Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/v_ylK9nElcTk5EqBX4aG3egCNV0.roa
File: v_ylK9nElcTk5EqBX4aG3egCNV0.roa (raw, json)
Hash identifier: lKDSCfMAICaVXN154xQyW0bLyV0RcleGgH6Lvl8v1c0=
Subject key identifier: BF:FC:A5:2B:D9:C4:95:C4:E4:E4:4A:81:5F:86:86:DD:E8:02:35:5D
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A02A5EC30FA3BB8BAD682D6D9A822F913A
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/v_ylK9nElcTk5EqBX4aG3egCNV0.roa
Signing time: Sat 22 Aug 2026 16:47:28 +0000
ROA not before: Sat 22 Aug 2026 16:47:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201957
IP address blocks: 2a06:9801:f72::/48 maxlen: 48
2a06:9801:fd0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:53:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:2a:5e:c3:0f:a3:bb:8b:ad:68:2d:6d:9a:82:2f:91:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Aug 22 16:47:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bffca52bd9c495c4e4e44a815f8686dde802355d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:92:5f:ef:23:fb:f1:73:1c:81:fd:3b:73:16:
8a:07:15:e1:ac:6d:2e:05:55:37:95:8f:8d:bf:e5:
19:f0:bc:36:ec:6f:ad:5d:97:b5:a4:b9:8e:4d:64:
bc:26:11:f1:d8:0c:fb:c5:7d:94:ed:f4:5b:64:11:
15:4f:d6:54:58:8f:f5:df:6d:e5:53:e9:36:b0:83:
fa:f3:a3:0d:e6:a9:7d:64:61:8a:50:aa:9c:29:9c:
7d:e5:c8:43:c4:34:81:dd:fc:5d:1f:68:f0:6d:a7:
59:e7:8c:12:f9:39:86:30:bc:53:9d:46:5b:1f:02:
b4:fa:b8:fd:e3:bf:23:13:25:29:05:91:f9:d6:57:
15:c2:2e:e5:8e:d1:6e:33:3d:03:b7:e4:b4:32:de:
32:8a:c9:e2:d3:25:26:5e:36:9a:43:1d:94:bc:c3:
4c:2d:de:51:79:04:1b:c7:df:9c:60:98:37:af:84:
82:8f:91:84:01:d4:f3:10:f9:13:41:da:97:d4:61:
70:68:dd:dc:9c:3a:f5:28:62:88:75:95:99:4e:cf:
99:f1:94:7b:45:c0:de:42:27:b5:68:7a:75:3d:90:
cd:75:bf:a8:90:5a:ee:3f:01:3b:57:d6:a0:e4:d0:
d2:00:e1:e9:f8:e1:f7:b8:b2:4a:dc:47:0e:98:77:
7a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:FC:A5:2B:D9:C4:95:C4:E4:E4:4A:81:5F:86:86:DD:E8:02:35:5D
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/v_ylK9nElcTk5EqBX4aG3egCNV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:f72::/48
2a06:9801:fd0::/44
Signature Algorithm: sha256WithRSAEncryption
90:5c:62:a8:24:85:52:cb:33:e4:8d:97:38:1a:e8:34:70:b2:
5b:d6:77:11:d6:c1:03:9a:9f:44:25:49:ec:3e:a4:f3:75:32:
d4:ef:93:0b:8b:6d:0c:0c:88:be:5d:d0:ab:52:b1:6f:ef:57:
58:66:cc:c3:3f:14:22:b9:a7:34:16:b1:6e:07:06:7a:bd:fb:
0e:86:dc:a8:11:ca:0e:00:44:69:ad:ed:e6:51:be:46:c3:8a:
09:02:01:94:8e:c7:2e:d6:74:6f:1f:c9:95:83:65:e2:c6:38:
35:6d:c8:2a:b7:0a:e9:30:75:69:25:78:f9:f5:03:0d:1a:f3:
20:32:ce:40:e8:5d:43:5c:21:7d:44:64:4e:53:30:02:40:c3:
2a:d5:ca:7b:e8:30:a7:fc:63:35:7c:a6:23:bd:52:7d:42:66:
59:6b:73:6f:1c:46:21:a5:04:1d:c4:9d:e6:82:0b:bf:74:fe:
87:3a:ab:ef:be:be:d5:8f:d1:72:7a:cf:5f:98:08:3b:d6:49:
74:fd:52:48:a5:b3:a0:31:41:b6:21:5e:57:ea:f6:f1:7d:d3:
f5:f9:ac:aa:e7:3f:c5:c3:14:96:83:8e:e0:36:cd:fd:d4:20:
f7:7f:53:8a:7d:3a:16:37:83:d1:5e:0a:6e:bc:3f:50:86:d4:
bd:42:c2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:21:09 2026 by rpki-client