Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/1-XVlLKqNnV8PlP9ZLF2gg2kLT8k.roa
File: 1-XVlLKqNnV8PlP9ZLF2gg2kLT8k.roa (raw, json)
Hash identifier: /QJPP5UDa0i6hX8AJyflYnlIxUq6EQ/jXnuNFI85kNw=
Subject key identifier: F9:75:65:2C:AA:8D:9D:5F:0F:94:FF:59:2C:5D:A0:83:69:0B:4F:C9
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019F8E509B0BA32D7626FFAC61A82FD178D4
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/1-XVlLKqNnV8PlP9ZLF2gg2kLT8k.roa
Signing time: Thu 23 Jul 2026 09:31:14 +0000
ROA not before: Thu 23 Jul 2026 09:31:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219149
IP address blocks: 2a06:9801:f40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:50:9b:0b:a3:2d:76:26:ff:ac:61:a8:2f:d1:78:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jul 23 09:31:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f975652caa8d9d5f0f94ff592c5da083690b4fc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:39:a4:88:17:00:43:05:d9:d4:bc:23:0b:b7:
a6:02:c3:0e:3d:67:64:2d:22:fd:15:84:e9:fd:10:
8b:74:df:72:e6:10:0e:52:83:ba:89:77:31:3b:ea:
cf:4b:3c:f3:a8:9a:83:65:33:fa:ab:f6:ee:6b:84:
8a:5a:fe:bd:e0:55:38:cf:ab:1a:f2:bf:86:a3:61:
74:99:24:46:9d:27:92:41:03:db:7d:7a:8f:94:a1:
f6:05:c7:33:18:04:74:51:9b:3d:b1:9c:5c:11:e6:
dc:21:c0:04:14:c5:49:14:81:be:5a:78:2c:4a:3d:
90:dc:10:d7:7a:50:e5:4e:cc:13:0b:b9:4c:7e:81:
fd:62:49:34:18:56:e7:58:16:17:1b:57:5d:83:c6:
23:a4:6d:93:b1:0d:c8:70:b8:c3:f0:85:4e:42:72:
19:c2:79:f5:1c:16:1c:dc:ac:ac:f2:b9:24:a4:15:
47:ee:d9:1d:7c:eb:94:f7:37:2e:d4:b1:4c:40:b9:
19:7a:7c:67:c8:a1:c6:d9:9b:ff:33:5d:2c:fb:8b:
a3:06:c9:01:1e:12:6e:fc:49:2f:28:8c:b1:d5:9b:
7b:0f:02:77:63:2b:41:50:02:cc:fe:d2:2a:c5:5b:
72:dd:55:e2:35:24:17:de:35:5b:86:92:a8:8f:4b:
3a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:75:65:2C:AA:8D:9D:5F:0F:94:FF:59:2C:5D:A0:83:69:0B:4F:C9
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/1-XVlLKqNnV8PlP9ZLF2gg2kLT8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:f40::/48
Signature Algorithm: sha256WithRSAEncryption
92:da:0f:6b:8f:a0:0a:bf:8a:93:ec:d4:d0:41:ed:c2:ac:58:
94:05:b1:7c:5f:86:cc:15:0a:e0:18:c0:41:5a:a8:70:67:3e:
1d:e2:e3:63:bd:32:46:91:25:4c:59:89:a6:71:c2:32:a0:71:
d8:06:83:bf:c1:29:e6:57:b3:be:1f:1f:23:e3:e4:16:1f:09:
11:3a:94:47:94:12:fd:46:50:38:5b:a6:b5:c1:80:38:8e:65:
18:90:53:91:01:79:37:6f:59:ab:c8:ea:bf:89:82:87:0b:b1:
69:e0:a6:26:05:b7:09:10:a5:89:60:42:9e:8c:43:f3:fc:15:
f0:f4:37:15:d3:45:09:7c:1c:33:4d:c1:ce:51:10:e6:23:1c:
e3:54:c0:7e:30:bf:a8:31:1f:e9:06:3c:8f:c0:36:71:f3:c4:
1d:d5:77:b0:cb:3e:12:c6:17:74:a3:d1:e7:0a:26:c2:f9:0e:
08:b1:8d:77:78:3a:71:a8:3a:c5:04:ed:a7:b0:67:ba:f2:a5:
d2:56:a2:8c:37:90:5a:fe:6d:9f:a3:e3:41:ae:9b:4d:a2:a0:
10:97:de:ea:1e:6d:3e:93:6f:70:e7:0d:85:36:75:cd:6f:55:
43:df:f6:83:a8:77:0c:d0:12:e8:17:98:aa:ee:50:52:81:50:
13:86:17:af
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgISAZ+OUJsLoy12Jv+sYagv0XjUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYwNzIzMDkzMTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTc1NjUyY2FhOGQ5ZDVmMGY5NGZmNTkyYzVkYTA4MzY5MGI0ZmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjmkiBcAQwXZ1LwjC7emAsMOPWdk
LSL9FYTp/RCLdN9y5hAOUoO6iXcxO+rPSzzzqJqDZTP6q/bua4SKWv694FU4z6sa
8r+Go2F0mSRGnSeSQQPbfXqPlKH2BcczGAR0UZs9sZxcEebcIcAEFMVJFIG+Wngs
Sj2Q3BDXelDlTswTC7lMfoH9Ykk0GFbnWBYXG1ddg8YjpG2TsQ3IcLjD8IVOQnIZ
wnn1HBYc3Kys8rkkpBVH7tkdfOuU9zcu1LFMQLkZenxnyKHG2Zv/M10s+4ujBskB
HhJu/EkvKIyx1Zt7DwJ3YytBUALM/tIqxVty3VXiNSQX3jVbhpKoj0s6BwIDAQAB
o4ICDTCCAgkwHQYDVR0OBBYEFPl1ZSyqjZ1fD5T/WSxdoINpC0/JMB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvMS1YVmxMS3FOblY4UGxQOVpMRjJnZzJrTFQ4ay5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNTkvMWE2YjE3LWUzZmUtNGM2ZC1iOGMxLWVkOGNmYWYxYjgx
Zi8xL01kSkNRU1B0QjNKVE1MLUJlVVQ5SjJ0OG8ycy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoGmAEP
QDANBgkqhkiG9w0BAQsFAAOCAQEAktoPa4+gCr+Kk+zU0EHtwqxYlAWxfF+GzBUK
4BjAQVqocGc+HeLjY70yRpElTFmJpnHCMqBx2AaDv8Ep5lezvh8fI+PkFh8JETqU
R5QS/UZQOFumtcGAOI5lGJBTkQF5N29Zq8jqv4mChwuxaeCmJgW3CRCliWBCnoxD
8/wV8PQ3FdNFCXwcM03BzlEQ5iMc41TAfjC/qDEf6QY8j8A2cfPEHdV3sMs+EsYX
dKPR5womwvkOCLGNd3g6cag6xQTtp7BnuvKl0laijDeQWv5tn6PjQa6bTaKgEJfe
6h5tPpNvcOcNhTZ1zW9VQ9/2g6h3DNAS6BeYqu5QUoFQE4YXrw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:17:28 2026 by rpki-client