Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/w6EOWmFgjYxSzg5WC7S1cfpJ_l0.roa
File: w6EOWmFgjYxSzg5WC7S1cfpJ_l0.roa (raw, json)
Hash identifier: 1xp7p8fEOiZRcWab+ae5h0dp54nvxzInKaM2IjGOZqo=
Subject key identifier: C3:A1:0E:5A:61:60:8D:8C:52:CE:0E:56:0B:B4:B5:71:FA:49:FE:5D
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019F2836BF679BB6B398F488F13B7BA6E9F1
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/w6EOWmFgjYxSzg5WC7S1cfpJ_l0.roa
Signing time: Fri 03 Jul 2026 13:41:44 +0000
ROA not before: Fri 03 Jul 2026 13:41:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219363
IP address blocks: 2a06:9801:7c7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:28:36:bf:67:9b:b6:b3:98:f4:88:f1:3b:7b:a6:e9:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jul 3 13:41:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3a10e5a61608d8c52ce0e560bb4b571fa49fe5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7f:1c:f0:c9:09:3a:f9:4d:00:f2:1d:fc:2f:
bc:51:f1:e0:f9:fa:c6:3e:49:3d:92:2b:d3:23:21:
ce:05:fb:67:26:68:77:d2:9b:63:14:d3:52:7f:ed:
4d:71:3f:2a:5d:97:0e:ad:be:83:26:b5:f9:3b:d1:
bd:14:c1:94:a7:f2:20:12:07:9e:50:86:3e:80:73:
16:1f:62:53:a5:db:12:64:b1:8a:9b:0e:65:e8:64:
9d:74:cd:34:0a:e1:87:9f:18:5d:e8:fd:6d:5b:08:
a2:46:e2:51:ef:50:c0:1f:e9:a4:0d:3b:10:28:94:
45:f7:86:48:06:0a:5b:61:ff:cf:73:4f:ad:0f:7f:
8b:f5:46:7f:cb:c4:be:1c:a6:8d:7f:e3:f6:9c:1b:
84:f1:54:1c:e0:e1:15:a3:49:fb:00:9b:3f:33:9f:
e3:c0:cb:5d:e7:d2:56:22:c1:be:79:86:8a:ca:db:
e2:f2:21:e2:f4:af:8f:34:3d:a1:3d:72:42:30:1b:
22:d0:31:2d:72:ea:2d:da:ab:44:18:df:2d:a8:c9:
70:1d:26:3c:45:1b:20:77:a3:b5:81:f3:6d:d0:d4:
40:41:7e:05:fd:ee:ca:3f:b7:e2:b2:88:d6:0d:9b:
d6:7b:36:16:67:c7:b2:f2:24:e1:50:01:52:b2:e0:
39:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A1:0E:5A:61:60:8D:8C:52:CE:0E:56:0B:B4:B5:71:FA:49:FE:5D
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/w6EOWmFgjYxSzg5WC7S1cfpJ_l0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:7c7::/48
Signature Algorithm: sha256WithRSAEncryption
3c:97:62:b4:90:9d:85:26:aa:e4:9c:1f:19:10:08:cd:2a:05:
6f:a0:10:8d:96:18:5b:54:9f:ff:f7:7b:84:1a:d8:cf:61:4e:
24:42:d2:9e:f8:fc:4c:93:9b:a0:92:dc:2f:1d:b6:b0:c6:b3:
4c:f7:16:56:e4:1a:cc:73:30:eb:d9:59:6a:f7:6c:45:26:c8:
99:42:b2:2d:78:1c:bd:02:68:4a:76:46:51:3d:b8:7c:54:1b:
00:a3:e1:31:01:30:67:b6:62:9a:33:74:2e:b2:a7:7b:6d:3d:
c6:14:c9:d5:17:09:d1:67:2b:cd:5f:aa:a6:df:ed:ba:b4:d6:
a7:7a:8f:4d:dc:2e:c3:c7:24:d1:1c:22:c5:32:01:76:17:97:
84:f2:90:2e:bd:38:68:3d:6e:dd:b8:01:d6:52:03:3a:8b:36:
5f:a8:01:50:20:f7:c5:0d:f7:61:9f:a8:50:71:29:66:33:08:
62:eb:8d:23:4f:0c:64:48:e0:da:7c:5b:ac:0c:ae:e5:36:a9:
cb:0f:b0:1f:50:b6:e7:ba:08:21:d5:b3:ce:15:29:7e:fe:6f:
4c:5a:f9:a7:c5:1d:c2:c2:e3:fc:d9:62:09:c0:05:0b:30:fb:
8b:8e:98:d2:30:a0:66:20:b2:b6:ef:91:10:f3:ef:ef:e8:d8:
ad:1d:df:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:02:51 2026 by rpki-client