Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/NIjKl9A35cQdt12IfTUNadR2M9c.roa
File: NIjKl9A35cQdt12IfTUNadR2M9c.roa (raw, json)
Hash identifier: Y9YspRr8oHiHeKH1C8edrl5BiRFvHEWYpotIYEUb+aQ=
Subject key identifier: 34:88:CA:97:D0:37:E5:C4:1D:B7:5D:88:7D:35:0D:69:D4:76:33:D7
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A1A83C7BD2555E8AAE3B82C5A351AAB7BD
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/NIjKl9A35cQdt12IfTUNadR2M9c.roa
Signing time: Wed 04 Nov 2026 20:24:58 +0000
ROA not before: Wed 04 Nov 2026 20:24:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218196
IP address blocks: 2a06:9801:15cc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a8:3c:7b:d2:55:5e:8a:ae:3b:82:c5:a3:51:aa:b7:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Nov 4 20:24:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3488ca97d037e5c41db75d887d350d69d47633d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:94:90:21:82:cf:39:18:22:e3:c3:9a:19:6c:
71:cb:e1:11:17:1a:ca:34:d6:7d:b9:38:ee:2b:b5:
81:ce:9e:ff:c6:3d:12:9f:cb:db:12:53:69:46:63:
7d:e8:9c:8d:a6:47:40:0f:a1:43:f2:c8:69:5a:05:
6d:b4:0d:23:d5:aa:61:ee:bb:73:2f:b4:b2:96:d4:
91:67:99:17:29:8d:32:65:d1:39:ab:ba:b2:3c:f1:
96:4b:7d:82:70:26:62:ee:98:6c:0c:f5:67:0e:28:
28:4a:20:91:bf:49:6b:4c:84:b8:07:8a:41:44:cd:
39:4d:3d:ad:59:76:e2:46:a9:6f:84:ed:ed:8f:22:
be:72:e8:52:96:ca:bd:77:03:bd:fe:e7:d1:7a:32:
7a:64:6c:f7:ff:4d:30:51:ae:80:fc:f5:d3:e1:55:
01:3f:99:b0:a0:28:2b:b2:af:63:1b:e9:34:1f:f1:
ad:25:08:4c:75:f5:5a:ee:ef:2f:77:f2:00:1d:ad:
13:d3:33:0d:2d:7b:f1:ad:84:1e:b8:4a:7c:6b:d1:
2f:43:d7:53:d1:69:b2:8a:3d:d3:82:b5:99:08:27:
85:9f:58:de:8f:dd:3d:85:04:ca:d1:aa:e8:76:de:
8e:a4:3c:44:7e:7e:b2:93:7a:b3:11:52:5c:b7:b8:
1d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:88:CA:97:D0:37:E5:C4:1D:B7:5D:88:7D:35:0D:69:D4:76:33:D7
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/NIjKl9A35cQdt12IfTUNadR2M9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:15cc::/48
Signature Algorithm: sha256WithRSAEncryption
b2:27:4c:f9:d1:bb:a8:f1:1b:77:50:a9:4b:fc:7d:c7:db:8c:
20:cd:1b:85:06:5a:23:aa:7b:e2:1a:5a:a8:3d:32:7b:80:d5:
e3:89:d3:36:be:37:94:0e:e8:c1:37:f4:4f:07:7d:42:d1:42:
0a:8d:9e:16:b1:6e:00:ba:fb:94:4c:a4:8f:46:f2:af:ac:c8:
6f:fd:9a:b6:fa:7a:eb:95:a7:67:1a:28:22:a5:29:26:5a:ba:
ab:d3:9d:d5:17:42:c0:46:ff:75:51:f2:7c:9b:7e:b6:77:78:
09:fe:d6:25:2d:38:70:37:6c:d8:f2:03:07:da:b4:8c:8a:d9:
b6:32:ed:c7:0f:de:e3:41:76:ed:9f:96:2f:13:e4:ac:6e:f2:
b8:d1:e9:c6:65:59:bb:67:7f:dc:42:26:59:c4:82:8f:7a:9d:
a3:4a:63:df:d8:55:4a:94:36:f4:d6:12:6e:06:06:17:41:0c:
e7:43:59:0e:2d:13:17:db:c8:d1:14:6b:84:1e:a0:3a:28:7b:
20:c4:0c:a3:77:6e:7d:cf:52:8e:bc:b6:60:fa:34:e1:c3:a2:
a3:ba:98:96:0c:9a:8d:11:95:de:81:97:1f:55:a3:d8:1d:b6:
85:ed:de:be:ed:3e:de:39:8e:0d:77:57:dc:2e:15:d0:0e:d0:
f4:20:d5:6c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaGoPHvSVV6KrjuCxaNRqre9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYxMTA0MjAyNDU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDg4Y2E5N2QwMzdlNWM0MWRiNzVkODg3ZDM1MGQ2OWQ0NzYzM2Q3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5SQIYLPORgi48OaGWxxy+ERFxrK
NNZ9uTjuK7WBzp7/xj0Sn8vbElNpRmN96JyNpkdAD6FD8shpWgVttA0j1aph7rtz
L7SyltSRZ5kXKY0yZdE5q7qyPPGWS32CcCZi7phsDPVnDigoSiCRv0lrTIS4B4pB
RM05TT2tWXbiRqlvhO3tjyK+cuhSlsq9dwO9/ufRejJ6ZGz3/00wUa6A/PXT4VUB
P5mwoCgrsq9jG+k0H/GtJQhMdfVa7u8vd/IAHa0T0zMNLXvxrYQeuEp8a9EvQ9dT
0Wmyij3TgrWZCCeFn1jej909hQTK0arodt6OpDxEfn6yk3qzEVJct7gdeQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFDSIypfQN+XEHbddiH01DWnUdjPXMB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvTklqS2w5QTM1Y1FkdDEySWZUVU5hZFIyTTljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgaYARXM
MA0GCSqGSIb3DQEBCwUAA4IBAQCyJ0z50buo8Rt3UKlL/H3H24wgzRuFBlojqnvi
GlqoPTJ7gNXjidM2vjeUDujBN/RPB31C0UIKjZ4WsW4AuvuUTKSPRvKvrMhv/Zq2
+nrrladnGigipSkmWrqr053VF0LARv91UfJ8m362d3gJ/tYlLThwN2zY8gMH2rSM
itm2Mu3HD97jQXbtn5YvE+SsbvK40enGZVm7Z3/cQiZZxIKPep2jSmPf2FVKlDb0
1hJuBgYXQQznQ1kOLRMX28jRFGuEHqA6KHsgxAyjd259z1KOvLZg+jThw6KjupiW
DJqNEZXegZcfVaPYHbaF7d6+7T7eOY4Nd1fcLhXQDtD0INVs
-----END CERTIFICATE-----
Generated at Sun Nov 15 11:55:21 2026 by rpki-client