GctkD0.roa (raw, json)
Hash identifier: 9BH8I+NWhvHG/4aRq4fBFGvs9SA0QhVR3ahzjmTv0p8=
Subject key identifier: AA:79:A5:82:64:1C:31:5E:47:9D:13:C5:F2:0E:0D:D8:67:2D:90:3D
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019FAABF12B55A599C09A950B093112147C4
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/qnmlgmQcMV5HnRPF8g4N2GctkD0.roa
Signing time: Tue 28 Jul 2026 22:01:16 +0000
ROA not before: Tue 28 Jul 2026 22:01:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219241
IP address blocks: 2a06:9801:7f8::/48 maxlen: 48
2a06:9801:e00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:bf:12:b5:5a:59:9c:09:a9:50:b0:93:11:21:47:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jul 28 22:01:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa79a582641c315e479d13c5f20e0dd8672d903d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:57:7d:53:95:f4:ff:a5:85:ba:40:62:4c:94:
87:85:3a:96:ab:e8:97:33:27:bd:f1:36:f3:ed:a8:
9e:3d:96:fd:f6:16:a3:cb:a9:dc:b8:dc:d4:a1:5e:
7a:63:c4:7c:4c:ec:1b:35:ed:bf:e2:f8:f2:bc:f7:
f1:a4:a9:7d:48:44:3c:4b:15:be:77:a6:f3:b5:8a:
cd:2d:d7:72:10:35:16:cc:af:af:69:c4:07:8b:58:
28:ca:ed:19:06:e0:62:cb:43:47:32:38:78:72:b2:
9b:da:30:5d:2e:12:a4:be:19:2b:46:55:1e:16:51:
5c:01:4f:a9:04:b6:04:8d:6e:cb:9d:a2:38:82:01:
8d:c6:32:e8:a3:3e:d6:dc:1d:c6:42:3e:3b:b2:05:
21:82:8c:38:d7:23:0e:d8:81:0e:6b:8e:b0:e0:33:
44:ca:aa:d5:af:77:3b:b8:08:58:ed:97:46:30:aa:
c5:a1:38:2f:f2:a2:71:bd:71:16:ca:2a:81:e1:70:
65:60:eb:99:58:b4:4d:b8:70:51:e8:a7:ff:73:78:
d1:94:a5:b3:8d:35:c9:b0:3b:38:34:df:8c:08:ea:
00:80:2b:22:c1:fb:2c:02:cb:46:3e:46:12:6a:f1:
26:bb:f2:68:c6:55:3e:80:b9:e9:80:16:b0:2e:42:
5e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:79:A5:82:64:1C:31:5E:47:9D:13:C5:F2:0E:0D:D8:67:2D:90:3D
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/qnmlgmQcMV5HnRPF8g4N2GctkD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:7f8::/48
2a06:9801:e00::/40
Signature Algorithm: sha256WithRSAEncryption
39:d2:f2:26:aa:33:f5:03:52:9a:b4:e0:2d:b3:9c:7b:20:25:
36:4f:f8:4d:d7:a4:d3:fc:fb:eb:07:33:bc:fe:9a:4a:64:64:
77:2c:b6:46:28:85:f3:28:fb:6a:cb:a6:40:14:e1:8b:a2:80:
5c:a5:2c:e2:d0:56:4d:1e:f0:5d:37:66:fe:58:aa:cb:fb:41:
4d:42:6c:8a:f0:8d:82:5e:76:61:70:09:ea:d1:ad:3d:02:93:
9d:39:9c:ed:80:db:b6:c1:e0:7a:45:13:4c:78:39:4d:1d:56:
da:44:08:bf:41:ab:af:1c:9b:71:f5:b3:e3:b7:90:4f:37:c1:
2c:c2:70:61:0d:e5:c5:c8:33:52:aa:e2:bf:87:3e:15:a4:d4:
65:76:54:60:e4:45:b2:4e:5e:08:23:30:df:44:7e:93:64:0a:
7f:2d:34:98:71:a7:82:1f:60:7c:d0:da:0d:38:73:3f:29:de:
39:22:0c:17:bd:fe:a5:e3:23:43:35:44:8d:f8:18:0e:40:9f:
75:30:28:c5:18:43:95:9a:4e:5a:3f:6f:98:3b:cb:ab:7d:26:
b9:b4:d8:66:81:d1:ec:4d:02:cd:b0:af:70:e7:f8:b3:c3:37:
3a:95:6a:b2:65:34:47:01:74:d6:25:c3:03:00:6c:d6:d7:37:
0d:5b:e0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 17:11:46 2026 by rpki-client