Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/TO-7xxLZYQ8UO5FnDaXnOBpKIv4.roa
File: TO-7xxLZYQ8UO5FnDaXnOBpKIv4.roa (raw, json)
Hash identifier: Bx1Hl3DBbl8SpMyBqTKB2+ZAnZhPRryuTzWFrWaKDIY=
Subject key identifier: 4C:EF:BB:C7:12:D9:61:0F:14:3B:91:67:0D:A5:E7:38:1A:4A:22:FE
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019D6ACEF1E839FA67B9A303EE59B18B7649
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/TO-7xxLZYQ8UO5FnDaXnOBpKIv4.roa
Signing time: Wed 08 Apr 2026 01:57:20 +0000
ROA not before: Wed 08 Apr 2026 01:57:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199632
IP address blocks: 2a06:9801:265::/48 maxlen: 48
2a06:9801:278::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6a:ce:f1:e8:39:fa:67:b9:a3:03:ee:59:b1:8b:76:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Apr 8 01:57:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4cefbbc712d9610f143b91670da5e7381a4a22fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:38:24:40:df:c3:b3:16:b3:61:d4:73:10:fe:
59:cf:7a:25:cf:9e:04:d0:2a:35:8d:da:5a:9c:8e:
ac:27:ca:4e:41:c2:ee:0d:6f:56:4a:41:09:39:e0:
9d:8f:b6:de:7d:4a:ca:3d:6f:c3:18:9c:32:28:e2:
fb:46:3b:9e:3e:e4:a9:c3:ec:b9:1e:c0:7f:6a:50:
ab:97:fe:8a:57:52:18:05:84:7e:cf:b7:06:68:0c:
24:e9:dc:89:11:e3:32:48:a0:1a:66:fc:e7:26:d1:
a8:79:07:49:d6:5a:0e:25:bd:7a:d3:8c:26:a4:6b:
47:71:a1:d5:fd:ef:79:a2:3e:6b:e2:c6:18:32:ba:
44:40:85:72:bf:27:bb:a2:41:32:26:f8:53:ca:0f:
e3:14:8d:2d:bd:b7:6f:82:f0:0f:39:64:ca:4c:90:
01:24:01:98:55:70:3e:27:5b:b9:9b:06:29:59:6a:
a4:74:d6:26:d7:b1:f9:70:1a:16:5c:35:3f:db:41:
9b:75:86:6f:a2:b7:10:a8:12:0e:5e:bc:02:79:90:
90:22:f9:fb:4d:e4:3a:1f:49:79:bb:07:cd:2b:fa:
ea:cb:18:15:69:92:e8:21:c8:d1:2d:1c:51:d9:f2:
82:f2:45:cb:2f:8b:cb:b7:8f:61:94:5e:87:79:80:
67:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:EF:BB:C7:12:D9:61:0F:14:3B:91:67:0D:A5:E7:38:1A:4A:22:FE
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/TO-7xxLZYQ8UO5FnDaXnOBpKIv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:265::/48
2a06:9801:278::/48
Signature Algorithm: sha256WithRSAEncryption
28:ce:99:56:e8:f4:61:4b:5d:47:3d:ca:17:b5:34:16:e9:af:
61:29:84:f1:27:65:dd:8a:e5:1d:48:dd:4a:44:82:05:68:e9:
9d:34:f5:a0:a4:06:6d:aa:b7:da:3e:99:ed:6a:df:99:0e:77:
de:5d:1b:7b:f4:a2:6c:8b:b2:d2:19:aa:07:e0:a5:9e:13:9c:
a2:15:be:9f:d4:f8:c2:c9:52:8a:40:49:45:c2:1b:2e:74:7a:
5b:1d:86:52:30:97:61:69:cb:5f:1b:b3:7f:58:c5:85:15:eb:
98:cc:cf:2b:c5:be:a7:ef:b4:bd:c3:2a:a2:b4:2b:44:e9:74:
bc:fb:4c:c2:91:ed:07:db:eb:a6:05:8d:38:19:d0:7d:4c:28:
1c:8e:f9:d8:16:62:58:6d:82:55:3b:7a:d6:af:64:a5:a9:3e:
24:2d:db:80:9e:15:f3:03:5d:eb:25:0a:0a:2c:97:a6:1c:37:
d2:8a:0f:f8:7e:fe:e9:80:bf:b4:22:82:e0:c1:fc:72:b1:f0:
4c:1c:a2:0e:1b:b6:a9:16:b0:64:69:42:20:56:aa:5c:25:f9:
32:a9:2f:9d:ee:34:78:d0:57:da:fd:57:6d:be:47:16:00:15:
d1:54:f1:b7:68:c3:55:b0:d9:d3:de:22:39:2a:af:5a:64:11:
e0:0f:0a:97
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ1qzvHoOfpnuaMD7lmxi3ZJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYwNDA4MDE1NzIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Y2VmYmJjNzEyZDk2MTBmMTQzYjkxNjcwZGE1ZTczODFhNGEyMmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DgkQN/DsxazYdRzEP5Zz3olz54E
0Co1jdpanI6sJ8pOQcLuDW9WSkEJOeCdj7befUrKPW/DGJwyKOL7RjuePuSpw+y5
HsB/alCrl/6KV1IYBYR+z7cGaAwk6dyJEeMySKAaZvznJtGoeQdJ1loOJb1604wm
pGtHcaHV/e95oj5r4sYYMrpEQIVyvye7okEyJvhTyg/jFI0tvbdvgvAPOWTKTJAB
JAGYVXA+J1u5mwYpWWqkdNYm17H5cBoWXDU/20GbdYZvorcQqBIOXrwCeZCQIvn7
TeQ6H0l5uwfNK/rqyxgVaZLoIcjRLRxR2fKC8kXLL4vLt49hlF6HeYBnGQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFEzvu8cS2WEPFDuRZw2l5zgaSiL+MB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvVE8tN3h4TFpZUThVTzVGbkRhWG5PQnBLSXY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgaYAQJl
AwcAKgaYAQJ4MA0GCSqGSIb3DQEBCwUAA4IBAQAozplW6PRhS11HPcoXtTQW6a9h
KYTxJ2XdiuUdSN1KRIIFaOmdNPWgpAZtqrfaPpntat+ZDnfeXRt79KJsi7LSGaoH
4KWeE5yiFb6f1PjCyVKKQElFwhsudHpbHYZSMJdhactfG7N/WMWFFeuYzM8rxb6n
77S9wyqitCtE6XS8+0zCke0H2+umBY04GdB9TCgcjvnYFmJYbYJVO3rWr2SlqT4k
LduAnhXzA13rJQoKLJemHDfSig/4fv7pgL+0IoLgwfxysfBMHKIOG7apFrBkaUIg
VqpcJfkyqS+d7jR40Ffa/VdtvkcWABXRVPG3aMNVsNnT3iI5Kq9aZBHgDwqX
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:27:48 2026 by rpki-client