Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/7T-pbJ0Z0_05o0Dyql_tEz8gWTs.roa
File: 7T-pbJ0Z0_05o0Dyql_tEz8gWTs.roa (raw, json)
Hash identifier: vLRpDjY36612NncwzrxZE0q9FQbwpKaaah9f6txgnGM=
Subject key identifier: ED:3F:A9:6C:9D:19:D3:FD:39:A3:40:F2:AA:5F:ED:13:3F:20:59:3B
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A05AA8E67F252EA711C56744AA603A01A3
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/7T-pbJ0Z0_05o0Dyql_tEz8gWTs.roa
Signing time: Tue 01 Sep 2026 01:50:13 +0000
ROA not before: Tue 01 Sep 2026 01:50:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 2a06:9801:ff0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5a:a8:e6:7f:25:2e:a7:11:c5:67:44:aa:60:3a:01:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Sep 1 01:50:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ed3fa96c9d19d3fd39a340f2aa5fed133f20593b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:db:f4:8e:3b:3f:7d:09:97:a0:88:33:dc:96:
61:23:d1:af:85:8a:31:b2:7b:ba:fd:3d:46:7b:82:
95:7c:0a:57:bf:20:18:35:bb:c1:29:0a:b1:56:7b:
a9:c0:c5:10:bd:01:af:e2:7b:6c:a8:d9:c3:24:2b:
7c:d4:1d:e3:02:ab:fb:e5:c2:fe:0b:00:5f:39:99:
1b:1e:77:dd:6c:bc:7d:fe:13:a0:5a:40:40:8c:58:
2e:5e:16:d3:ea:d4:6c:9b:f2:de:6c:96:8a:78:a8:
63:ec:48:45:4e:7c:9e:61:d4:04:10:58:20:ab:39:
af:ad:ec:ef:ea:26:cc:df:72:9d:83:6f:d2:1d:a8:
5d:8f:45:00:90:ea:c2:e2:ce:c9:0f:c2:80:b5:ce:
57:6d:25:f1:f1:34:af:64:ce:75:22:bd:f3:3d:df:
80:72:a1:80:44:4b:f6:0c:a7:10:a4:e1:4c:47:7b:
75:c7:97:17:e7:a8:99:01:11:70:fc:d1:7b:a7:02:
27:26:9e:e5:69:7f:67:b0:b6:fa:10:12:03:df:83:
dc:f0:74:ce:25:f8:67:bf:8d:c2:ce:09:8c:ec:88:
f8:36:c9:3c:a2:e6:6a:b2:89:29:2a:de:0a:64:1e:
18:71:4e:9f:d7:67:ee:2c:27:6b:08:56:e9:b9:7c:
d5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:3F:A9:6C:9D:19:D3:FD:39:A3:40:F2:AA:5F:ED:13:3F:20:59:3B
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/7T-pbJ0Z0_05o0Dyql_tEz8gWTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:ff0::/44
Signature Algorithm: sha256WithRSAEncryption
86:02:d2:6a:e0:85:b6:2c:10:52:b0:fd:e0:24:37:05:b6:61:
66:fd:d3:9a:4e:bf:57:de:29:c6:a2:9a:fa:99:57:f6:7e:4d:
c3:4c:61:e9:42:ea:4e:c3:f3:6a:4e:90:93:09:40:ea:97:52:
29:83:d1:6b:99:56:b8:65:2d:a6:a4:cb:d3:62:24:b0:b1:44:
3d:da:5d:27:5e:44:5d:57:79:d0:8f:48:d0:c4:75:2b:c0:7d:
0b:9d:13:c4:3b:5d:a3:c0:31:ff:45:cf:44:79:3b:19:2b:9f:
72:4b:d3:d5:70:1a:30:31:2e:9d:26:8f:16:a5:fe:b2:d6:ec:
35:d8:0e:bb:4b:e9:4c:3e:0b:f7:c7:fb:b1:ce:a0:cf:b0:88:
63:0b:03:ef:ad:f9:ac:3c:52:bf:21:60:07:d4:8d:06:9f:03:
6d:00:1a:2b:7b:f1:a4:3e:64:7c:7d:59:34:9f:76:05:35:b0:
be:8c:0b:58:e4:0e:c3:84:2f:aa:da:57:02:fe:91:8e:29:3f:
01:ba:d9:2b:a2:33:e4:1e:4c:26:4a:d3:02:d7:fa:23:97:4a:
6d:30:bc:c7:39:a3:da:38:eb:00:91:f8:40:11:1d:4c:cc:bd:
78:75:24:58:91:36:07:39:b6:df:78:3a:fc:40:fb:97:a4:7c:
2b:e2:22:7a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaBaqOZ/JS6nEcVnRKpgOgGjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYwOTAxMDE1MDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDNmYTk2YzlkMTlkM2ZkMzlhMzQwZjJhYTVmZWQxMzNmMjA1OTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNv0jjs/fQmXoIgz3JZhI9GvhYox
snu6/T1Ge4KVfApXvyAYNbvBKQqxVnupwMUQvQGv4ntsqNnDJCt81B3jAqv75cL+
CwBfOZkbHnfdbLx9/hOgWkBAjFguXhbT6tRsm/LebJaKeKhj7EhFTnyeYdQEEFgg
qzmvrezv6ibM33Kdg2/SHahdj0UAkOrC4s7JD8KAtc5XbSXx8TSvZM51Ir3zPd+A
cqGAREv2DKcQpOFMR3t1x5cX56iZARFw/NF7pwInJp7laX9nsLb6EBID34Pc8HTO
Jfhnv43CzgmM7Ij4Nsk8ouZqsokpKt4KZB4YcU6f12fuLCdrCFbpuXzVzQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFO0/qWydGdP9OaNA8qpf7RM/IFk7MB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvN1QtcGJKMFowXzA1bzBEeXFsX3RFejhnV1RzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgaYAQ/w
MA0GCSqGSIb3DQEBCwUAA4IBAQCGAtJq4IW2LBBSsP3gJDcFtmFm/dOaTr9X3inG
opr6mVf2fk3DTGHpQupOw/NqTpCTCUDql1Ipg9FrmVa4ZS2mpMvTYiSwsUQ92l0n
XkRdV3nQj0jQxHUrwH0LnRPEO12jwDH/Rc9EeTsZK59yS9PVcBowMS6dJo8Wpf6y
1uw12A67S+lMPgv3x/uxzqDPsIhjCwPvrfmsPFK/IWAH1I0GnwNtABore/GkPmR8
fVk0n3YFNbC+jAtY5A7DhC+q2lcC/pGOKT8ButkrojPkHkwmStMC1/ojl0ptMLzH
OaPaOOsAkfhAER1MzL14dSRYkTYHObbfeDr8QPuXpHwr4iJ6
-----END CERTIFICATE-----
Generated at Sun Sep 20 19:50:40 2026 by rpki-client