Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/I-iD6njO-v-FYcDHEX4mnk-rg3s.roa
File: I-iD6njO-v-FYcDHEX4mnk-rg3s.roa (raw, json)
Hash identifier: Ns62UYefeSYj8l6X3+siNzb/ByDRqDNdWsyxM5vCSZU=
Subject key identifier: 23:E8:83:EA:78:CE:FA:FF:85:61:C0:C7:11:7E:26:9E:4F:AB:83:7B
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A0A2BE7F947C28504CE58E366A5DEC620F
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/I-iD6njO-v-FYcDHEX4mnk-rg3s.roa
Signing time: Tue 15 Sep 2026 01:46:28 +0000
ROA not before: Tue 15 Sep 2026 01:46:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202437
IP address blocks: 2a06:9801:1700::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a2:be:7f:94:7c:28:50:4c:e5:8e:36:6a:5d:ec:62:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Sep 15 01:46:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=23e883ea78cefaff8561c0c7117e269e4fab837b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5a:11:32:34:97:19:e3:4a:28:b9:2b:3e:6f:
06:52:4c:d6:65:b2:f5:13:04:d1:8a:97:27:88:c5:
e7:3a:5a:a1:09:b3:2f:6f:f3:4c:98:b9:fa:69:60:
9c:75:01:f7:fa:2e:f0:77:18:ba:a8:ed:58:f8:71:
85:69:d1:0a:04:29:1b:a8:c7:43:41:65:c5:36:b7:
97:67:ed:6f:54:0d:9a:5e:c5:2f:18:0b:70:e9:bb:
a1:1a:8c:60:63:66:ac:24:a7:cc:27:02:c7:cb:8b:
bd:a7:85:d9:17:e7:6d:0b:b5:b7:cc:ba:11:94:b6:
f2:6d:1b:33:f2:e1:38:e4:16:d5:2b:54:73:25:9a:
56:15:65:a8:53:c6:be:28:60:b9:ba:9d:3e:6b:a1:
0c:ec:fb:00:90:63:8c:4c:9a:73:13:3f:4d:9d:65:
df:fa:22:fa:35:d3:9c:7d:f8:6f:c0:44:88:26:6c:
ac:d1:13:ce:a6:8c:f0:65:e5:0d:3b:54:7f:2c:46:
e1:c4:e6:93:3f:68:1a:62:20:92:8e:78:3d:18:0b:
75:2e:c5:85:e0:0e:03:fa:e7:0b:51:e3:b2:d7:bf:
b0:70:17:21:b6:2d:71:e4:ea:f0:8c:14:f0:eb:07:
7d:c3:d1:a5:2c:b1:b3:e8:99:13:68:f7:24:e7:4c:
a8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E8:83:EA:78:CE:FA:FF:85:61:C0:C7:11:7E:26:9E:4F:AB:83:7B
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/I-iD6njO-v-FYcDHEX4mnk-rg3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:1700::/40
Signature Algorithm: sha256WithRSAEncryption
b2:53:9b:2c:e2:94:75:ea:2a:66:89:f5:42:7f:a3:f7:bf:4a:
c2:42:24:52:6c:64:84:ed:5a:60:77:7e:04:ed:00:60:1d:ff:
72:da:dd:36:7e:e5:ee:60:f5:6e:2a:34:ca:e7:8e:a7:e4:b6:
2c:34:fa:4c:fa:65:49:1d:04:43:5c:c9:d8:22:81:d9:f3:60:
7c:53:bc:39:d3:b8:f5:95:11:df:d4:1a:b2:e3:f5:cc:93:08:
ca:03:f2:ea:6d:96:4f:3b:83:5b:d5:ea:e7:f7:52:23:a5:20:
9c:d7:48:99:02:04:9b:5f:d4:1c:dd:9c:90:c8:14:8d:ea:81:
2e:28:5c:4a:32:16:80:18:df:f5:f9:9c:30:67:9b:eb:ca:f7:
e5:6e:5b:03:ab:6f:33:37:6a:93:75:67:16:ac:b9:78:72:e7:
1b:da:cf:2a:6b:14:77:95:fb:8a:da:1e:1b:e9:de:26:eb:83:
60:0e:27:f1:37:97:40:01:64:39:4c:37:77:71:fd:7c:1b:4a:
32:ca:3a:ae:74:ef:5e:ba:ce:ac:88:94:9e:79:5e:5a:db:2c:
be:f7:b0:0a:1f:25:da:e8:0d:18:88:80:02:58:f7:ea:43:3a:
73:86:8e:69:7c:4f:1b:11:ce:3f:e1:f2:57:e0:fd:c5:5d:92:
33:58:2d:3f
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAaCivn+UfChQTOWONmpd7GIPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYwOTE1MDE0NjI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyM2U4ODNlYTc4Y2VmYWZmODU2MWMwYzcxMTdlMjY5ZTRmYWI4MzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxloRMjSXGeNKKLkrPm8GUkzWZbL1
EwTRipcniMXnOlqhCbMvb/NMmLn6aWCcdQH3+i7wdxi6qO1Y+HGFadEKBCkbqMdD
QWXFNreXZ+1vVA2aXsUvGAtw6buhGoxgY2asJKfMJwLHy4u9p4XZF+dtC7W3zLoR
lLbybRsz8uE45BbVK1RzJZpWFWWoU8a+KGC5up0+a6EM7PsAkGOMTJpzEz9NnWXf
+iL6NdOcffhvwESIJmys0RPOpozwZeUNO1R/LEbhxOaTP2gaYiCSjng9GAt1LsWF
4A4D+ucLUeOy17+wcBchti1x5OrwjBTw6wd9w9GlLLGz6JkTaPck50yoOQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFCPog+p4zvr/hWHAxxF+Jp5Pq4N7MB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvSS1pRDZuak8tdi1GWWNESEVYNG1uay1yZzNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgaYARcw
DQYJKoZIhvcNAQELBQADggEBALJTmyzilHXqKmaJ9UJ/o/e/SsJCJFJsZITtWmB3
fgTtAGAd/3La3TZ+5e5g9W4qNMrnjqfktiw0+kz6ZUkdBENcydgigdnzYHxTvDnT
uPWVEd/UGrLj9cyTCMoD8uptlk87g1vV6uf3UiOlIJzXSJkCBJtf1BzdnJDIFI3q
gS4oXEoyFoAY3/X5nDBnm+vK9+VuWwOrbzM3apN1ZxasuXhy5xvazyprFHeV+4ra
Hhvp3ibrg2AOJ/E3l0ABZDlMN3dx/XwbSjLKOq507166zqyIlJ55XlrbLL73sAof
JdroDRiIgAJY9+pDOnOGjml8TxsRzj/h8lfg/cVdkjNYLT8=
-----END CERTIFICATE-----
Generated at Mon Sep 21 14:25:51 2026 by rpki-client