Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/_NkOKZQHWxBa9IMhsOlT55Slkw4.roa
File: _NkOKZQHWxBa9IMhsOlT55Slkw4.roa (raw, json)
Hash identifier: 2gOG0mqAPZ0cYRfIdCOfRl02TTDRo377AOjJn7/N1oo=
Subject key identifier: FC:D9:0E:29:94:07:5B:10:5A:F4:83:21:B0:E9:53:E7:94:A5:93:0E
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019D8E95E16D5F733571F74784BE42DC5231
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/_NkOKZQHWxBa9IMhsOlT55Slkw4.roa
Signing time: Wed 15 Apr 2026 00:41:20 +0000
ROA not before: Wed 15 Apr 2026 00:41:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199037
IP address blocks: 2a06:9801:276::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8e:95:e1:6d:5f:73:35:71:f7:47:84:be:42:dc:52:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Apr 15 00:41:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fcd90e2994075b105af48321b0e953e794a5930e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cd:73:89:f8:38:62:6e:62:1e:e7:2a:81:98:
ae:57:f2:19:14:5e:8b:5c:26:a8:de:d4:42:93:0e:
02:ae:6a:c6:da:e3:62:d2:ad:88:67:62:62:23:61:
ae:87:ba:3a:c6:fb:64:28:7e:67:8e:9d:08:cb:46:
69:17:a8:28:ae:f1:87:b5:4d:6c:ce:5e:8d:79:c3:
ae:71:ca:55:10:0c:d1:ea:65:81:35:45:ce:67:a0:
26:f8:6a:9c:25:f5:0f:9c:5c:f8:bd:a8:b2:5a:62:
c4:37:b4:53:4f:b2:cf:ed:2f:0e:ee:1e:91:f1:e5:
30:5b:a8:7a:14:3b:a9:3e:18:d0:7c:f4:88:c5:88:
11:d6:55:46:02:01:31:5e:23:35:c4:b4:fd:66:f6:
ca:67:f9:86:cd:92:02:38:dd:ac:74:50:31:dc:e2:
a3:65:fc:c8:3b:23:1c:84:e5:34:84:dc:3b:e2:9a:
41:6a:c7:e8:20:81:c6:1c:89:2e:93:40:9b:ea:a7:
83:a2:81:c3:4b:ec:79:d0:19:8f:f2:1f:06:da:db:
b1:43:e2:97:cf:a3:7c:3b:22:9a:e8:72:a4:47:4a:
37:82:02:8f:a6:aa:16:f1:9b:83:39:16:4f:1e:4d:
26:55:09:3b:e7:90:1c:52:91:19:34:0b:4a:8a:5a:
18:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D9:0E:29:94:07:5B:10:5A:F4:83:21:B0:E9:53:E7:94:A5:93:0E
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/_NkOKZQHWxBa9IMhsOlT55Slkw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:276::/48
Signature Algorithm: sha256WithRSAEncryption
03:a5:88:ad:d9:44:4a:6a:3d:c9:25:42:33:e4:25:da:53:19:
f5:34:c3:1f:23:75:59:28:48:d7:b0:59:50:22:d7:b6:07:a7:
da:18:a5:aa:6d:ce:b4:1d:a2:a5:c6:e6:66:f6:8b:c2:ef:8d:
5e:28:60:c8:22:67:44:b7:1e:db:bc:48:d3:8e:09:4a:d3:da:
08:c2:0d:f6:c7:13:84:9a:d9:28:d3:6e:28:46:7f:65:a3:7d:
ea:ab:2a:2d:8a:55:bb:23:c4:77:43:a6:e4:1f:a0:2e:d4:ce:
17:7e:b7:f5:16:82:b1:59:0e:64:e3:9f:ce:dd:fd:fe:cc:71:
a9:b5:ee:49:dd:35:f0:05:cf:07:79:f2:77:ff:39:3d:aa:b6:
5b:13:ce:86:33:6f:8a:5e:1a:41:62:6c:c1:77:4e:46:bc:4a:
b2:46:00:1b:e5:14:f2:47:33:85:5d:bd:5a:d5:74:ee:37:5d:
3d:64:6c:47:ad:ea:fa:2c:29:a4:5b:0f:ee:ed:8f:3f:36:13:
d9:8d:8d:9a:00:7c:2d:f1:4f:2d:61:c3:b0:a9:f6:3c:c0:a5:
2f:e5:f8:5e:4e:b5:14:ed:20:93:44:cb:00:a4:38:b5:cb:4a:
70:cb:17:c2:ce:2d:27:05:23:5b:4f:f8:96:8c:0d:eb:35:d2:
51:64:57:21
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ2OleFtX3M1cfdHhL5C3FIxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYwNDE1MDA0MTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmY2Q5MGUyOTk0MDc1YjEwNWFmNDgzMjFiMGU5NTNlNzk0YTU5MzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxs1zifg4Ym5iHucqgZiuV/IZFF6L
XCao3tRCkw4CrmrG2uNi0q2IZ2JiI2Guh7o6xvtkKH5njp0Iy0ZpF6gorvGHtU1s
zl6NecOuccpVEAzR6mWBNUXOZ6Am+GqcJfUPnFz4vaiyWmLEN7RTT7LP7S8O7h6R
8eUwW6h6FDupPhjQfPSIxYgR1lVGAgExXiM1xLT9ZvbKZ/mGzZICON2sdFAx3OKj
ZfzIOyMchOU0hNw74ppBasfoIIHGHIkuk0Cb6qeDooHDS+x50BmP8h8G2tuxQ+KX
z6N8OyKa6HKkR0o3ggKPpqoW8ZuDORZPHk0mVQk755AcUpEZNAtKiloYmwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFPzZDimUB1sQWvSDIbDpU+eUpZMOMB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvX05rT0taUUhXeEJhOUlNaHNPbFQ1NVNsa3c0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgaYAQJ2
MA0GCSqGSIb3DQEBCwUAA4IBAQADpYit2URKaj3JJUIz5CXaUxn1NMMfI3VZKEjX
sFlQIte2B6faGKWqbc60HaKlxuZm9ovC741eKGDIImdEtx7bvEjTjglK09oIwg32
xxOEmtko024oRn9lo33qqyotilW7I8R3Q6bkH6Au1M4Xfrf1FoKxWQ5k45/O3f3+
zHGpte5J3TXwBc8HefJ3/zk9qrZbE86GM2+KXhpBYmzBd05GvEqyRgAb5RTyRzOF
Xb1a1XTuN109ZGxHrer6LCmkWw/u7Y8/NhPZjY2aAHwt8U8tYcOwqfY8wKUv5fhe
TrUU7SCTRMsApDi1y0pwyxfCzi0nBSNbT/iWjA3rNdJRZFch
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:02:20 2026 by rpki-client