Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/zNULdXe3N-xsuYA-_Ke_vQspWOA.roa
File: zNULdXe3N-xsuYA-_Ke_vQspWOA.roa (raw, json)
Hash identifier: U83ylIRgVPotO/4UXHlCi9t/O2woVR1fNtZh43NJYQ4=
Subject key identifier: CC:D5:0B:75:77:B7:37:EC:6C:B9:80:3E:FC:A7:BF:BD:0B:29:58:E0
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019FCC02FEE24D2C74687E279D09E1FA034D
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/zNULdXe3N-xsuYA-_Ke_vQspWOA.roa
Signing time: Tue 04 Aug 2026 09:02:56 +0000
ROA not before: Tue 04 Aug 2026 09:02:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219079
IP address blocks: 2a06:9801:f44::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cc:02:fe:e2:4d:2c:74:68:7e:27:9d:09:e1:fa:03:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Aug 4 09:02:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ccd50b7577b737ec6cb9803efca7bfbd0b2958e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2c:a6:5a:fd:e3:13:ad:a1:14:3c:4c:8e:bc:
99:8c:e5:71:6f:d0:d5:74:15:73:27:f3:d9:d0:87:
68:ed:63:2c:f2:4e:41:b3:8f:f7:85:08:8a:ff:3e:
5d:7f:af:c4:81:16:f9:29:00:1f:ef:2c:77:39:fb:
9e:da:86:91:88:98:c5:b2:28:93:5d:7a:0d:6b:69:
50:54:b8:d9:33:9b:70:63:3c:38:62:90:71:b9:11:
37:86:1f:a4:33:90:39:1c:0c:38:8a:83:43:3d:d6:
b5:dc:5d:ba:c0:12:26:8c:34:77:16:80:3a:1c:97:
aa:28:9a:c2:d4:b3:2b:72:6a:47:d7:fa:be:40:91:
e7:d3:89:96:1e:95:16:b6:44:44:8f:33:56:7e:3b:
9e:91:86:d6:e4:64:35:3b:04:c6:d9:dc:26:47:84:
53:2b:39:84:ed:40:f5:0a:f6:65:c4:2e:33:3d:30:
be:bd:d8:10:85:7b:84:ab:67:7c:70:9b:0b:c0:66:
8c:c4:85:08:0c:89:da:db:83:cf:7f:ed:8c:17:0f:
72:b5:ac:88:0f:8e:c6:ab:a3:93:92:f9:db:c9:89:
33:4a:45:5d:83:31:0b:1b:4f:0f:b4:42:9b:e6:c8:
73:24:c1:97:28:69:6e:fa:4e:d9:fc:c5:03:7a:d7:
28:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D5:0B:75:77:B7:37:EC:6C:B9:80:3E:FC:A7:BF:BD:0B:29:58:E0
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/zNULdXe3N-xsuYA-_Ke_vQspWOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:f44::/48
Signature Algorithm: sha256WithRSAEncryption
2e:a0:8f:cc:59:f2:a6:fb:a0:e5:c5:fe:07:c4:da:69:5a:83:
2a:c3:eb:6e:d7:8b:3d:58:67:16:f3:9b:3a:a0:e7:04:69:5e:
ad:23:17:6c:2b:34:bc:f2:28:dc:68:6c:31:64:b1:47:07:d0:
69:5e:5c:5b:67:07:c6:2e:37:1a:7c:06:ab:d0:ef:74:77:db:
c3:41:67:9c:d7:e4:6f:4e:e0:1c:a1:ca:75:d7:6f:9c:ed:be:
90:84:43:c4:0d:31:e4:06:81:74:96:37:08:bf:66:ae:4b:b4:
24:68:a5:91:15:e0:14:81:6d:aa:4b:61:a1:c7:9d:53:94:61:
94:d1:e5:63:53:3a:50:da:1f:3f:62:e7:f9:85:d2:db:2a:6d:
0f:68:d0:d2:12:77:04:57:d2:50:72:77:9e:81:3e:bc:6a:3e:
85:34:58:60:6a:47:03:dd:42:39:47:53:39:81:af:d7:b3:3f:
21:fe:0f:70:73:f7:51:9d:7a:1f:05:f5:f6:7a:c2:05:35:12:
4d:85:e7:aa:c1:f5:64:8b:5c:ec:47:0d:b2:2b:b6:1e:47:c3:
29:f6:be:2f:ad:97:79:4e:42:cc:b4:9d:c3:82:1f:65:8d:dd:
c2:46:fd:e5:4f:5b:a1:09:92:7f:11:c7:d4:19:a9:cc:14:5b:
8d:93:de:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 17:11:49 2026 by rpki-client