Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/af_hHgDiUGXZ3pZRIWpbzGcHE4Y.roa
File: af_hHgDiUGXZ3pZRIWpbzGcHE4Y.roa (raw, json)
Hash identifier: lgM2/nszvdY9LCzXqGP9lDkX7fVpTWU+pAczZTFb/jo=
Subject key identifier: 69:FF:E1:1E:00:E2:50:65:D9:DE:96:51:21:6A:5B:CC:67:07:13:86
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A1197A9723B557454F84DD5FFC3BCE54ED
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/af_hHgDiUGXZ3pZRIWpbzGcHE4Y.roa
Signing time: Thu 08 Oct 2026 03:07:06 +0000
ROA not before: Thu 08 Oct 2026 03:07:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199829
IP address blocks: 2a06:9801:7b0::/44 maxlen: 48
2a06:9801:7d0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 04:40:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:7a:97:23:b5:57:45:4f:84:dd:5f:fc:3b:ce:54:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Oct 8 03:07:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69ffe11e00e25065d9de9651216a5bcc67071386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:51:28:ff:ca:e3:19:d7:4b:0f:a1:45:4c:84:
93:d5:5c:00:83:7a:37:96:b9:de:85:7a:05:1e:31:
67:b3:04:6b:fb:c7:7d:6f:7b:a5:c9:d5:ce:69:45:
a8:e4:0a:1b:2d:1f:d3:47:e2:2e:43:ad:3f:78:4a:
86:8b:61:90:27:fb:ef:86:46:66:e8:e2:df:82:39:
c5:61:da:5b:75:6f:08:ea:10:7e:9a:93:0e:f5:db:
4a:29:4a:74:e8:45:ad:10:0b:23:7d:37:5a:cb:39:
f3:94:08:6a:30:b2:fd:82:62:be:9a:50:a2:c0:23:
a5:2b:eb:b0:8d:a7:ef:97:c0:5a:2d:f8:41:0f:a1:
e4:47:46:3c:8d:79:7c:1b:a7:a4:6e:3b:5a:07:44:
0a:cf:bc:ce:9f:f1:ef:bc:26:f5:55:0f:3c:31:f2:
6f:b7:f5:37:3a:9c:5b:f0:d7:90:5f:f2:61:29:7e:
a0:a9:bf:43:9e:22:8f:dc:72:84:be:8e:2e:87:5c:
4f:65:b6:1d:03:40:61:f6:9e:88:44:1c:1a:3b:c1:
b3:16:6e:9c:23:fc:08:53:27:4f:e6:13:9e:a0:f6:
a9:6f:93:69:d1:54:50:e9:ce:e4:18:30:62:f2:38:
61:3b:42:3a:80:32:56:0d:f2:29:85:47:42:62:ff:
11:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:FF:E1:1E:00:E2:50:65:D9:DE:96:51:21:6A:5B:CC:67:07:13:86
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/af_hHgDiUGXZ3pZRIWpbzGcHE4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:7b0::/44
2a06:9801:7d0::/48
Signature Algorithm: sha256WithRSAEncryption
1a:79:48:12:2e:84:97:7a:2e:43:8d:8f:7c:d9:79:5a:10:0e:
ef:64:2b:d2:92:da:57:f1:84:9e:68:3a:56:56:9e:2a:d3:1a:
0b:3d:64:17:3f:be:ca:1b:a1:cf:1a:75:28:ee:df:9e:03:2b:
41:0a:69:3e:a9:80:8c:9f:a0:00:35:ae:a8:19:75:26:3a:17:
39:38:b7:29:bd:d5:8d:85:ec:3e:21:05:7b:bc:8b:2b:95:9b:
e2:24:b1:56:a2:de:52:04:f5:b7:9c:09:02:59:f9:61:9f:da:
0d:31:ff:b8:1c:8e:eb:5d:3c:a5:ee:3d:00:46:e2:0e:c4:3e:
b9:21:f1:5b:63:e6:90:65:9c:23:79:30:b4:c3:b5:4c:64:63:
46:b0:f2:69:a6:3b:be:65:3c:af:3f:3d:b8:cd:29:aa:5e:7a:
fd:7a:9f:ca:25:66:68:61:60:ad:cd:37:99:cf:3c:d7:59:41:
d3:82:79:e2:ac:1a:42:9a:86:3c:c5:81:8a:9c:f5:d6:73:73:
53:fc:61:03:4f:d8:81:7b:de:62:e2:31:ca:97:b6:ae:84:2d:
b4:ca:b6:52:95:1a:15:54:0f:5d:b2:65:8a:1f:72:4e:29:10:
f7:ff:44:a9:67:ff:b0:05:36:c3:d1:83:08:ad:a1:3a:8b:cc:
ff:93:de:47
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaEZepcjtVdFT4TdX/w7zlTtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYxMDA4MDMwNzA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OWZmZTExZTAwZTI1MDY1ZDlkZTk2NTEyMTZhNWJjYzY3MDcxMzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlEo/8rjGddLD6FFTIST1VwAg3o3
lrnehXoFHjFnswRr+8d9b3ulydXOaUWo5AobLR/TR+IuQ60/eEqGi2GQJ/vvhkZm
6OLfgjnFYdpbdW8I6hB+mpMO9dtKKUp06EWtEAsjfTdayznzlAhqMLL9gmK+mlCi
wCOlK+uwjafvl8BaLfhBD6HkR0Y8jXl8G6ekbjtaB0QKz7zOn/HvvCb1VQ88MfJv
t/U3Opxb8NeQX/JhKX6gqb9DniKP3HKEvo4uh1xPZbYdA0Bh9p6IRBwaO8GzFm6c
I/wIUydP5hOeoPapb5Np0VRQ6c7kGDBi8jhhO0I6gDJWDfIphUdCYv8RawIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFGn/4R4A4lBl2d6WUSFqW8xnBxOGMB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvYWZfaEhnRGlVR1haM3BaUklXcGJ6R2NIRTRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcEKgaYAQew
AwcAKgaYAQfQMA0GCSqGSIb3DQEBCwUAA4IBAQAaeUgSLoSXei5DjY982XlaEA7v
ZCvSktpX8YSeaDpWVp4q0xoLPWQXP77KG6HPGnUo7t+eAytBCmk+qYCMn6AANa6o
GXUmOhc5OLcpvdWNhew+IQV7vIsrlZviJLFWot5SBPW3nAkCWflhn9oNMf+4HI7r
XTyl7j0ARuIOxD65IfFbY+aQZZwjeTC0w7VMZGNGsPJppju+ZTyvPz24zSmqXnr9
ep/KJWZoYWCtzTeZzzzXWUHTgnnirBpCmoY8xYGKnPXWc3NT/GEDT9iBe95i4jHK
l7auhC20yrZSlRoVVA9dsmWKH3JOKRD3/0SpZ/+wBTbD0YMIraE6i8z/k95H
-----END CERTIFICATE-----
Generated at Tue Nov 10 14:24:56 2026 by rpki-client