Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/mUkS2GJPyYPyeYNp-_5hWgJi3Xg.roa
File: mUkS2GJPyYPyeYNp-_5hWgJi3Xg.roa (raw, json)
Hash identifier: XC5m668X/dUAEgSp1rzrx179l4bCAdloWNt2vX3Uv+k=
Subject key identifier: 99:49:12:D8:62:4F:C9:83:F2:79:83:69:FB:FE:61:5A:02:62:DD:78
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A05DE1C8F85DB6D5ED671731AC8815EE38
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/mUkS2GJPyYPyeYNp-_5hWgJi3Xg.roa
Signing time: Tue 01 Sep 2026 16:51:13 +0000
ROA not before: Tue 01 Sep 2026 16:51:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218788
IP address blocks: 2a06:9801:7fc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:e1:c8:f8:5d:b6:d5:ed:67:17:31:ac:88:15:ee:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Sep 1 16:51:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=994912d8624fc983f2798369fbfe615a0262dd78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e7:51:b0:69:6b:c0:e5:4c:dd:23:31:a1:ca:
10:3e:3b:d9:4b:f1:94:67:33:61:f4:fd:85:55:25:
24:5d:69:15:fe:80:69:f6:c6:8c:40:a3:f4:9d:6e:
08:c9:86:25:2e:8c:fb:0c:1c:4c:69:aa:62:5b:65:
fe:e9:69:b5:c8:b7:86:fe:df:39:bd:0b:be:3d:70:
17:3a:1d:c0:e9:1d:01:84:48:b0:98:78:b5:f9:f4:
44:fb:97:7d:f6:6c:54:38:69:97:e9:56:a2:d0:39:
17:ac:80:d7:d3:ce:fb:f5:e4:dd:6a:9c:28:ae:2b:
97:63:23:b9:8c:ee:ad:6c:84:67:f7:35:74:8a:6e:
d4:80:01:72:ef:7d:77:56:03:19:b9:db:9a:94:00:
2d:1f:74:6a:53:07:df:7b:13:3d:12:57:a1:71:8d:
82:ac:93:8b:ac:e4:f4:da:ed:bc:e8:3f:07:02:2c:
52:e9:e4:5a:94:b2:40:e4:3c:8c:b8:ca:c8:60:01:
4d:3f:c9:6c:5b:47:ee:89:8f:f4:b5:4e:37:27:43:
d9:3e:7a:8f:00:cd:36:63:23:04:55:25:57:c9:28:
93:5d:65:ac:72:37:ec:2b:40:23:5f:b0:2e:e1:7f:
38:ce:c6:cd:cf:39:b2:6e:66:b7:b8:1a:73:23:f7:
fc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:49:12:D8:62:4F:C9:83:F2:79:83:69:FB:FE:61:5A:02:62:DD:78
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/mUkS2GJPyYPyeYNp-_5hWgJi3Xg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:7fc::/48
Signature Algorithm: sha256WithRSAEncryption
3f:5b:37:ee:6a:97:44:7e:11:ce:a8:aa:a3:e2:2a:41:0c:1a:
04:48:62:a5:74:e6:47:fa:2c:b9:3b:d0:ec:59:0d:22:14:3a:
17:57:2a:6c:89:f5:f8:4e:4e:3d:18:e5:91:43:38:48:b0:75:
8f:d1:a2:c4:98:db:fa:57:77:29:f5:86:42:7c:44:18:81:3f:
9a:69:f3:c0:c9:68:01:37:38:26:8f:84:db:76:b4:bc:3f:83:
61:94:8e:0e:35:6a:a7:49:fb:85:d9:9c:99:74:75:b3:7d:c5:
ba:d9:ac:31:7c:e6:c8:b8:a0:fb:68:34:15:d2:c6:5e:f7:1c:
fa:db:8b:b8:3b:0c:95:81:cd:09:d4:92:a1:97:75:f8:aa:30:
45:90:cb:51:79:89:20:2f:ef:95:43:57:4c:5f:bf:35:be:5c:
24:9e:e5:c5:4f:53:61:81:69:15:c6:f6:cd:4e:31:ac:da:4e:
27:e5:17:bf:c9:ef:44:bc:57:1c:d9:35:fd:0d:45:a2:4a:9c:
c5:1b:c7:7e:7c:3f:db:48:54:2f:b3:93:fc:9f:c6:d7:bc:0f:
ef:e6:60:24:4f:72:f7:04:c0:c4:ae:3e:aa:7a:b3:a1:90:57:
b2:8e:f2:1f:2e:2d:a5:a7:a7:ab:e1:3a:1a:8d:2c:39:2e:e4:
f9:05:8f:40
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaBd4cj4XbbV7WcXMayIFe44MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYwOTAxMTY1MTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTQ5MTJkODYyNGZjOTgzZjI3OTgzNjlmYmZlNjE1YTAyNjJkZDc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApedRsGlrwOVM3SMxocoQPjvZS/GU
ZzNh9P2FVSUkXWkV/oBp9saMQKP0nW4IyYYlLoz7DBxMaapiW2X+6Wm1yLeG/t85
vQu+PXAXOh3A6R0BhEiwmHi1+fRE+5d99mxUOGmX6Vai0DkXrIDX08779eTdapwo
riuXYyO5jO6tbIRn9zV0im7UgAFy7313VgMZudualAAtH3RqUwffexM9ElehcY2C
rJOLrOT02u286D8HAixS6eRalLJA5DyMuMrIYAFNP8lsW0fuiY/0tU43J0PZPnqP
AM02YyMEVSVXySiTXWWscjfsK0AjX7Au4X84zsbNzzmybma3uBpzI/f8HwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJlJEthiT8mD8nmDafv+YVoCYt14MB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvbVVrUzJHSlB5WVB5ZVlOcC1fNWhXZ0ppM1hnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgaYAQf8
MA0GCSqGSIb3DQEBCwUAA4IBAQA/WzfuapdEfhHOqKqj4ipBDBoESGKldOZH+iy5
O9DsWQ0iFDoXVypsifX4Tk49GOWRQzhIsHWP0aLEmNv6V3cp9YZCfEQYgT+aafPA
yWgBNzgmj4TbdrS8P4NhlI4ONWqnSfuF2ZyZdHWzfcW62awxfObIuKD7aDQV0sZe
9xz624u4OwyVgc0J1JKhl3X4qjBFkMtReYkgL++VQ1dMX781vlwknuXFT1NhgWkV
xvbNTjGs2k4n5Re/ye9EvFcc2TX9DUWiSpzFG8d+fD/bSFQvs5P8n8bXvA/v5mAk
T3L3BMDErj6qerOhkFeyjvIfLi2lp6er4ToajSw5LuT5BY9A
-----END CERTIFICATE-----
Generated at Sun Sep 20 21:07:58 2026 by rpki-client