Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/p8WcNx-UW3EAubY7db0NdKroDVo.roa
File: p8WcNx-UW3EAubY7db0NdKroDVo.roa (raw, json)
Hash identifier: wH/ZfC/4iLgfqeym5hsb/tACN+jUzU+KpqYhvg6IdiA=
Subject key identifier: A7:C5:9C:37:1F:94:5B:71:00:B9:B6:3B:75:BD:0D:74:AA:E8:0D:5A
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019EAE20E60C7CD516C17FF44040DEE9B712
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/p8WcNx-UW3EAubY7db0NdKroDVo.roa
Signing time: Tue 09 Jun 2026 20:44:12 +0000
ROA not before: Tue 09 Jun 2026 20:44:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219500
IP address blocks: 2a06:9801:79a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ae:20:e6:0c:7c:d5:16:c1:7f:f4:40:40:de:e9:b7:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jun 9 20:44:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a7c59c371f945b7100b9b63b75bd0d74aae80d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9c:7b:b1:4f:95:d8:2c:94:e2:d5:26:df:d1:
b8:b6:85:5e:ee:fd:5b:c5:94:df:27:b8:fc:86:75:
a3:22:72:fe:76:cc:55:06:95:5d:c0:0d:30:10:d4:
6e:3b:72:e2:04:79:af:75:9c:f9:76:dd:4c:e7:93:
ef:02:c3:be:93:d4:c5:0d:92:4f:15:eb:53:f9:a8:
ac:e0:8c:f8:6c:ee:54:d7:3a:c1:ed:d1:4f:0f:26:
d2:7a:5d:b2:ef:c3:41:0e:f6:21:67:c3:10:04:d2:
2d:d4:52:c7:61:0d:b4:10:5c:d9:47:1f:4d:2f:8d:
04:07:93:e1:8d:89:60:df:52:c3:9b:b9:e2:2d:60:
4f:c5:d7:15:70:c7:b0:a2:05:21:52:41:37:2d:96:
a5:71:89:84:93:24:38:ad:8d:d3:9a:e8:28:25:bf:
66:8c:bd:7d:82:c9:5a:b3:0e:92:be:42:1b:e8:de:
c4:6b:4d:4f:8b:f5:f9:79:17:fb:23:29:91:03:06:
33:d5:38:d3:2f:1e:9e:40:52:30:3d:50:a7:0c:ff:
41:7c:bc:33:77:3c:d8:e7:fc:69:b8:47:23:80:f0:
e2:b9:13:d3:a0:20:11:24:c9:c4:e4:81:94:77:63:
99:48:14:63:63:ba:88:49:79:50:c5:ce:6e:fb:0b:
00:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C5:9C:37:1F:94:5B:71:00:B9:B6:3B:75:BD:0D:74:AA:E8:0D:5A
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/p8WcNx-UW3EAubY7db0NdKroDVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:79a::/48
Signature Algorithm: sha256WithRSAEncryption
21:5d:17:15:d9:47:5d:92:29:44:60:1a:ba:81:3c:7c:19:2e:
f7:bc:4c:2d:4d:6e:ad:5f:ce:5b:f3:e9:8e:e6:4e:c2:f1:0a:
28:11:9c:e9:ce:5d:e3:41:90:f4:86:35:51:ef:df:82:a1:5a:
9d:44:24:ec:b4:20:e3:aa:50:78:4e:be:ad:12:b7:30:cc:13:
25:e6:f5:58:da:08:b2:e7:f6:14:25:e4:7a:ea:f1:b9:b7:9d:
a6:a7:16:f2:19:3d:6c:d8:51:7f:35:c4:c6:36:38:1c:45:ef:
15:66:c6:26:30:d1:14:b4:22:60:ac:40:80:f9:1c:d3:26:9e:
99:aa:c9:3d:ee:f1:eb:d6:15:2f:e9:7a:8b:8f:3d:da:03:fe:
72:eb:f9:5a:76:6f:c3:bb:70:ce:11:21:7c:a7:a4:4b:47:c9:
07:44:dc:ca:4f:e1:a8:62:42:35:20:d1:7a:5d:34:66:da:b7:
5f:e2:c6:18:1f:41:8e:ef:96:b1:d3:c9:6b:21:b2:36:06:b6:
67:e7:85:5d:e3:df:4a:f6:fb:ee:51:ec:02:cd:9e:3d:fc:50:
eb:21:1b:37:21:ed:8a:99:ed:1d:b2:7b:0b:8f:48:f6:c3:c3:
84:68:2d:bf:43:64:f4:12:7a:42:ca:58:46:a7:f9:47:ea:c8:
c2:a4:87:d5
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ6uIOYMfNUWwX/0QEDe6bcSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYwNjA5MjA0NDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhN2M1OWMzNzFmOTQ1YjcxMDBiOWI2M2I3NWJkMGQ3NGFhZTgwZDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJx7sU+V2CyU4tUm39G4toVe7v1b
xZTfJ7j8hnWjInL+dsxVBpVdwA0wENRuO3LiBHmvdZz5dt1M55PvAsO+k9TFDZJP
FetT+ais4Iz4bO5U1zrB7dFPDybSel2y78NBDvYhZ8MQBNIt1FLHYQ20EFzZRx9N
L40EB5PhjYlg31LDm7niLWBPxdcVcMewogUhUkE3LZalcYmEkyQ4rY3TmugoJb9m
jL19gslasw6SvkIb6N7Ea01Pi/X5eRf7IymRAwYz1TjTLx6eQFIwPVCnDP9BfLwz
dzzY5/xpuEcjgPDiuRPToCARJMnE5IGUd2OZSBRjY7qISXlQxc5u+wsA8QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFKfFnDcflFtxALm2O3W9DXSq6A1aMB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvcDhXY054LVVXM0VBdWJZN2RiME5kS3JvRFZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgaYAQea
MA0GCSqGSIb3DQEBCwUAA4IBAQAhXRcV2UddkilEYBq6gTx8GS73vEwtTW6tX85b
8+mO5k7C8QooEZzpzl3jQZD0hjVR79+CoVqdRCTstCDjqlB4Tr6tErcwzBMl5vVY
2giy5/YUJeR66vG5t52mpxbyGT1s2FF/NcTGNjgcRe8VZsYmMNEUtCJgrECA+RzT
Jp6Zqsk97vHr1hUv6XqLjz3aA/5y6/ladm/Du3DOESF8p6RLR8kHRNzKT+GoYkI1
INF6XTRm2rdf4sYYH0GO75ax08lrIbI2BrZn54Vd499K9vvuUewCzZ49/FDrIRs3
Ie2Kme0dsnsLj0j2w8OEaC2/Q2T0EnpCylhGp/lH6sjCpIfV
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:20:38 2026 by rpki-client