Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/aY3lzwXFKnLxX6LKuKWgPckuRTI.roa
File: aY3lzwXFKnLxX6LKuKWgPckuRTI.roa (raw, json)
Hash identifier: +Zi3oNrc44prUND6OE9XUb5MOhFjDYzcaXQIPX0LYSc=
Subject key identifier: 69:8D:E5:CF:05:C5:2A:72:F1:5F:A2:CA:B8:A5:A0:3D:C9:2E:45:32
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A1276F6A868BE5FEF493A11A7FFFD3CBCE
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/aY3lzwXFKnLxX6LKuKWgPckuRTI.roa
Signing time: Sat 10 Oct 2026 20:09:35 +0000
ROA not before: Sat 10 Oct 2026 20:09:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204464
IP address blocks: 2a06:9801:85::/48 maxlen: 48
2a06:9801:90::/44 maxlen: 44
2a06:9801:a0::/44 maxlen: 44
2a06:9801:1588::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:6f:6a:86:8b:e5:fe:f4:93:a1:1a:7f:ff:d3:cb:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Oct 10 20:09:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=698de5cf05c52a72f15fa2cab8a5a03dc92e4532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:98:a8:bb:2f:81:6d:ce:de:5d:be:48:6f:43:
07:99:ef:b6:fb:79:d4:c3:68:f3:d0:ef:c8:52:b3:
81:8b:2b:c7:eb:6b:cf:17:0b:33:d6:21:bc:c2:a4:
d2:dd:20:d0:ff:c1:12:44:98:31:a5:28:17:17:5c:
70:a0:06:fc:2f:64:4e:b3:2e:b0:2c:38:6c:a1:fe:
d8:67:b3:55:1f:cf:1f:87:2d:e5:dd:79:a6:f4:dc:
78:99:5f:88:5d:be:a6:42:dd:ca:81:1e:c8:6d:d4:
ab:c8:53:78:b7:9e:9a:01:1e:fe:76:20:22:2d:43:
74:e5:b2:21:66:92:fb:86:ec:73:ae:ef:86:17:e0:
f8:18:65:8e:f8:f4:fc:ba:8f:c2:02:74:d9:e1:25:
5c:de:a5:46:55:9c:b2:80:c5:22:f2:67:6b:71:59:
39:e1:c5:04:5c:97:e7:5a:b3:0b:bd:5b:bb:3b:8a:
f8:f9:a0:dd:46:d3:54:75:a1:24:ff:36:73:a4:fe:
86:16:d3:10:1a:f3:23:d7:62:09:b5:21:5a:69:74:
7b:c8:f7:28:aa:90:88:49:cd:75:e5:3a:64:ab:e1:
67:08:50:cf:dc:cb:cf:9b:17:5d:9a:2a:da:df:4b:
61:e7:e5:3b:a1:2f:2d:55:f0:42:f3:1a:ad:cb:88:
07:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:8D:E5:CF:05:C5:2A:72:F1:5F:A2:CA:B8:A5:A0:3D:C9:2E:45:32
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/aY3lzwXFKnLxX6LKuKWgPckuRTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:85::/48
2a06:9801:90::-2a06:9801:af:ffff:ffff:ffff:ffff:ffff
2a06:9801:1588::/48
Signature Algorithm: sha256WithRSAEncryption
62:81:be:88:55:ba:42:cf:1a:44:b0:fe:4f:b2:ac:dc:0c:96:
05:47:48:be:27:fa:32:12:09:f3:ae:61:54:6a:5a:73:57:5c:
37:88:7b:00:ed:d0:96:84:50:22:b2:ac:31:7b:7d:26:7e:ce:
56:aa:d1:a6:ea:00:3f:d2:ac:38:bc:00:c8:88:65:17:e8:99:
41:b1:6a:90:8e:76:40:e0:26:9b:a9:29:fb:a5:e1:f7:dd:ff:
43:b9:a1:45:f0:1c:a9:8d:20:08:c4:61:3c:17:50:72:a2:27:
96:25:05:2b:a3:f9:27:71:cd:a6:5f:07:8f:92:61:6f:8f:72:
44:3c:ae:e1:12:c4:b8:6b:3e:05:94:e3:62:bc:83:93:0b:4b:
a5:73:0f:3e:1d:b7:b1:70:c1:08:10:33:65:a4:36:ca:bd:1d:
e4:bc:2a:53:55:b0:4e:75:5d:75:16:a5:e5:1a:26:d1:80:f9:
b2:ba:72:ac:69:07:de:ac:ae:f0:31:9e:92:de:4a:06:4e:08:
d6:99:03:e2:79:dc:a6:0f:45:0c:d0:d8:c9:c8:02:af:db:1a:
63:8e:4a:9e:19:43:db:17:dd:da:63:a4:c4:13:e7:86:0b:41:
37:2e:e2:16:88:7b:f6:27:9c:7e:cb:29:a9:16:c6:c1:a8:d5:
8d:e4:6a:26
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAaEnb2qGi+X+9JOhGn//08vOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYxMDEwMjAwOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OThkZTVjZjA1YzUyYTcyZjE1ZmEyY2FiOGE1YTAzZGM5MmU0NTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJiouy+Bbc7eXb5Ib0MHme+2+3nU
w2jz0O/IUrOBiyvH62vPFwsz1iG8wqTS3SDQ/8ESRJgxpSgXF1xwoAb8L2ROsy6w
LDhsof7YZ7NVH88fhy3l3Xmm9Nx4mV+IXb6mQt3KgR7IbdSryFN4t56aAR7+diAi
LUN05bIhZpL7huxzru+GF+D4GGWO+PT8uo/CAnTZ4SVc3qVGVZyygMUi8mdrcVk5
4cUEXJfnWrMLvVu7O4r4+aDdRtNUdaEk/zZzpP6GFtMQGvMj12IJtSFaaXR7yPco
qpCISc115Tpkq+FnCFDP3MvPmxddmira30th5+U7oS8tVfBC8xqty4gHVwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFGmN5c8FxSpy8V+iyriloD3JLkUyMB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvYVkzbHp3WEZLbkx4WDZMS3VLV2dQY2t1UlRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAAjAmAwcAKgaYAQCF
MBIDBwQqBpgBAJADBwQqBpgBAKADBwAqBpgBFYgwDQYJKoZIhvcNAQELBQADggEB
AGKBvohVukLPGkSw/k+yrNwMlgVHSL4n+jISCfOuYVRqWnNXXDeIewDt0JaEUCKy
rDF7fSZ+zlaq0abqAD/SrDi8AMiIZRfomUGxapCOdkDgJpupKful4ffd/0O5oUXw
HKmNIAjEYTwXUHKiJ5YlBSuj+SdxzaZfB4+SYW+PckQ8ruESxLhrPgWU42K8g5ML
S6VzDz4dt7FwwQgQM2WkNsq9HeS8KlNVsE51XXUWpeUaJtGA+bK6cqxpB96srvAx
npLeSgZOCNaZA+J53KYPRQzQ2MnIAq/bGmOOSp4ZQ9sX3dpjpMQT54YLQTcu4haI
e/YnnH7LKakWxsGo1Y3kaiY=
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:19:37 2026 by rpki-client