Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/pZ99rHvlcctRcg8S60TfzhrRznY.roa
File: pZ99rHvlcctRcg8S60TfzhrRznY.roa (raw, json)
Hash identifier: nyzPRnmZZkE6RgUHqamtb/8g1cw3EIoLQGegeaXCGF0=
Subject key identifier: A5:9F:7D:AC:7B:E5:71:CB:51:72:0F:12:EB:44:DF:CE:1A:D1:CE:76
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A04FED65F754DB2F972C84B6E40C42B292
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/pZ99rHvlcctRcg8S60TfzhrRznY.roa
Signing time: Sat 29 Aug 2026 23:49:13 +0000
ROA not before: Sat 29 Aug 2026 23:49:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218830
IP address blocks: 2a06:9801:fc3::/48 maxlen: 48
2a06:9801:1520::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4f:ed:65:f7:54:db:2f:97:2c:84:b6:e4:0c:42:b2:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Aug 29 23:49:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a59f7dac7be571cb51720f12eb44dfce1ad1ce76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a4:a0:96:56:77:6b:96:65:11:08:42:3f:ab:
a0:ed:b1:a6:50:6f:ac:1f:be:72:dc:03:81:95:db:
1e:55:33:cd:bc:6e:e2:1e:15:e0:06:e3:e2:8d:35:
9c:e1:00:de:24:d2:c9:dc:12:17:04:05:d6:5c:2c:
38:41:c2:a9:db:c1:8b:d0:37:ed:65:b7:16:c2:b5:
4c:d9:6e:5f:17:99:de:cf:ea:13:de:03:f5:41:26:
ba:80:b2:36:2f:8d:3e:6e:cb:9a:a3:2d:51:69:b8:
fc:a5:f4:c0:a5:1a:58:bd:8e:73:e1:1a:da:11:17:
d0:ca:1a:c1:56:f3:c6:74:c9:ec:c8:dc:50:f0:9e:
cb:0c:91:d2:83:8c:35:e4:da:14:e1:fa:d5:49:c3:
e5:ea:1e:eb:51:d7:ca:29:c4:eb:db:fa:38:c0:77:
b9:6d:6f:5b:bb:3a:2d:b0:0b:31:1d:fa:33:36:f7:
be:05:fe:4d:c9:8f:34:ac:69:63:e5:95:72:a3:90:
f4:f4:b5:ea:e1:ed:c4:c5:cc:89:e1:85:7f:f6:0c:
8b:94:58:04:59:6b:7e:e1:e0:49:cc:24:6d:bb:5d:
52:84:95:04:4e:38:34:21:2b:2d:4e:48:50:df:71:
dc:7d:82:a3:fb:7e:fb:d9:d6:da:6f:4d:bb:87:fa:
7e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:9F:7D:AC:7B:E5:71:CB:51:72:0F:12:EB:44:DF:CE:1A:D1:CE:76
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/pZ99rHvlcctRcg8S60TfzhrRznY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:fc3::/48
2a06:9801:1520::/44
Signature Algorithm: sha256WithRSAEncryption
5b:91:1f:92:b5:6e:3a:56:1a:26:73:67:8b:90:34:09:64:94:
5a:e6:38:82:02:05:ec:bf:a9:3f:85:fd:e0:14:4a:38:44:50:
c5:1c:b7:cf:96:f2:b5:5a:4b:1c:fa:53:4a:c3:d4:d4:47:67:
61:65:55:ad:19:a4:bc:0d:33:d7:fc:00:b1:f5:46:3b:99:2d:
ac:6b:82:f9:41:0b:30:14:d5:de:e1:93:15:20:13:b2:42:a4:
d7:d2:63:0a:42:7f:cc:9f:41:45:5a:48:c7:56:a4:a1:2e:0f:
2f:a9:65:b4:53:30:59:e2:63:bc:0b:84:1b:6c:19:28:f7:7a:
da:83:43:b8:18:20:ec:f4:c6:1c:42:16:7f:a7:bf:3e:19:ee:
97:cc:c1:f2:2f:4a:18:7a:ec:b6:8a:bd:f5:86:ac:3e:ed:d4:
f0:d6:bc:5c:7e:f6:fd:ec:ce:bd:3b:96:14:82:ac:85:a2:dd:
ea:b7:55:30:71:01:ab:29:55:da:36:03:06:b5:07:da:98:5a:
53:40:2a:6e:e1:f1:20:1f:b9:57:30:df:9f:38:fd:67:70:8a:
18:4c:13:64:b1:75:37:a4:98:8d:e9:03:6f:1f:54:94:88:e6:
87:53:f9:f4:19:da:1d:e2:fa:c9:c3:60:1f:4c:0b:07:4b:78:
f6:6d:0e:4e
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaBP7WX3VNsvlyyEtuQMQrKSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYwODI5MjM0OTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTlmN2RhYzdiZTU3MWNiNTE3MjBmMTJlYjQ0ZGZjZTFhZDFjZTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aSgllZ3a5ZlEQhCP6ug7bGmUG+s
H75y3AOBldseVTPNvG7iHhXgBuPijTWc4QDeJNLJ3BIXBAXWXCw4QcKp28GL0Dft
ZbcWwrVM2W5fF5nez+oT3gP1QSa6gLI2L40+bsuaoy1Rabj8pfTApRpYvY5z4Rra
ERfQyhrBVvPGdMnsyNxQ8J7LDJHSg4w15NoU4frVScPl6h7rUdfKKcTr2/o4wHe5
bW9buzotsAsxHfozNve+Bf5NyY80rGlj5ZVyo5D09LXq4e3ExcyJ4YV/9gyLlFgE
WWt+4eBJzCRtu11ShJUETjg0ISstTkhQ33HcfYKj+3772dbab027h/p+RQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFKWffax75XHLUXIPEutE384a0c52MB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvcFo5OXJIdmxjY3RSY2c4UzYwVGZ6aHJSem5ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgaYAQ/D
AwcEKgaYARUgMA0GCSqGSIb3DQEBCwUAA4IBAQBbkR+StW46Vhomc2eLkDQJZJRa
5jiCAgXsv6k/hf3gFEo4RFDFHLfPlvK1Wksc+lNKw9TUR2dhZVWtGaS8DTPX/ACx
9UY7mS2sa4L5QQswFNXe4ZMVIBOyQqTX0mMKQn/Mn0FFWkjHVqShLg8vqWW0UzBZ
4mO8C4QbbBko93rag0O4GCDs9MYcQhZ/p78+Ge6XzMHyL0oYeuy2ir31hqw+7dTw
1rxcfvb97M69O5YUgqyFot3qt1UwcQGrKVXaNgMGtQfamFpTQCpu4fEgH7lXMN+f
OP1ncIoYTBNksXU3pJiN6QNvH1SUiOaHU/n0Gdod4vrJw2AfTAsHS3j2bQ5O
-----END CERTIFICATE-----
Generated at Sun Sep 20 20:03:46 2026 by rpki-client