Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/KTEDuVbC19LWfYgjfktE3eIahq0.roa
File: KTEDuVbC19LWfYgjfktE3eIahq0.roa (raw, json)
Hash identifier: 0Fw/FLVdxMVoI2K1A3/twSx9FRrFoYUECVs1K6rSfD0=
Subject key identifier: 29:31:03:B9:56:C2:D7:D2:D6:7D:88:23:7E:4B:44:DD:E2:1A:86:AD
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019E9F479B495A4DBB4B467C10B4EE440205
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/KTEDuVbC19LWfYgjfktE3eIahq0.roa
Signing time: Sat 06 Jun 2026 23:32:10 +0000
ROA not before: Sat 06 Jun 2026 23:32:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31898
IP address blocks: 2a06:9801::/48 maxlen: 48
2a06:9801:741::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9f:47:9b:49:5a:4d:bb:4b:46:7c:10:b4:ee:44:02:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jun 6 23:32:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=293103b956c2d7d2d67d88237e4b44dde21a86ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:61:46:12:b3:b6:ec:06:84:80:e4:64:1e:44:
9c:27:1b:13:e2:c4:91:45:75:d1:21:87:68:29:b7:
ad:07:7c:26:00:dc:97:5f:e9:f3:14:87:b1:6d:97:
c9:c6:47:72:90:f4:b0:46:ca:bb:18:20:fe:14:1e:
f2:6e:66:a7:d9:d9:b5:1a:8b:db:18:47:67:cb:95:
5a:30:dc:51:2a:4a:b4:d3:2b:22:80:7c:15:2a:48:
10:0a:c8:e1:bf:cb:d1:37:19:44:b8:7e:fb:f3:f9:
ac:0a:03:68:8a:3d:93:16:82:6c:2a:a6:b3:f9:87:
c0:c2:a6:7c:5a:bb:61:a8:4b:7b:c0:59:7c:10:04:
9d:e3:ab:5c:e4:50:84:04:1b:9c:c7:2c:9e:24:81:
c2:f6:b1:c1:49:2f:74:e9:fe:a4:55:b5:27:f7:46:
a1:1b:11:e2:6a:99:90:93:27:bb:9a:e4:90:b5:97:
d4:9c:e7:af:2f:2c:40:9c:d7:05:ba:d8:f2:d5:c0:
44:94:71:80:4f:45:85:7e:69:4a:87:c3:6f:9e:78:
a5:03:62:f7:89:e8:59:ba:2f:cc:a6:d2:e2:a5:7a:
f9:69:6b:95:4d:df:66:f1:f4:cd:e1:9a:3f:64:05:
2b:14:07:f8:a1:7c:84:9a:3e:30:1a:cb:e7:c8:b7:
72:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:31:03:B9:56:C2:D7:D2:D6:7D:88:23:7E:4B:44:DD:E2:1A:86:AD
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/KTEDuVbC19LWfYgjfktE3eIahq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801::/48
2a06:9801:741::/48
Signature Algorithm: sha256WithRSAEncryption
17:95:cf:4e:23:74:35:91:c9:72:23:31:28:c4:d4:bc:15:72:
28:87:36:44:90:4f:9e:11:ab:51:b6:17:99:a0:ab:3e:60:ea:
c3:81:1d:87:ca:cc:20:ed:6e:7b:79:6d:1a:59:69:ea:f1:35:
f4:70:04:d0:05:ca:65:c9:ed:81:8d:c9:13:a8:3d:3f:56:33:
b7:75:1e:4d:60:24:7d:54:b1:26:77:3a:a4:73:0a:3c:87:c2:
49:76:0b:64:d0:df:3a:73:e7:d5:ed:a7:83:67:ee:0c:4e:75:
ea:b1:d6:9d:bc:63:22:44:4d:b4:90:91:43:ca:10:2e:c1:c1:
3c:aa:ba:86:da:f0:5b:55:4c:c5:bd:44:5f:70:21:67:07:8a:
87:a4:8e:19:d2:88:54:2d:5b:5f:05:c8:23:3e:2b:f2:7e:e7:
5a:a6:e6:15:1a:67:24:81:4b:c7:d9:3b:4a:b3:9d:03:aa:1a:
46:a5:c1:b4:6a:35:3b:f8:d3:8e:a3:08:59:6d:12:42:32:04:
dd:ff:9b:78:3d:ad:16:c6:8f:42:3d:21:0e:c8:a4:d0:65:08:
03:f5:13:4c:6e:c9:fa:0e:8b:46:4d:19:21:99:e1:34:ce:be:
ca:30:3e:bd:4d:9f:47:f0:d5:da:c4:a2:d7:60:15:c6:1a:99:
d1:c9:47:8e
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ6fR5tJWk27S0Z8ELTuRAIFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYwNjA2MjMzMjEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOTMxMDNiOTU2YzJkN2QyZDY3ZDg4MjM3ZTRiNDRkZGUyMWE4NmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2FGErO27AaEgORkHkScJxsT4sSR
RXXRIYdoKbetB3wmANyXX+nzFIexbZfJxkdykPSwRsq7GCD+FB7ybman2dm1Govb
GEdny5VaMNxRKkq00ysigHwVKkgQCsjhv8vRNxlEuH778/msCgNoij2TFoJsKqaz
+YfAwqZ8WrthqEt7wFl8EASd46tc5FCEBBucxyyeJIHC9rHBSS906f6kVbUn90ah
GxHiapmQkye7muSQtZfUnOevLyxAnNcFutjy1cBElHGAT0WFfmlKh8NvnnilA2L3
iehZui/MptLipXr5aWuVTd9m8fTN4Zo/ZAUrFAf4oXyEmj4wGsvnyLdypwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCkxA7lWwtfS1n2II35LRN3iGoatMB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvS1RFRHVWYkMxOUxXZllnamZrdEUzZUlhaHEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgaYAQAA
AwcAKgaYAQdBMA0GCSqGSIb3DQEBCwUAA4IBAQAXlc9OI3Q1kclyIzEoxNS8FXIo
hzZEkE+eEatRtheZoKs+YOrDgR2Hyswg7W57eW0aWWnq8TX0cATQBcplye2BjckT
qD0/VjO3dR5NYCR9VLEmdzqkcwo8h8JJdgtk0N86c+fV7aeDZ+4MTnXqsdadvGMi
RE20kJFDyhAuwcE8qrqG2vBbVUzFvURfcCFnB4qHpI4Z0ohULVtfBcgjPivyfuda
puYVGmckgUvH2TtKs50DqhpGpcG0ajU7+NOOowhZbRJCMgTd/5t4Pa0Wxo9CPSEO
yKTQZQgD9RNMbsn6DotGTRkhmeE0zr7KMD69TZ9H8NXaxKLXYBXGGpnRyUeO
-----END CERTIFICATE-----
Generated at Sat Jun 13 11:29:49 2026 by rpki-client