Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/enoQgLlvcLnyza3Gbmqf15VHg7w.roa
File: enoQgLlvcLnyza3Gbmqf15VHg7w.roa (raw, json)
Hash identifier: idk2EuH6NZPBnng1rtf+pmD8AsuA+1O73A6NFc0Wovg=
Subject key identifier: 7A:7A:10:80:B9:6F:70:B9:F2:CD:AD:C6:6E:6A:9F:D7:95:47:83:BC
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A0B66FFDBB06447AEA7A113EE04B9640D0
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/enoQgLlvcLnyza3Gbmqf15VHg7w.roa
Signing time: Fri 18 Sep 2026 21:33:07 +0000
ROA not before: Fri 18 Sep 2026 21:33:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218631
IP address blocks: 2a06:9801:151e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b6:6f:fd:bb:06:44:7a:ea:7a:11:3e:e0:4b:96:40:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Sep 18 21:33:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a7a1080b96f70b9f2cdadc66e6a9fd7954783bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fd:a1:36:8b:78:5d:eb:63:4a:fb:91:6c:8b:
ee:bc:9a:8a:97:72:c7:ae:a0:a5:26:8a:af:c9:6b:
a4:dd:66:ad:ec:3e:02:4f:69:b8:a6:fc:93:80:61:
95:73:2b:9e:d5:84:a4:3a:c1:69:5e:3d:89:30:47:
9b:b8:cf:05:07:8e:c0:c9:3b:f2:b9:82:7c:1a:51:
23:cb:2d:4f:b8:a4:d7:f6:58:34:c9:24:b6:21:16:
67:b3:a8:ea:8d:87:52:9c:ce:0c:eb:9c:1e:3c:a7:
6c:db:92:57:5f:2c:3a:20:7d:34:46:86:88:c2:eb:
09:da:ba:da:c0:75:12:18:ad:6a:c5:85:b1:8b:79:
42:0e:0e:60:b2:a6:8c:cc:c8:64:1a:4f:f4:9c:b2:
a6:db:0a:a1:fe:1e:ff:72:60:16:ef:90:8b:5d:47:
69:65:92:50:89:42:5a:1e:b2:14:87:a1:67:49:01:
cd:92:cc:0e:73:f4:d0:03:e3:a7:82:fb:bc:fd:ff:
b0:3e:dc:73:93:ac:61:2a:23:1a:a4:bc:8e:ed:c1:
9d:bf:47:91:19:77:56:7c:36:f8:85:11:95:c7:b8:
6d:46:96:5c:b2:a5:15:2f:53:2e:52:ab:94:c9:12:
45:f9:85:6f:36:92:85:4d:50:c8:12:bb:8d:9b:d4:
b4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7A:10:80:B9:6F:70:B9:F2:CD:AD:C6:6E:6A:9F:D7:95:47:83:BC
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/enoQgLlvcLnyza3Gbmqf15VHg7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:151e::/48
Signature Algorithm: sha256WithRSAEncryption
c0:18:ed:08:26:64:6a:31:ad:ca:6a:dd:c6:92:0f:c9:57:dc:
61:bc:bb:e1:cc:58:87:27:6f:f5:f1:14:64:0f:bc:2c:d5:ec:
c6:61:f3:07:5d:77:f8:35:e9:1f:ef:24:9e:71:3b:d2:b3:8f:
ae:31:64:0a:68:e2:38:ad:ff:f2:ce:e5:96:5f:85:a9:8d:bb:
2e:70:d9:88:9c:73:cf:4d:44:c2:28:0d:cb:e1:7b:7c:fc:24:
db:c4:a0:69:a2:e4:ad:c8:27:5b:ea:37:83:67:cc:e4:f6:ca:
b4:5b:83:82:c3:74:1f:ef:df:0a:b3:8e:32:85:f0:96:7d:0c:
52:e8:e5:26:ee:41:4c:9d:c5:a1:e1:5a:f3:54:e9:95:2b:de:
ae:57:fe:70:1a:3e:f0:a3:6d:d9:d4:54:16:0a:64:ad:63:23:
da:45:5d:74:da:53:c0:2f:b8:ed:65:48:bb:92:41:b0:9d:38:
7b:2a:b9:b0:0d:5b:bc:f1:a7:c8:0c:28:e4:89:c8:92:c4:5f:
e1:28:65:5a:7b:d5:fb:ad:9b:a1:8b:98:e0:2c:e5:90:16:43:
09:4e:08:f2:f8:ad:cc:d3:cb:5b:04:ea:01:95:1e:83:bb:ee:
91:c4:2f:47:7e:a9:41:fd:6d:ec:54:99:0d:c1:e4:bd:a3:3f:
e5:e6:a4:3a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaC2b/27BkR66noRPuBLlkDQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYwOTE4MjEzMzA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTdhMTA4MGI5NmY3MGI5ZjJjZGFkYzY2ZTZhOWZkNzk1NDc4M2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxP2hNot4XetjSvuRbIvuvJqKl3LH
rqClJoqvyWuk3Wat7D4CT2m4pvyTgGGVcyue1YSkOsFpXj2JMEebuM8FB47AyTvy
uYJ8GlEjyy1PuKTX9lg0ySS2IRZns6jqjYdSnM4M65wePKds25JXXyw6IH00RoaI
wusJ2rrawHUSGK1qxYWxi3lCDg5gsqaMzMhkGk/0nLKm2wqh/h7/cmAW75CLXUdp
ZZJQiUJaHrIUh6FnSQHNkswOc/TQA+Ongvu8/f+wPtxzk6xhKiMapLyO7cGdv0eR
GXdWfDb4hRGVx7htRpZcsqUVL1MuUquUyRJF+YVvNpKFTVDIEruNm9S0xQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFHp6EIC5b3C58s2txm5qn9eVR4O8MB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvZW5vUWdMbHZjTG55emEzR2JtcWYxNVZIZzd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgaYARUe
MA0GCSqGSIb3DQEBCwUAA4IBAQDAGO0IJmRqMa3Kat3Gkg/JV9xhvLvhzFiHJ2/1
8RRkD7ws1ezGYfMHXXf4Nekf7ySecTvSs4+uMWQKaOI4rf/yzuWWX4WpjbsucNmI
nHPPTUTCKA3L4Xt8/CTbxKBpouStyCdb6jeDZ8zk9sq0W4OCw3Qf798Ks44yhfCW
fQxS6OUm7kFMncWh4VrzVOmVK96uV/5wGj7wo23Z1FQWCmStYyPaRV102lPAL7jt
ZUi7kkGwnTh7KrmwDVu88afIDCjkiciSxF/hKGVae9X7rZuhi5jgLOWQFkMJTgjy
+K3M08tbBOoBlR6Du+6RxC9HfqlB/W3sVJkNweS9oz/l5qQ6
-----END CERTIFICATE-----
Generated at Mon Sep 21 14:47:50 2026 by rpki-client