Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/88d4AEjc41ind5f49n5YNaP7lnM.roa
File: 88d4AEjc41ind5f49n5YNaP7lnM.roa (raw, json)
Hash identifier: NQzPerzt9tsZm+SO2myTUVMCfhM7v5Z+JT1Oq1IWUAI=
Subject key identifier: F3:C7:78:00:48:DC:E3:58:A7:77:97:F8:F6:7E:58:35:A3:FB:96:73
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A091A9F0ADA92DCA52F7F7F5CEDF77998A
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/88d4AEjc41ind5f49n5YNaP7lnM.roa
Signing time: Fri 11 Sep 2026 18:10:28 +0000
ROA not before: Fri 11 Sep 2026 18:10:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218699
IP address blocks: 2a06:9801:f77::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:91:a9:f0:ad:a9:2d:ca:52:f7:f7:f5:ce:df:77:99:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Sep 11 18:10:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f3c7780048dce358a77797f8f67e5835a3fb9673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d3:54:62:a8:a2:29:fa:dc:f5:5f:8b:3a:c0:
6f:a7:02:32:76:1d:57:91:4e:de:35:9d:76:a7:9f:
52:04:0e:6f:1a:d9:82:f7:e9:29:ad:2f:89:d4:dd:
7b:28:02:e7:09:38:03:32:dd:b1:3d:9f:b5:c7:55:
e1:a4:c8:60:aa:89:39:a9:07:6d:67:13:0d:e7:9a:
cf:2f:76:af:6a:1c:fc:7f:c2:52:86:ef:65:26:54:
f4:65:1b:13:4c:88:bd:98:66:cb:52:09:14:8d:22:
f2:e6:8b:1d:32:a0:4e:d1:21:98:45:89:0a:7d:9a:
ff:7f:ec:72:b0:bf:b0:41:0c:99:bb:2d:30:ac:34:
f6:49:2e:86:7f:6f:7a:4e:ed:f7:81:69:03:8e:dd:
33:b4:00:d8:0e:b3:4c:ef:d5:37:90:f5:75:cc:db:
fe:0e:ce:bc:cf:14:c2:a1:91:1a:1c:81:8a:b9:a0:
ee:4e:c3:e0:d6:56:e9:70:04:03:e6:22:9c:e6:ed:
fe:8e:25:8a:a5:47:fb:19:d8:50:29:41:f7:53:ae:
4f:34:4d:cd:45:a2:d9:b8:c7:d9:ec:1d:f7:70:92:
32:08:7c:e4:35:58:90:a6:58:7b:a2:bf:be:73:d0:
06:83:26:95:90:d9:7e:15:2e:4e:a0:f5:c3:6e:f8:
25:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C7:78:00:48:DC:E3:58:A7:77:97:F8:F6:7E:58:35:A3:FB:96:73
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/88d4AEjc41ind5f49n5YNaP7lnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:f77::/48
Signature Algorithm: sha256WithRSAEncryption
4f:0b:27:ca:4e:46:d1:25:21:31:cd:c9:f4:1a:46:6a:56:a5:
76:c4:57:26:40:46:b4:dd:0e:ad:f3:d9:dd:d4:37:40:71:82:
2a:e5:98:3b:9c:d2:54:d1:ea:67:af:a4:3d:b3:4e:ee:3d:a7:
2c:b9:c5:da:25:87:50:0a:c7:4b:44:fb:1c:4a:e1:a7:30:d5:
c8:16:7f:6b:e1:a0:a7:16:5f:f5:de:f8:da:c0:1e:95:74:62:
cf:77:f6:57:18:54:b1:33:97:df:2f:ac:95:3e:ed:46:1c:77:
af:dd:3d:0b:db:28:8c:17:4b:50:1d:43:99:c2:70:eb:1e:46:
a0:f2:54:6f:bf:bf:47:fb:3e:ab:50:22:5a:6f:b4:58:1f:62:
97:83:8c:d9:d0:d6:01:da:e7:fc:57:2f:fd:b2:30:cc:4f:2b:
c9:72:e1:6c:a2:d4:6f:42:d1:e1:c8:78:7b:01:8b:8d:88:91:
12:48:4e:15:2c:c9:11:4b:17:2f:17:e7:56:94:bd:02:64:ea:
b7:5f:e0:89:60:f9:68:28:74:18:e4:fc:20:bd:40:85:f7:39:
3b:46:ae:f3:43:8e:b2:09:49:5f:63:52:3f:44:2b:15:dc:b8:
d7:4b:91:b5:2a:a5:f6:d4:53:8f:54:95:e4:43:32:fb:05:d1:
8c:4c:c8:c6
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaCRqfCtqS3KUvf39c7fd5mKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYwOTExMTgxMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmM2M3NzgwMDQ4ZGNlMzU4YTc3Nzk3ZjhmNjdlNTgzNWEzZmI5NjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdNUYqiiKfrc9V+LOsBvpwIydh1X
kU7eNZ12p59SBA5vGtmC9+kprS+J1N17KALnCTgDMt2xPZ+1x1XhpMhgqok5qQdt
ZxMN55rPL3avahz8f8JShu9lJlT0ZRsTTIi9mGbLUgkUjSLy5osdMqBO0SGYRYkK
fZr/f+xysL+wQQyZuy0wrDT2SS6Gf296Tu33gWkDjt0ztADYDrNM79U3kPV1zNv+
Ds68zxTCoZEaHIGKuaDuTsPg1lbpcAQD5iKc5u3+jiWKpUf7GdhQKUH3U65PNE3N
RaLZuMfZ7B33cJIyCHzkNViQplh7or++c9AGgyaVkNl+FS5OoPXDbvglmQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFPPHeABI3ONYp3eX+PZ+WDWj+5ZzMB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvODhkNEFFamM0MWluZDVmNDluNVlOYVA3bG5NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgaYAQ93
MA0GCSqGSIb3DQEBCwUAA4IBAQBPCyfKTkbRJSExzcn0GkZqVqV2xFcmQEa03Q6t
89nd1DdAcYIq5Zg7nNJU0epnr6Q9s07uPacsucXaJYdQCsdLRPscSuGnMNXIFn9r
4aCnFl/13vjawB6VdGLPd/ZXGFSxM5ffL6yVPu1GHHev3T0L2yiMF0tQHUOZwnDr
Hkag8lRvv79H+z6rUCJab7RYH2KXg4zZ0NYB2uf8Vy/9sjDMTyvJcuFsotRvQtHh
yHh7AYuNiJESSE4VLMkRSxcvF+dWlL0CZOq3X+CJYPloKHQY5PwgvUCF9zk7Rq7z
Q46yCUlfY1I/RCsV3LjXS5G1KqX21FOPVJXkQzL7BdGMTMjG
-----END CERTIFICATE-----
Generated at Mon Sep 21 22:14:45 2026 by rpki-client