Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/WFYhfcRrHwulusBopQw7bTvGQhQ.roa
File: WFYhfcRrHwulusBopQw7bTvGQhQ.roa (raw, json)
Hash identifier: kayeKNDWNq7GkefFZZ4JQ+bUNziLtVBXIItgr7d5oiE=
Subject key identifier: 58:56:21:7D:C4:6B:1F:0B:A5:BA:C0:68:A5:0C:3B:6D:3B:C6:42:14
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019C54231BB2E62C4BF1C293335EF351E5B3
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/WFYhfcRrHwulusBopQw7bTvGQhQ.roa
Signing time: Thu 12 Feb 2026 23:15:12 +0000
ROA not before: Thu 12 Feb 2026 23:15:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213434
IP address blocks: 2a06:9801:70::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:54:23:1b:b2:e6:2c:4b:f1:c2:93:33:5e:f3:51:e5:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Feb 12 23:15:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5856217dc46b1f0ba5bac068a50c3b6d3bc64214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:58:f6:de:fc:00:59:06:47:1a:ed:8b:67:7c:
9c:78:b7:63:3a:77:20:42:b9:b3:64:22:7f:a6:56:
6d:11:bd:7a:dc:81:6a:c2:ab:6a:25:af:c4:f3:0c:
6f:3e:cb:bc:23:30:89:d6:30:f0:1e:b3:13:15:cc:
f0:17:35:4e:b8:3f:c2:77:d4:1f:28:e5:15:ce:e4:
51:90:3e:0a:ab:3c:8d:6e:5b:27:1d:ba:44:47:aa:
8c:50:bc:09:54:0f:be:79:83:06:20:6f:dc:28:f2:
c3:fe:f1:5e:e0:a3:dd:d3:10:03:e7:93:1b:8a:af:
28:c8:c8:c6:26:7e:43:b9:57:79:cf:80:65:ba:c7:
b4:09:49:c2:1d:e4:ba:60:97:11:18:39:26:76:0c:
17:0e:42:6a:c0:be:8c:82:e1:48:64:0e:90:5c:b9:
d7:5d:02:e0:59:10:ee:82:5c:a1:67:c6:ed:0e:df:
03:f2:75:9c:38:d6:1b:a5:fe:f5:4c:2e:22:63:a6:
00:7d:d6:41:4b:e8:60:17:df:ee:21:6a:b8:27:98:
cd:b9:9c:57:25:be:69:8b:43:08:79:73:bf:59:1f:
8b:fa:47:d0:3b:20:bb:e6:3e:a4:7d:f4:48:6a:dc:
5e:6f:75:3a:aa:ef:37:90:39:cd:a6:ec:48:23:4f:
ce:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:56:21:7D:C4:6B:1F:0B:A5:BA:C0:68:A5:0C:3B:6D:3B:C6:42:14
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/WFYhfcRrHwulusBopQw7bTvGQhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:70::/44
Signature Algorithm: sha256WithRSAEncryption
71:eb:11:c7:19:fe:f0:73:4d:3a:73:a8:7e:2d:c0:83:73:49:
b3:b5:bf:07:79:89:04:7b:02:61:a3:c6:6f:92:da:e7:46:d3:
3b:8d:e5:63:dc:a4:77:26:d2:76:18:91:38:d5:e8:47:45:64:
f1:75:4b:7c:f2:63:c8:3b:da:bf:f0:22:7f:f5:cc:58:d3:dd:
eb:12:3f:ae:98:f6:d2:87:f3:6c:16:e9:2c:15:7a:24:58:21:
10:03:86:1e:d6:a4:ba:99:0a:bf:5a:57:fe:39:64:40:0e:05:
ba:f8:a3:ae:9b:18:37:d9:c4:cb:f7:4d:e1:b7:bb:57:de:a2:
f9:bd:2b:cf:90:52:67:03:d5:48:aa:e9:56:b7:54:c9:22:0b:
06:42:47:ea:fb:5b:c4:a4:13:33:5f:f2:4a:5e:0e:16:be:94:
13:9d:23:01:fa:8f:63:ff:32:cb:66:46:68:12:4d:55:ce:84:
6d:95:10:10:24:10:a9:04:12:13:15:3e:e4:8d:1f:72:8f:f8:
f7:a8:1f:b9:bc:14:f1:71:36:21:80:ce:98:34:ec:e7:f9:f7:
54:a6:41:a1:4b:79:fb:69:94:69:d1:87:10:92:d2:3f:a7:12:
54:a2:2d:2f:02:fe:dc:eb:a4:27:bc:bd:7a:38:dc:c3:1e:b1:
23:c7:ec:94
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZxUIxuy5ixL8cKTM17zUeWzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYwMjEyMjMxNTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODU2MjE3ZGM0NmIxZjBiYTViYWMwNjhhNTBjM2I2ZDNiYzY0MjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVj23vwAWQZHGu2LZ3yceLdjOncg
QrmzZCJ/plZtEb163IFqwqtqJa/E8wxvPsu8IzCJ1jDwHrMTFczwFzVOuD/Cd9Qf
KOUVzuRRkD4KqzyNblsnHbpER6qMULwJVA++eYMGIG/cKPLD/vFe4KPd0xAD55Mb
iq8oyMjGJn5DuVd5z4Bluse0CUnCHeS6YJcRGDkmdgwXDkJqwL6MguFIZA6QXLnX
XQLgWRDuglyhZ8btDt8D8nWcONYbpf71TC4iY6YAfdZBS+hgF9/uIWq4J5jNuZxX
Jb5pi0MIeXO/WR+L+kfQOyC75j6kffRIatxeb3U6qu83kDnNpuxII0/OuwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFhWIX3Eax8LpbrAaKUMO207xkIUMB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvV0ZZaGZjUnJId3VsdXNCb3BRdzdiVHZHUWhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgaYAQBw
MA0GCSqGSIb3DQEBCwUAA4IBAQBx6xHHGf7wc006c6h+LcCDc0mztb8HeYkEewJh
o8ZvktrnRtM7jeVj3KR3JtJ2GJE41ehHRWTxdUt88mPIO9q/8CJ/9cxY093rEj+u
mPbSh/NsFuksFXokWCEQA4Ye1qS6mQq/Wlf+OWRADgW6+KOumxg32cTL903ht7tX
3qL5vSvPkFJnA9VIqulWt1TJIgsGQkfq+1vEpBMzX/JKXg4WvpQTnSMB+o9j/zLL
ZkZoEk1VzoRtlRAQJBCpBBITFT7kjR9yj/j3qB+5vBTxcTYhgM6YNOzn+fdUpkGh
S3n7aZRp0YcQktI/pxJUoi0vAv7c66QnvL16ONzDHrEjx+yU
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:06:33 2026 by rpki-client