Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/9zUcMj1GyMxEd6j4S3wN_BMyu4E.roa
File: 9zUcMj1GyMxEd6j4S3wN_BMyu4E.roa (raw, json)
Hash identifier: 4cYsDak9htBlQluHvAs9xRiFIfXazZLrdSucvmVXp+Y=
Subject key identifier: F7:35:1C:32:3D:46:C8:CC:44:77:A8:F8:4B:7C:0D:FC:13:32:BB:81
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A0109311486067F9EFAE022068897143F8
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/9zUcMj1GyMxEd6j4S3wN_BMyu4E.roa
Signing time: Mon 17 Aug 2026 16:34:28 +0000
ROA not before: Mon 17 Aug 2026 16:34:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218940
IP address blocks: 2a06:9801:f7d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:10:93:11:48:60:67:f9:ef:ae:02:20:68:89:71:43:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Aug 17 16:34:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7351c323d46c8cc4477a8f84b7c0dfc1332bb81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ca:20:aa:a1:0d:4d:db:f9:4c:33:2e:32:f5:
28:1a:7e:b8:19:d0:a5:a0:07:3c:7a:e4:3d:63:5e:
55:cb:f0:46:eb:2f:9c:7a:14:6e:f1:1e:7c:cc:06:
16:59:3a:3c:bb:24:75:94:ca:7b:a7:da:d7:b3:57:
cf:b9:94:8f:79:0c:1f:08:4b:26:d7:39:dc:60:00:
ba:30:39:48:2e:de:e2:62:c1:0a:f5:c5:b8:41:19:
ce:0d:8e:2a:cd:20:b5:35:50:85:e1:5d:b8:90:1d:
ef:c9:f3:7b:12:f5:e9:41:49:32:f1:ea:12:aa:ce:
d1:fe:7f:00:fa:b0:81:d3:10:61:fb:ca:16:2a:8d:
34:5b:62:0e:1e:fa:c0:42:08:c4:62:7f:87:a5:40:
38:8c:af:ff:ec:56:97:68:08:ee:cb:c2:30:11:58:
ec:28:71:2f:42:e7:b8:84:60:00:fa:54:83:41:ae:
39:b5:bc:aa:fe:9a:d4:45:44:53:d8:cb:70:1f:a2:
d0:ff:bb:1a:95:76:18:ae:30:3c:e0:e9:88:26:dd:
7a:05:98:6f:fa:d3:2f:ef:c7:7c:05:e0:1c:38:30:
b7:30:ab:f0:fc:65:fc:43:58:72:90:be:7a:60:da:
22:93:e5:65:75:2b:bc:56:62:d9:80:95:ed:76:dc:
d7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:35:1C:32:3D:46:C8:CC:44:77:A8:F8:4B:7C:0D:FC:13:32:BB:81
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/9zUcMj1GyMxEd6j4S3wN_BMyu4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:f7d::/48
Signature Algorithm: sha256WithRSAEncryption
5c:75:7f:ce:1a:68:b1:ed:3b:3f:d6:ac:99:34:f6:f9:17:87:
6f:a2:56:f2:56:50:32:7b:ef:31:b9:a6:18:7b:1b:f1:57:3a:
fb:b1:64:ed:c6:22:c8:39:e9:71:2f:ef:35:81:34:0c:f6:6c:
66:a2:aa:33:e9:d4:0a:30:87:92:4a:74:f9:28:d0:7e:27:4f:
c3:5a:9a:79:9e:48:a8:fc:f6:6c:2c:5b:61:cd:52:84:f8:0e:
bd:70:0b:6a:7c:ae:35:bb:83:63:f5:83:a6:39:75:5d:06:7c:
79:08:99:ce:6e:97:c8:24:40:fe:a2:fd:de:b0:6e:d9:aa:6c:
df:5c:da:7c:9d:7a:05:9a:57:4d:80:ad:6f:0b:15:3a:85:f2:
42:43:04:1c:e2:6d:c7:45:b1:2a:ec:2c:51:06:e4:d1:e0:8a:
b1:fd:b6:60:15:b0:81:dc:93:22:59:e4:29:da:47:c8:82:87:
63:b4:f4:0d:6c:e6:7e:f9:fc:e7:c4:14:39:7f:bc:4c:ff:d1:
62:0b:06:1a:92:f9:a6:b9:9c:6a:15:77:27:0d:f5:c6:2f:b3:
20:11:e6:01:02:61:90:25:13:13:0e:be:ae:96:c2:b5:97:97:
23:4a:e5:64:62:51:cb:a8:c5:02:61:b7:da:5a:d1:eb:26:7b:
e2:99:b5:49
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaAQkxFIYGf5764CIGiJcUP4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYwODE3MTYzNDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzM1MWMzMjNkNDZjOGNjNDQ3N2E4Zjg0YjdjMGRmYzEzMzJiYjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscogqqENTdv5TDMuMvUoGn64GdCl
oAc8euQ9Y15Vy/BG6y+cehRu8R58zAYWWTo8uyR1lMp7p9rXs1fPuZSPeQwfCEsm
1zncYAC6MDlILt7iYsEK9cW4QRnODY4qzSC1NVCF4V24kB3vyfN7EvXpQUky8eoS
qs7R/n8A+rCB0xBh+8oWKo00W2IOHvrAQgjEYn+HpUA4jK//7FaXaAjuy8IwEVjs
KHEvQue4hGAA+lSDQa45tbyq/prURURT2MtwH6LQ/7salXYYrjA84OmIJt16BZhv
+tMv78d8BeAcODC3MKvw/GX8Q1hykL56YNoik+VldSu8VmLZgJXtdtzXgwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFPc1HDI9RsjMRHeo+Et8DfwTMruBMB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvOXpVY01qMUd5TXhFZDZqNFMzd05fQk15dTRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgaYAQ99
MA0GCSqGSIb3DQEBCwUAA4IBAQBcdX/OGmix7Ts/1qyZNPb5F4dvolbyVlAye+8x
uaYYexvxVzr7sWTtxiLIOelxL+81gTQM9mxmoqoz6dQKMIeSSnT5KNB+J0/DWpp5
nkio/PZsLFthzVKE+A69cAtqfK41u4Nj9YOmOXVdBnx5CJnObpfIJED+ov3esG7Z
qmzfXNp8nXoFmldNgK1vCxU6hfJCQwQc4m3HRbEq7CxRBuTR4Iqx/bZgFbCB3JMi
WeQp2kfIgodjtPQNbOZ++fznxBQ5f7xM/9FiCwYakvmmuZxqFXcnDfXGL7MgEeYB
AmGQJRMTDr6ulsK1l5cjSuVkYlHLqMUCYbfaWtHrJnvimbVJ
-----END CERTIFICATE-----
Generated at Sun Sep 20 21:07:46 2026 by rpki-client