Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/FbeeBN0IccUJ7SqRJUZm-m8p2fQ.roa
File: FbeeBN0IccUJ7SqRJUZm-m8p2fQ.roa (raw, json)
Hash identifier: 8nLNA+5aDesJlyG6UFhzqNhupVqH7BHfjZNWvLDCoFc=
Subject key identifier: 15:B7:9E:04:DD:08:71:C5:09:ED:2A:91:25:46:66:FA:6F:29:D9:F4
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A0F429E313249D42DC333191A877BDD77E
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/FbeeBN0IccUJ7SqRJUZm-m8p2fQ.roa
Signing time: Wed 30 Sep 2026 21:13:00 +0000
ROA not before: Wed 30 Sep 2026 21:13:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201182
IP address blocks: 2a06:9801:55::/48 maxlen: 48
2a06:9801:300::/40 maxlen: 40
2a06:9801:300::/48 maxlen: 48
2a06:9801:333::/48 maxlen: 48
2a06:9801:3fe::/48 maxlen: 48
2a06:9801:3ff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f4:29:e3:13:24:9d:42:dc:33:31:91:a8:77:bd:d7:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Sep 30 21:13:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=15b79e04dd0871c509ed2a91254666fa6f29d9f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f6:f5:a6:9a:70:69:03:29:1d:93:b3:cf:6b:
14:da:65:e2:c1:97:93:b3:0f:33:15:60:1d:64:f0:
eb:a4:e7:08:31:6b:65:c4:9e:c3:c8:fc:76:1d:59:
e6:62:42:49:01:b0:7b:2e:7d:bd:9e:7c:15:7d:e2:
67:8c:81:73:d1:9f:d0:02:0b:9a:4c:dd:e5:00:7d:
c4:38:fe:50:27:92:c2:16:86:4b:e9:e4:94:d1:ed:
f1:07:63:f9:a0:4b:6f:1c:d2:b8:93:1b:73:87:0f:
53:71:3c:cf:ee:01:c1:f6:c0:31:50:cb:da:83:1f:
79:9c:b1:be:b0:99:8a:11:a1:44:c2:25:ec:72:4a:
86:b8:7c:4d:f0:1f:f7:df:27:cb:0b:54:5e:82:27:
de:f3:44:d4:c9:c2:a5:1c:43:25:8b:71:e6:ca:50:
d5:ed:1f:84:aa:1d:80:f8:86:2b:ba:a0:88:b1:c1:
5e:cb:e3:74:a8:93:ae:08:42:dc:eb:33:6c:63:98:
b4:21:95:77:d2:52:0a:4c:f1:72:03:4e:b8:a8:ea:
a9:bd:a5:c4:3f:84:93:21:42:6b:03:5b:d1:a6:7c:
84:b8:99:79:1d:ce:13:eb:c6:a0:46:09:47:f1:13:
8c:77:a8:08:48:61:6c:21:60:5e:67:f5:cc:b8:d9:
fd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B7:9E:04:DD:08:71:C5:09:ED:2A:91:25:46:66:FA:6F:29:D9:F4
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/FbeeBN0IccUJ7SqRJUZm-m8p2fQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:55::/48
2a06:9801:300::/40
Signature Algorithm: sha256WithRSAEncryption
2d:4c:f7:5c:46:c2:ae:91:50:1b:68:94:47:93:78:f9:d5:26:
d3:57:a7:d5:e5:41:eb:1d:66:b1:70:e3:10:0f:e6:6e:9f:5a:
b5:c5:ee:cc:e1:eb:08:e7:88:45:57:17:78:d8:57:02:6b:f0:
70:0e:ab:2e:57:2f:ba:95:c0:8e:77:d5:e2:f6:5e:fe:3d:73:
3c:b7:ef:e5:14:38:75:01:81:ea:81:6d:99:5c:27:ad:c2:9d:
74:24:1e:f2:37:3f:f5:fe:7e:f9:cf:17:20:d0:55:9c:82:ea:
ed:84:93:b0:b0:47:7a:ba:82:2d:7d:7c:b9:92:bc:a4:81:67:
9d:c7:87:cc:9e:e4:2b:20:9b:2c:db:43:0f:19:6e:e3:4d:51:
72:35:9a:ad:6f:4b:c4:af:61:2f:83:fe:ed:dd:2b:7f:2a:dd:
e4:b1:44:64:61:f8:47:6e:50:ce:e5:7c:18:be:f2:e7:ab:be:
13:b5:90:e8:9d:45:e0:62:2b:f9:a0:83:2a:0e:5c:1c:9d:d8:
a5:f5:58:0a:7c:ae:26:5f:f7:d3:15:41:01:cc:bb:7d:92:32:
47:cb:9c:4a:84:4c:32:90:a7:1d:0b:94:eb:88:3e:ee:c6:8f:
0b:81:3c:0f:94:2c:b3:28:d8:4f:9e:77:18:2e:84:5b:08:d3:
1f:41:62:69
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgISAaD0KeMTJJ1C3DMxkah3vdd+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYwOTMwMjExMzAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNWI3OWUwNGRkMDg3MWM1MDllZDJhOTEyNTQ2NjZmYTZmMjlkOWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfb1pppwaQMpHZOzz2sU2mXiwZeT
sw8zFWAdZPDrpOcIMWtlxJ7DyPx2HVnmYkJJAbB7Ln29nnwVfeJnjIFz0Z/QAgua
TN3lAH3EOP5QJ5LCFoZL6eSU0e3xB2P5oEtvHNK4kxtzhw9TcTzP7gHB9sAxUMva
gx95nLG+sJmKEaFEwiXsckqGuHxN8B/33yfLC1Regife80TUycKlHEMli3HmylDV
7R+Eqh2A+IYruqCIscFey+N0qJOuCELc6zNsY5i0IZV30lIKTPFyA064qOqpvaXE
P4STIUJrA1vRpnyEuJl5Hc4T68agRglH8ROMd6gISGFsIWBeZ/XMuNn9iQIDAQAB
o4ICFDCCAhAwHQYDVR0OBBYEFBW3ngTdCHHFCe0qkSVGZvpvKdn0MB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvRmJlZUJOMEljY1VKN1NxUkpVWm0tbThwMmZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcAKgaYAQBV
AwYAKgaYAQMwDQYJKoZIhvcNAQELBQADggEBAC1M91xGwq6RUBtolEeTePnVJtNX
p9XlQesdZrFw4xAP5m6fWrXF7szh6wjniEVXF3jYVwJr8HAOqy5XL7qVwI531eL2
Xv49czy37+UUOHUBgeqBbZlcJ63CnXQkHvI3P/X+fvnPFyDQVZyC6u2Ek7CwR3q6
gi19fLmSvKSBZ53Hh8ye5CsgmyzbQw8ZbuNNUXI1mq1vS8SvYS+D/u3dK38q3eSx
RGRh+EduUM7lfBi+8uervhO1kOidReBiK/mggyoOXByd2KX1WAp8riZf99MVQQHM
u32SMkfLnEqETDKQpx0LlOuIPu7GjwuBPA+ULLMo2E+edxguhFsI0x9BYmk=
-----END CERTIFICATE-----
Generated at Thu Nov 5 18:56:49 2026 by rpki-client