Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/sysmxa6KgFUp-EowpYaIWmu6t6Q.roa
File: sysmxa6KgFUp-EowpYaIWmu6t6Q.roa (raw, json)
Hash identifier: TcQNL74JtIKaz/kiCFoeBlU479tDE4CcrcqvPmxiOto=
Subject key identifier: B3:2B:26:C5:AE:8A:80:55:29:F8:4A:30:A5:86:88:5A:6B:BA:B7:A4
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A010A90959F15F5C5392A5A0E8D5784741
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/sysmxa6KgFUp-EowpYaIWmu6t6Q.roa
Signing time: Mon 17 Aug 2026 16:58:28 +0000
ROA not before: Mon 17 Aug 2026 16:58:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219310
IP address blocks: 2a06:9801:7d6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:53:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:10:a9:09:59:f1:5f:5c:53:92:a5:a0:e8:d5:78:47:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Aug 17 16:58:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b32b26c5ae8a805529f84a30a586885a6bbab7a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b4:48:e7:0a:dc:74:0c:bd:ea:33:11:db:09:
52:6f:fb:fc:14:15:30:23:b0:51:b9:78:19:47:db:
c4:42:5e:da:5c:6e:61:36:29:52:7d:e7:f9:80:b0:
2a:e4:42:96:b1:47:f8:26:86:a7:da:05:ed:ec:a9:
dd:36:38:0e:30:65:e7:23:a0:61:eb:32:eb:36:ad:
86:37:20:74:cd:1e:ec:32:b7:6b:17:48:f6:51:9b:
de:5f:ef:a4:7a:ae:5b:29:ef:bd:e2:8b:eb:17:37:
33:9d:b3:b0:d2:31:31:5b:52:32:15:c7:75:29:af:
dc:a8:c4:80:50:70:b9:c3:de:b9:04:86:04:80:10:
23:ce:7b:cd:a2:9a:3c:d5:b5:44:c3:a8:c6:9f:f2:
b2:90:45:74:fc:d5:7f:42:85:7f:be:90:48:05:43:
7b:8b:2c:4a:8a:89:44:39:68:48:96:95:9d:83:ed:
13:37:cf:93:1f:61:83:c4:c7:bc:81:1c:0c:f3:14:
e4:67:ed:3f:18:a3:9b:9a:35:a0:b2:b7:3d:25:1f:
20:45:0c:44:66:eb:96:c3:07:e0:eb:41:e8:8a:81:
e0:f7:41:59:52:35:1c:c1:02:45:86:55:18:e2:38:
c9:09:ca:29:10:d0:5f:44:0a:04:69:66:43:cb:46:
a3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:2B:26:C5:AE:8A:80:55:29:F8:4A:30:A5:86:88:5A:6B:BA:B7:A4
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/sysmxa6KgFUp-EowpYaIWmu6t6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:7d6::/48
Signature Algorithm: sha256WithRSAEncryption
66:df:c1:e7:4b:22:ae:2e:41:b6:a5:eb:4a:f1:ec:74:db:f0:
17:ed:63:56:26:b7:da:68:d3:25:24:ce:70:e6:ba:45:bc:c2:
ef:df:5b:f0:65:9e:a6:7b:c3:3e:81:1d:89:82:9b:3b:b0:72:
6c:42:89:d8:04:81:b1:81:bc:2e:60:ba:d7:a0:22:6f:8d:69:
d5:24:de:f8:dc:f5:fd:eb:5b:ef:1f:32:17:18:5c:e6:69:e7:
e1:0a:e2:b7:4e:41:52:c9:31:0c:cc:93:41:d3:fa:53:25:de:
a6:c5:cd:26:e5:ec:55:ec:85:94:08:fc:30:11:97:8c:9c:20:
dd:25:5f:cc:92:90:3f:5e:72:c9:34:ed:66:2f:9d:6f:6e:e2:
04:8d:7a:44:7f:2e:7e:27:c0:33:3d:3f:a3:db:f0:5f:c1:d9:
6f:ce:c4:ca:0f:9f:a6:ba:30:96:84:bd:a2:b7:39:78:dd:bd:
bc:12:14:c3:fd:88:ad:58:b3:bf:16:3e:4b:14:e3:57:d0:e4:
12:80:bc:d4:82:ec:99:8e:b7:c0:f6:7b:8f:e8:ae:bf:bb:0a:
d1:ff:2f:3a:a6:7e:28:1c:87:5e:a4:f1:5b:bb:4e:ce:5a:3e:
89:06:7a:74:a8:f2:d0:ee:bf:12:dd:4e:02:5f:5b:5b:4d:d9:
e4:37:cb:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:17:47 2026 by rpki-client