Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MYdbXwNbGfXS-g4CQxSSXalpbJI.roa
File: MYdbXwNbGfXS-g4CQxSSXalpbJI.roa (raw, json)
Hash identifier: KM8X5CnRsTl3tO4mlfq0gvjsm+vb7TmX7ELO2DcPenY=
Subject key identifier: 31:87:5B:5F:03:5B:19:F5:D2:FA:0E:02:43:14:92:5D:A9:69:6C:92
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A059AD1FF5119E5340E1A6A7FAB9D5D080
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MYdbXwNbGfXS-g4CQxSSXalpbJI.roa
Signing time: Mon 31 Aug 2026 21:15:13 +0000
ROA not before: Mon 31 Aug 2026 21:15:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218826
IP address blocks: 2a06:9801:fc1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:59:ad:1f:f5:11:9e:53:40:e1:a6:a7:fa:b9:d5:d0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Aug 31 21:15:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=31875b5f035b19f5d2fa0e024314925da9696c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5f:55:2e:d7:8b:47:18:de:bd:48:72:14:7d:
e2:b4:2d:ff:23:73:89:3f:e6:f0:3e:73:85:81:1f:
43:23:dd:97:d7:b5:c8:bc:69:74:e9:b7:5b:3c:71:
26:cf:30:94:da:de:97:93:9d:a8:a5:92:29:29:c1:
09:01:b4:a2:32:11:4d:80:17:ac:fe:52:0b:ff:a3:
d5:1a:97:6d:01:95:2f:6b:03:ae:42:46:73:d1:b5:
3c:00:6c:64:a2:cf:1e:75:aa:04:a3:fa:97:48:7e:
07:cf:5f:5d:3e:1c:05:60:70:98:2d:b0:36:8c:74:
48:3e:9c:81:27:e2:ff:09:38:4c:41:d7:21:ab:1c:
6b:ba:eb:8b:68:a1:f7:0f:b0:ff:5d:14:16:45:4d:
b3:fb:06:ee:33:5f:33:92:0e:4c:67:41:93:df:e3:
94:c8:10:db:09:92:61:32:9b:d1:e0:ff:09:bd:52:
8b:05:50:b5:64:cb:92:02:aa:29:d3:37:56:67:25:
bb:ab:72:1d:0b:bb:78:fd:57:b5:84:8b:14:f0:b9:
a0:83:3b:04:48:f6:b6:4d:33:05:b9:e0:70:e9:5b:
1f:76:9d:90:dc:ac:bd:b3:40:d5:e1:18:e3:f6:d4:
e4:ea:fa:95:2d:f6:ce:44:cd:15:94:08:f9:ff:11:
69:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:87:5B:5F:03:5B:19:F5:D2:FA:0E:02:43:14:92:5D:A9:69:6C:92
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MYdbXwNbGfXS-g4CQxSSXalpbJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:fc1::/48
Signature Algorithm: sha256WithRSAEncryption
7f:b4:e2:00:aa:2e:a8:50:72:ce:95:5a:42:0a:39:17:df:ef:
5a:b8:a3:dd:29:a1:49:49:0f:c1:bd:ad:55:18:f1:46:47:90:
2b:4b:5b:db:ed:53:2d:bb:8a:ba:5d:56:1b:70:9c:27:07:69:
e2:54:5c:53:0b:2d:2f:b0:25:3e:ca:bc:aa:9b:a0:e8:89:0c:
fc:b1:59:b6:86:87:a2:0e:b8:38:5e:27:9b:8a:f8:24:e2:85:
52:58:d5:b8:36:86:2e:ec:c5:0b:02:52:4b:f9:e7:d8:f0:34:
41:94:59:50:cd:6e:3d:ca:53:90:9a:4b:f9:76:71:9c:4e:e2:
4b:63:a8:91:dd:67:82:b3:af:cd:ef:42:f4:36:d0:03:fd:48:
7b:b4:3d:f7:64:9d:fc:79:60:44:ac:8e:d7:36:61:e8:6f:75:
bd:70:04:d1:78:ab:33:8b:bb:4d:8f:10:a4:5c:dd:6a:b5:15:
80:76:72:c8:0f:ea:82:02:56:8f:2f:e5:e4:b2:8b:59:b3:8f:
cf:2d:9f:fd:df:71:24:41:59:5c:3c:85:d8:93:19:31:7a:be:
03:cd:e0:54:68:53:11:1d:bb:02:5b:27:1a:73:93:45:c7:b0:
71:6c:ff:bd:20:0e:5f:a5:02:88:cb:87:cc:7a:22:bf:5c:25:
51:09:e8:c7
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaBZrR/1EZ5TQOGmp/q51dCAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYwODMxMjExNTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTg3NWI1ZjAzNWIxOWY1ZDJmYTBlMDI0MzE0OTI1ZGE5Njk2YzkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy19VLteLRxjevUhyFH3itC3/I3OJ
P+bwPnOFgR9DI92X17XIvGl06bdbPHEmzzCU2t6Xk52opZIpKcEJAbSiMhFNgBes
/lIL/6PVGpdtAZUvawOuQkZz0bU8AGxkos8edaoEo/qXSH4Hz19dPhwFYHCYLbA2
jHRIPpyBJ+L/CThMQdchqxxruuuLaKH3D7D/XRQWRU2z+wbuM18zkg5MZ0GT3+OU
yBDbCZJhMpvR4P8JvVKLBVC1ZMuSAqop0zdWZyW7q3IdC7t4/Ve1hIsU8LmggzsE
SPa2TTMFueBw6Vsfdp2Q3Ky9s0DV4Rjj9tTk6vqVLfbORM0VlAj5/xFpwQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFDGHW18DWxn10voOAkMUkl2paWySMB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvTVlkYlh3TmJHZlhTLWc0Q1F4U1NYYWxwYkpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgaYAQ/B
MA0GCSqGSIb3DQEBCwUAA4IBAQB/tOIAqi6oUHLOlVpCCjkX3+9auKPdKaFJSQ/B
va1VGPFGR5ArS1vb7VMtu4q6XVYbcJwnB2niVFxTCy0vsCU+yryqm6DoiQz8sVm2
hoeiDrg4Xiebivgk4oVSWNW4NoYu7MULAlJL+efY8DRBlFlQzW49ylOQmkv5dnGc
TuJLY6iR3WeCs6/N70L0NtAD/Uh7tD33ZJ38eWBErI7XNmHob3W9cATReKszi7tN
jxCkXN1qtRWAdnLID+qCAlaPL+XksotZs4/PLZ/933EkQVlcPIXYkxkxer4DzeBU
aFMRHbsCWycac5NFx7BxbP+9IA5fpQKIy4fMeiK/XCVRCejH
-----END CERTIFICATE-----
Generated at Mon Sep 21 20:49:50 2026 by rpki-client