Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/0JnDbgjNv4136Wa9ZrKCv6u83kY.roa
File: 0JnDbgjNv4136Wa9ZrKCv6u83kY.roa (raw, json)
Hash identifier: UTVUsYLKeqn7rVZjfxxbpaNGKJl1Ud8vmrIT928L97o=
Subject key identifier: D0:99:C3:6E:08:CD:BF:8D:77:E9:66:BD:66:B2:82:BF:AB:BC:DE:46
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019E79B1ABB76AE8EA865DF639447DCE29DD
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/0JnDbgjNv4136Wa9ZrKCv6u83kY.roa
Signing time: Sat 30 May 2026 16:22:27 +0000
ROA not before: Sat 30 May 2026 16:22:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198826
IP address blocks: 2a06:9801:27b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:31:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:79:b1:ab:b7:6a:e8:ea:86:5d:f6:39:44:7d:ce:29:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: May 30 16:22:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d099c36e08cdbf8d77e966bd66b282bfabbcde46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:80:ab:dc:2b:e3:47:36:d1:a4:0c:f7:eb:d8:
15:a0:79:2f:d9:3b:b5:2b:21:ef:25:7a:0a:52:56:
03:15:ec:af:4c:c1:98:24:cc:eb:a6:c4:5f:ab:e9:
e9:af:7a:c3:22:59:70:58:e6:c8:8b:6c:50:9c:c6:
a3:5f:be:7e:14:3c:dc:b9:b4:5b:26:10:46:71:92:
4c:31:5e:94:fd:de:ec:c6:5e:3a:b9:46:b6:84:a6:
da:43:35:26:e0:90:d5:1c:3d:c3:d2:99:27:03:31:
a4:6e:e9:63:1f:b0:49:c1:79:51:6f:e2:c3:99:e4:
81:d2:f0:c5:95:57:41:db:a8:8f:02:27:5d:29:d0:
8f:92:aa:47:71:78:8b:c7:ec:f3:9c:60:e9:67:71:
a1:97:7e:ff:83:ec:f5:db:01:1a:07:10:fc:77:80:
ac:fc:10:77:6d:e5:a2:66:f6:93:91:15:c7:cf:2e:
85:c9:d8:85:eb:64:bf:af:a5:3a:b3:94:dd:7b:aa:
ed:fc:fb:72:9b:7e:c5:21:bd:22:72:70:3a:16:06:
44:0d:ee:12:ef:cc:43:eb:ee:50:5b:03:e9:23:11:
08:f0:e1:b3:c6:60:5a:a2:8c:12:32:59:52:91:66:
ef:a6:72:69:89:51:8c:32:85:d7:b8:64:a2:14:80:
c8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:99:C3:6E:08:CD:BF:8D:77:E9:66:BD:66:B2:82:BF:AB:BC:DE:46
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/0JnDbgjNv4136Wa9ZrKCv6u83kY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:27b::/48
Signature Algorithm: sha256WithRSAEncryption
a5:5f:7c:db:ca:94:e1:4a:9f:98:0e:99:b1:7e:01:a3:25:17:
44:10:c8:0d:b4:d2:f3:a2:d7:b5:19:f2:79:bc:a6:4e:9d:84:
12:b8:59:2e:92:97:e7:68:db:b0:a3:99:a6:97:b4:29:22:c7:
ae:10:71:39:3a:92:93:4c:3a:32:04:49:0e:48:2e:d8:69:9f:
28:e2:2d:02:9b:4b:9f:45:c4:1e:d2:75:34:db:a4:33:6e:c4:
78:b7:eb:75:5d:64:2b:11:6a:e4:fc:ab:51:84:a8:49:0d:7f:
68:1d:cb:cd:a6:f8:e8:4f:4b:00:30:38:4f:6d:e7:35:67:51:
8c:79:02:8d:2b:60:62:7c:fb:dc:5e:6a:b6:1f:eb:28:4c:84:
1a:af:98:9f:94:08:b6:a3:bb:d1:d8:7c:21:60:c1:e0:00:f0:
df:58:0a:57:c1:df:a8:3b:55:20:3b:25:72:fb:6f:b1:13:ec:
ea:54:85:fe:71:07:98:ff:87:a7:7e:12:c9:e4:d2:7d:4a:a4:
ff:8b:e8:9d:a5:de:17:b7:91:39:00:11:20:f4:95:a2:b9:f3:
7d:0e:6d:2e:19:1c:0b:15:50:8c:34:a8:0b:b8:d3:58:c9:f4:
bc:2f:3e:f8:be:07:df:c1:87:ea:f7:c3:d4:e5:04:79:0b:fd:
06:33:6d:a0
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ55sau3aujqhl32OUR9zindMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYwNTMwMTYyMjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDk5YzM2ZTA4Y2RiZjhkNzdlOTY2YmQ2NmIyODJiZmFiYmNkZTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ICr3CvjRzbRpAz369gVoHkv2Tu1
KyHvJXoKUlYDFeyvTMGYJMzrpsRfq+npr3rDIllwWObIi2xQnMajX75+FDzcubRb
JhBGcZJMMV6U/d7sxl46uUa2hKbaQzUm4JDVHD3D0pknAzGkbuljH7BJwXlRb+LD
meSB0vDFlVdB26iPAiddKdCPkqpHcXiLx+zznGDpZ3Ghl37/g+z12wEaBxD8d4Cs
/BB3beWiZvaTkRXHzy6FydiF62S/r6U6s5Tde6rt/Ptym37FIb0icnA6FgZEDe4S
78xD6+5QWwPpIxEI8OGzxmBaoowSMllSkWbvpnJpiVGMMoXXuGSiFIDIowIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFNCZw24Izb+Nd+lmvWaygr+rvN5GMB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvMEpuRGJnak52NDEzNldhOVpyS0N2NnU4M2tZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgaYAQJ7
MA0GCSqGSIb3DQEBCwUAA4IBAQClX3zbypThSp+YDpmxfgGjJRdEEMgNtNLzote1
GfJ5vKZOnYQSuFkukpfnaNuwo5mml7QpIseuEHE5OpKTTDoyBEkOSC7YaZ8o4i0C
m0ufRcQe0nU026QzbsR4t+t1XWQrEWrk/KtRhKhJDX9oHcvNpvjoT0sAMDhPbec1
Z1GMeQKNK2BifPvcXmq2H+soTIQar5iflAi2o7vR2HwhYMHgAPDfWApXwd+oO1Ug
OyVy+2+xE+zqVIX+cQeY/4enfhLJ5NJ9SqT/i+idpd4Xt5E5ABEg9JWiufN9Dm0u
GRwLFVCMNKgLuNNYyfS8Lz74vgffwYfq98PU5QR5C/0GM22g
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:40:42 2026 by rpki-client