Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/99M9jyz8YDlaC0dAFB-WC6YS4v8.roa
File: 99M9jyz8YDlaC0dAFB-WC6YS4v8.roa (raw, json)
Hash identifier: a8lW3ANgd0Vm6hjcHA9R7mnPyqU9LXx/ijeYJV7Mb9I=
Subject key identifier: F7:D3:3D:8F:2C:FC:60:39:5A:0B:47:40:14:1F:96:0B:A6:12:E2:FF
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A059B6477EBE9869063BAB212E786FC600
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/99M9jyz8YDlaC0dAFB-WC6YS4v8.roa
Signing time: Mon 31 Aug 2026 21:25:13 +0000
ROA not before: Mon 31 Aug 2026 21:25:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201254
IP address blocks: 2a06:9801:2d::/48 maxlen: 48
2a06:9801:1530::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:59:b6:47:7e:be:98:69:06:3b:ab:21:2e:78:6f:c6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Aug 31 21:25:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7d33d8f2cfc60395a0b4740141f960ba612e2ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:19:80:cd:a5:bc:cb:63:23:b5:b2:24:fb:3c:
a0:9b:62:08:19:96:b6:ae:b1:9e:c4:8b:b2:04:f0:
f5:32:fd:a9:ae:aa:1d:45:4c:c3:2c:74:77:ba:aa:
78:b6:ca:bb:88:50:a8:62:e5:ea:64:b2:6b:05:91:
b7:56:2b:41:81:02:c6:e5:9d:9d:f4:e0:d5:e9:3c:
84:08:02:26:84:d6:b2:5a:e5:32:e7:98:56:71:87:
9e:ab:01:dd:2c:24:96:be:da:ae:49:95:07:f5:03:
65:10:c4:9e:cc:ad:bd:85:29:31:30:96:7d:c1:e1:
25:50:00:40:22:67:3a:56:fc:c7:65:9d:dd:04:08:
cc:de:1f:8e:a6:8b:c5:78:ff:a6:fd:2c:41:84:66:
0f:0a:f7:d0:22:12:f5:b9:eb:58:c3:47:93:59:94:
23:46:a7:34:d4:ad:9b:57:2f:1a:a8:db:6b:65:d0:
b1:8a:58:5c:e7:d9:45:ba:a4:91:06:d8:aa:5e:63:
88:b5:1e:6c:b2:7d:30:d1:86:8c:6f:e1:37:ab:e3:
4e:d7:b0:f8:4e:ff:86:ef:ea:22:64:1a:17:a5:d9:
f9:e2:bf:80:01:dc:57:ad:d9:73:14:3c:30:64:9c:
eb:fa:92:cb:53:8e:34:19:78:c6:f4:11:aa:0a:9a:
23:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D3:3D:8F:2C:FC:60:39:5A:0B:47:40:14:1F:96:0B:A6:12:E2:FF
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/99M9jyz8YDlaC0dAFB-WC6YS4v8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:2d::/48
2a06:9801:1530::/44
Signature Algorithm: sha256WithRSAEncryption
45:52:8b:1c:57:84:74:68:70:6e:2b:df:16:22:8f:49:c2:61:
8a:95:f7:08:51:fe:4d:29:43:cd:07:7c:23:de:8c:cc:ab:f9:
11:0a:aa:6c:7d:75:70:46:de:6f:a1:15:fa:52:bd:f3:74:38:
f7:86:97:ab:5b:44:4c:db:14:68:af:eb:72:52:15:73:fb:74:
d0:d3:41:5b:a6:91:22:bf:c3:39:47:09:4a:90:b6:85:11:aa:
f8:f2:b9:7b:fc:50:df:a2:68:ea:b8:1b:94:59:6b:98:1a:7d:
42:37:cf:e6:75:19:8f:78:39:a9:c8:27:48:54:5c:0c:1f:f4:
b6:0c:3f:c5:38:ac:a5:93:c4:69:2e:f8:25:65:81:61:0b:72:
fb:e2:64:86:da:b4:3b:f3:34:67:aa:f1:08:57:23:58:d1:27:
45:a1:57:c6:c9:d2:1c:6a:29:9f:22:13:df:7e:76:1a:95:5d:
03:ce:af:fc:7f:dd:10:b1:dc:11:91:14:64:0b:5e:39:35:4c:
d4:0b:1a:5a:88:0a:23:1b:e0:0c:97:eb:9e:8c:38:d5:99:a5:
2c:0e:50:32:0a:e2:6b:cd:3c:0e:92:bf:97:c9:d2:fe:91:bd:
8b:02:21:25:e6:2b:cc:38:82:7a:fd:c2:19:d0:2f:26:84:a4:
5d:39:e5:b0
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaBZtkd+vphpBjurIS54b8YAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYwODMxMjEyNTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmN2QzM2Q4ZjJjZmM2MDM5NWEwYjQ3NDAxNDFmOTYwYmE2MTJlMmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8RmAzaW8y2MjtbIk+zygm2IIGZa2
rrGexIuyBPD1Mv2prqodRUzDLHR3uqp4tsq7iFCoYuXqZLJrBZG3VitBgQLG5Z2d
9ODV6TyECAImhNayWuUy55hWcYeeqwHdLCSWvtquSZUH9QNlEMSezK29hSkxMJZ9
weElUABAImc6VvzHZZ3dBAjM3h+OpovFeP+m/SxBhGYPCvfQIhL1uetYw0eTWZQj
Rqc01K2bVy8aqNtrZdCxilhc59lFuqSRBtiqXmOItR5ssn0w0YaMb+E3q+NO17D4
Tv+G7+oiZBoXpdn54r+AAdxXrdlzFDwwZJzr+pLLU440GXjG9BGqCpojnwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFPfTPY8s/GA5WgtHQBQflgumEuL/MB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvOTlNOWp5ejhZRGxhQzBkQUZCLVdDNllTNHY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgaYAQAt
AwcEKgaYARUwMA0GCSqGSIb3DQEBCwUAA4IBAQBFUoscV4R0aHBuK98WIo9JwmGK
lfcIUf5NKUPNB3wj3ozMq/kRCqpsfXVwRt5voRX6Ur3zdDj3hperW0RM2xRor+ty
UhVz+3TQ00FbppEiv8M5RwlKkLaFEar48rl7/FDfomjquBuUWWuYGn1CN8/mdRmP
eDmpyCdIVFwMH/S2DD/FOKylk8RpLvglZYFhC3L74mSG2rQ78zRnqvEIVyNY0SdF
oVfGydIcaimfIhPffnYalV0Dzq/8f90QsdwRkRRkC145NUzUCxpaiAojG+AMl+ue
jDjVmaUsDlAyCuJrzTwOkr+XydL+kb2LAiEl5ivMOIJ6/cIZ0C8mhKRdOeWw
-----END CERTIFICATE-----
Generated at Mon Sep 21 22:15:06 2026 by rpki-client