Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/YZmUithstHzlfVmi5a3mS_dpFYE.roa
File: YZmUithstHzlfVmi5a3mS_dpFYE.roa (raw, json)
Hash identifier: DwS59DI9LFUY0AvfI/Va+1I3BtFw3/x6jOsMnHEcX0s=
Subject key identifier: 61:99:94:8A:D8:6C:B4:7C:E5:7D:59:A2:E5:AD:E6:4B:F7:69:15:81
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019FFDA26D985B51964880BE247EA7DFD7C1
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/YZmUithstHzlfVmi5a3mS_dpFYE.roa
Signing time: Fri 14 Aug 2026 00:18:28 +0000
ROA not before: Fri 14 Aug 2026 00:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219148
IP address blocks: 2a06:9801:f1d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fd:a2:6d:98:5b:51:96:48:80:be:24:7e:a7:df:d7:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Aug 14 00:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6199948ad86cb47ce57d59a2e5ade64bf7691581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cf:06:83:98:94:bd:27:f1:0c:73:ba:cb:04:
5d:d1:24:7e:11:8d:78:b8:85:92:97:64:29:5a:98:
b5:af:d7:67:35:d5:13:e3:1a:a9:c8:6f:ae:9d:02:
b3:bc:64:f3:48:c1:dc:8c:7f:ed:1b:33:4e:84:3a:
99:fe:14:12:a9:ff:ea:6f:ef:d6:56:0d:88:b2:83:
2f:11:b4:d0:00:13:6b:1c:b9:84:0b:23:59:1a:8b:
9e:5f:52:5a:54:42:45:e8:4e:1f:aa:f5:8f:01:2a:
5f:88:db:18:cc:7c:10:21:01:de:f9:a7:5b:71:85:
da:79:36:8f:17:4a:c2:cc:dd:4b:0d:97:d2:39:6a:
13:71:f2:12:f2:2a:8b:94:c1:2f:c9:f6:f2:be:64:
92:33:be:c2:65:4a:3c:e1:a7:5b:06:4c:35:df:0f:
04:c7:f0:45:36:96:83:ca:77:2f:6e:97:81:15:2e:
3e:da:45:1e:96:d1:ad:65:fb:82:4f:47:11:30:c5:
d9:e5:76:04:16:a6:24:4f:11:2e:ab:2b:aa:0f:2a:
30:ed:51:79:67:e4:c6:f2:dd:63:13:58:a4:60:0a:
bd:8c:bf:76:f3:fd:dc:44:7b:6f:fe:c4:c0:f4:0a:
6f:d0:ec:65:0f:ef:fe:c1:17:66:19:0b:95:19:88:
13:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:99:94:8A:D8:6C:B4:7C:E5:7D:59:A2:E5:AD:E6:4B:F7:69:15:81
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/YZmUithstHzlfVmi5a3mS_dpFYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:f1d::/48
Signature Algorithm: sha256WithRSAEncryption
0f:f1:9d:dc:48:84:a6:15:36:9c:ae:c1:89:db:51:a8:b5:b0:
93:77:6a:8b:bf:23:52:ad:82:84:7f:4e:83:c6:fb:58:3b:a0:
ff:3b:ce:b8:42:6b:bc:ce:92:f2:a9:0c:aa:32:4c:8f:a5:ee:
f8:68:36:d5:04:d2:5f:cf:19:5e:08:db:a3:23:b2:2e:83:7e:
2f:8b:58:45:e2:69:15:f6:5a:3d:81:76:fd:05:cf:55:b3:39:
22:18:a4:5e:7c:f5:fb:f6:2f:9c:39:68:5b:a1:ac:3f:fd:f5:
ad:34:2b:00:aa:68:1b:6b:91:d4:c4:07:c8:25:77:59:2e:39:
b0:9f:b4:3f:3f:d5:5a:1a:99:f9:74:ab:f7:6b:64:19:ad:c6:
11:55:9f:19:1b:55:5c:eb:00:74:a4:39:de:d9:ff:e9:8a:9f:
50:47:35:af:91:a7:a8:f7:11:25:63:d6:48:ce:38:f9:cb:e8:
ce:54:a7:59:e3:73:ec:be:0d:ae:79:15:5f:b8:c5:ff:88:4f:
64:1f:a9:ec:5a:7b:80:f8:9c:2c:93:47:46:cb:20:05:ca:9d:
88:ea:b7:28:3c:32:4f:59:6b:fe:94:dc:78:b3:38:a9:6e:4d:
a7:9a:29:ef:f1:66:a5:13:77:3b:e4:2a:70:54:8d:96:7b:5c:
fb:c0:29:f8
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ/9om2YW1GWSIC+JH6n39fBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYwODE0MDAxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTk5OTQ4YWQ4NmNiNDdjZTU3ZDU5YTJlNWFkZTY0YmY3NjkxNTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo88Gg5iUvSfxDHO6ywRd0SR+EY14
uIWSl2QpWpi1r9dnNdUT4xqpyG+unQKzvGTzSMHcjH/tGzNOhDqZ/hQSqf/qb+/W
Vg2IsoMvEbTQABNrHLmECyNZGoueX1JaVEJF6E4fqvWPASpfiNsYzHwQIQHe+adb
cYXaeTaPF0rCzN1LDZfSOWoTcfIS8iqLlMEvyfbyvmSSM77CZUo84adbBkw13w8E
x/BFNpaDyncvbpeBFS4+2kUeltGtZfuCT0cRMMXZ5XYEFqYkTxEuqyuqDyow7VF5
Z+TG8t1jE1ikYAq9jL928/3cRHtv/sTA9Apv0OxlD+/+wRdmGQuVGYgTzwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFGGZlIrYbLR85X1ZouWt5kv3aRWBMB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvWVptVWl0aHN0SHpsZlZtaTVhM21TX2RwRllFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgaYAQ8d
MA0GCSqGSIb3DQEBCwUAA4IBAQAP8Z3cSISmFTacrsGJ21GotbCTd2qLvyNSrYKE
f06DxvtYO6D/O864Qmu8zpLyqQyqMkyPpe74aDbVBNJfzxleCNujI7Iug34vi1hF
4mkV9lo9gXb9Bc9VszkiGKRefPX79i+cOWhboaw//fWtNCsAqmgba5HUxAfIJXdZ
Ljmwn7Q/P9VaGpn5dKv3a2QZrcYRVZ8ZG1Vc6wB0pDne2f/pip9QRzWvkaeo9xEl
Y9ZIzjj5y+jOVKdZ43Psvg2ueRVfuMX/iE9kH6nsWnuA+Jwsk0dGyyAFyp2I6rco
PDJPWWv+lNx4szipbk2nminv8WalE3c75CpwVI2We1z7wCn4
-----END CERTIFICATE-----
Generated at Sun Sep 20 23:52:13 2026 by rpki-client