Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/s9If99SKo3YAuBNbLFeEMc7ueps.roa
File: s9If99SKo3YAuBNbLFeEMc7ueps.roa (raw, json)
Hash identifier: kQ7dnP1d7uS7V9xhOG1dC4kM73ltQw19EWaIgPPG/e0=
Subject key identifier: B3:D2:1F:F7:D4:8A:A3:76:00:B8:13:5B:2C:57:84:31:CE:EE:7A:9B
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A10F8992FDAA4D660CA75551F9F0CBC9B2
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/s9If99SKo3YAuBNbLFeEMc7ueps.roa
Signing time: Tue 06 Oct 2026 04:47:16 +0000
ROA not before: Tue 06 Oct 2026 04:47:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31898
IP address blocks: 2a06:9801:741::/48 maxlen: 48
2a06:9801:7d0::/48 maxlen: 48
2a06:9801:ff0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0f:89:92:fd:aa:4d:66:0c:a7:55:51:f9:f0:cb:c9:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Oct 6 04:47:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b3d21ff7d48aa37600b8135b2c578431ceee7a9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:92:03:70:86:e8:e4:de:6e:ca:7a:91:4e:28:
0a:e9:1e:71:91:1b:ce:b5:cf:50:7a:06:26:b7:a0:
c5:8b:8e:a4:97:34:e8:3b:7e:85:b9:f2:71:f8:c4:
51:13:84:22:17:47:23:76:ca:e0:b2:67:e3:5c:42:
c4:8b:4b:97:c0:eb:bb:10:37:3e:85:e0:b3:f9:82:
7a:6e:0f:06:da:4a:78:db:41:c1:ea:bf:66:3b:dc:
6c:9c:9f:80:1b:a0:c1:cf:ad:10:ae:3a:6e:50:99:
46:83:8e:d7:eb:41:dc:05:35:5b:a7:56:63:18:70:
c4:b8:e6:4c:72:9b:c2:44:ae:0b:83:c2:69:08:46:
45:fb:63:c6:0f:50:26:27:d0:ba:2b:8d:58:3f:49:
8e:4a:27:ea:ed:73:d8:db:5a:2d:b8:d1:a5:fd:8a:
79:f0:27:0c:b2:06:17:3e:39:28:af:50:bb:05:d0:
c3:21:71:71:2c:f8:9d:d5:72:e3:59:d2:24:23:94:
52:f3:86:d9:9c:29:91:6f:1d:1a:46:f1:ef:13:b6:
9e:a9:c4:1d:09:7a:e8:36:38:6a:e8:99:f9:b9:e3:
55:bb:c8:13:45:34:80:07:4d:84:21:c0:32:8f:cc:
ad:40:56:77:0f:05:01:8e:ec:6e:46:d0:ce:32:a2:
26:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D2:1F:F7:D4:8A:A3:76:00:B8:13:5B:2C:57:84:31:CE:EE:7A:9B
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/s9If99SKo3YAuBNbLFeEMc7ueps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:741::/48
2a06:9801:7d0::/48
2a06:9801:ff0::/44
Signature Algorithm: sha256WithRSAEncryption
6c:51:cd:ab:d9:0f:29:de:db:67:5e:0f:d6:f0:36:fa:b1:78:
5b:20:06:1e:68:94:55:e2:07:58:58:66:8f:f1:d5:d4:e1:34:
63:1c:e1:72:a8:92:7d:df:35:76:57:69:51:e4:3d:8c:77:ec:
60:61:6c:f2:30:d3:bd:f5:b9:e7:f3:a0:fa:4a:09:7d:c0:09:
4f:5a:62:57:61:c7:bd:7d:fe:29:8d:32:d8:d8:fa:41:01:7d:
bb:5f:cb:1a:71:57:6a:1d:48:37:e6:98:6a:f6:fe:9b:cb:32:
75:9c:36:87:df:79:b2:b2:05:81:42:75:4c:66:73:6d:d8:03:
35:41:20:8c:3b:38:7c:51:ef:2c:d0:89:dd:ad:77:03:c2:73:
67:b8:44:68:3b:ee:d8:b6:be:9e:05:fd:7d:a4:3c:51:26:a4:
ef:bf:1c:51:1b:61:e6:90:01:03:cc:2a:ba:34:67:56:3a:40:
ef:e4:7e:b7:00:e1:05:3a:46:87:84:11:06:67:9c:17:8d:69:
1c:6a:90:79:05:0e:b2:55:8c:42:57:41:ac:c6:e1:f5:e3:73:
e7:9c:2f:32:3e:1e:3a:d1:01:a7:7b:52:96:6c:49:6e:7e:fa:
a9:e8:89:a5:73:73:95:c5:ed:c4:08:d9:36:84:5b:35:0b:30:
7e:89:df:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:47:21 2026 by rpki-client