Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/yEjEvYlHZYOTBt8s47oQ9-zKlUc.roa
File: yEjEvYlHZYOTBt8s47oQ9-zKlUc.roa (raw, json)
Hash identifier: oiYYIeQYM2OZEq+YjJOpqch6RpCc9do8aKaCrBb6I7I=
Subject key identifier: C8:48:C4:BD:89:47:65:83:93:06:DF:2C:E3:BA:10:F7:EC:CA:95:47
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019E2BF6D5E1E764EA171D038B2691B1AB76
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/yEjEvYlHZYOTBt8s47oQ9-zKlUc.roa
Signing time: Fri 15 May 2026 14:07:37 +0000
ROA not before: Fri 15 May 2026 14:07:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197587
IP address blocks: 2a06:9801:2f4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:f6:d5:e1:e7:64:ea:17:1d:03:8b:26:91:b1:ab:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: May 15 14:07:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c848c4bd894765839306df2ce3ba10f7ecca9547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:1f:e4:c3:b5:39:2d:de:3b:ad:9e:ab:fd:74:
22:0f:40:15:33:b6:f0:31:69:99:97:44:31:42:f8:
c1:90:76:c7:0f:06:24:08:21:a5:a9:27:16:92:06:
4e:04:6b:a8:d1:c3:24:83:44:eb:cb:89:3c:87:f9:
94:58:1d:48:a6:6f:85:e4:e6:b3:51:12:74:94:45:
17:97:b1:37:e1:ae:ef:46:dd:0f:6b:cf:e3:c6:4b:
c1:26:92:01:64:da:50:21:18:54:fe:34:6a:14:8c:
33:d3:29:e7:26:15:85:70:21:93:7b:6d:60:37:38:
a8:54:e5:9f:d5:5e:00:3f:67:f4:a3:3f:8f:fb:1d:
93:cb:eb:92:23:d2:9e:0e:b0:7b:7a:59:cd:c8:23:
34:90:27:13:ca:13:d7:53:7a:30:5a:d6:72:e1:8b:
62:cd:f1:7a:c1:06:92:11:e4:8b:97:2c:80:13:3e:
fb:c0:2e:1f:43:d4:24:e6:0e:d0:98:25:5d:ef:f3:
e9:6e:9d:37:7b:9a:6d:cb:aa:69:9f:a5:6a:58:93:
5e:05:31:4a:20:6b:e5:e8:59:6c:8d:12:fb:af:eb:
9a:a9:0c:6f:fc:7f:ae:21:50:7e:06:f3:3f:b3:af:
5d:9b:de:6b:b2:22:be:0a:07:f2:35:f8:0b:34:45:
02:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:48:C4:BD:89:47:65:83:93:06:DF:2C:E3:BA:10:F7:EC:CA:95:47
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/yEjEvYlHZYOTBt8s47oQ9-zKlUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:2f4::/48
Signature Algorithm: sha256WithRSAEncryption
14:ce:6b:f9:62:38:c0:14:3d:bc:71:f1:0f:a2:77:52:96:91:
37:99:de:42:72:9d:a6:77:23:0f:f8:46:68:8a:b8:39:ad:09:
b7:df:21:19:38:b0:29:3f:53:18:13:21:df:95:c2:5b:3e:10:
3b:7d:69:43:05:93:e0:13:0d:a2:02:4f:aa:ad:7b:64:f0:4b:
a6:d5:ee:55:df:ce:b6:fe:c0:4d:77:c9:6f:09:62:fe:22:f4:
a1:00:97:1f:63:6a:45:65:e4:56:64:4b:c2:80:f9:bd:18:62:
6e:71:bb:cf:28:4f:df:37:f4:0f:12:47:c7:45:be:ea:5d:14:
18:7c:0a:94:cb:cf:83:23:70:0a:72:57:a5:5e:11:74:77:4c:
78:36:ab:88:b8:bc:50:41:c1:d3:31:03:98:65:16:99:f2:01:
1f:8b:c4:da:b4:fa:6d:b5:68:fd:f3:1c:8f:6b:e4:a1:6c:1d:
8c:dd:e8:4a:19:26:d2:cc:7d:68:9b:8b:7b:62:8d:0e:36:d2:
2a:8f:9f:39:be:e4:59:0e:a3:52:02:8d:ac:a2:d1:ac:31:89:
19:3f:b6:51:50:b3:c3:b4:61:a7:63:10:1f:5e:1c:75:84:52:
3c:0b:89:78:a7:db:8c:89:ef:f6:fe:f8:ec:96:d9:6b:a2:d7:
b6:ac:8f:32
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ4r9tXh52TqFx0DiyaRsat2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYwNTE1MTQwNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODQ4YzRiZDg5NDc2NTgzOTMwNmRmMmNlM2JhMTBmN2VjY2E5NTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8h/kw7U5Ld47rZ6r/XQiD0AVM7bw
MWmZl0QxQvjBkHbHDwYkCCGlqScWkgZOBGuo0cMkg0Try4k8h/mUWB1Ipm+F5Oaz
URJ0lEUXl7E34a7vRt0Pa8/jxkvBJpIBZNpQIRhU/jRqFIwz0ynnJhWFcCGTe21g
NzioVOWf1V4AP2f0oz+P+x2Ty+uSI9KeDrB7elnNyCM0kCcTyhPXU3owWtZy4Yti
zfF6wQaSEeSLlyyAEz77wC4fQ9Qk5g7QmCVd7/Ppbp03e5pty6ppn6VqWJNeBTFK
IGvl6FlsjRL7r+uaqQxv/H+uIVB+BvM/s69dm95rsiK+CgfyNfgLNEUCbwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMhIxL2JR2WDkwbfLOO6EPfsypVHMB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEveUVqRXZZbEhaWU9UQnQ4czQ3b1E5LXpLbFVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgaYAQL0
MA0GCSqGSIb3DQEBCwUAA4IBAQAUzmv5YjjAFD28cfEPondSlpE3md5Ccp2mdyMP
+EZoirg5rQm33yEZOLApP1MYEyHflcJbPhA7fWlDBZPgEw2iAk+qrXtk8Eum1e5V
3862/sBNd8lvCWL+IvShAJcfY2pFZeRWZEvCgPm9GGJucbvPKE/fN/QPEkfHRb7q
XRQYfAqUy8+DI3AKclelXhF0d0x4NquIuLxQQcHTMQOYZRaZ8gEfi8TatPpttWj9
8xyPa+ShbB2M3ehKGSbSzH1om4t7Yo0ONtIqj585vuRZDqNSAo2sotGsMYkZP7ZR
ULPDtGGnYxAfXhx1hFI8C4l4p9uMie/2/vjsltlrote2rI8y
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:21:01 2026 by rpki-client