Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/5BYR8qFqCJLvosbTwSJWMPwRvR4.roa
File: 5BYR8qFqCJLvosbTwSJWMPwRvR4.roa (raw, json)
Hash identifier: u9n7AUgxPO7VERXMWVayy645R/BqdfHph3lpdyPC7KY=
Subject key identifier: E4:16:11:F2:A1:6A:08:92:EF:A2:C6:D3:C1:22:56:30:FC:11:BD:1E
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A17C6D5393DDF4950C3225EDCABFD9F64C
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/5BYR8qFqCJLvosbTwSJWMPwRvR4.roa
Signing time: Tue 27 Oct 2026 08:15:01 +0000
ROA not before: Tue 27 Oct 2026 08:15:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218283
IP address blocks: 2a06:9801:1593::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 19:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:6d:53:93:dd:f4:95:0c:32:25:ed:ca:bf:d9:f6:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Oct 27 08:15:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e41611f2a16a0892efa2c6d3c1225630fc11bd1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:68:c6:28:ef:c9:5d:ab:26:86:74:c5:92:38:
bd:21:b6:76:b9:05:a4:55:c3:e3:d6:40:bf:88:e3:
86:fa:b3:82:21:e3:48:0e:35:8d:33:26:c7:15:7f:
9f:3c:db:d7:88:77:d7:9a:77:a9:ed:93:9e:35:aa:
46:0a:4f:d1:27:47:1d:7e:9b:bc:49:6a:ec:ea:d8:
78:22:ac:42:f8:b2:17:2c:7c:5e:25:fa:1f:ec:d6:
23:ba:bc:f0:bf:98:6c:9b:78:ca:eb:69:51:27:f1:
41:33:92:75:ed:7c:0e:d9:fb:41:a5:bc:da:1f:97:
1f:75:2e:a0:25:e9:83:5d:d4:d5:6a:b2:c6:57:9d:
33:37:f2:49:9d:14:35:46:e5:d5:4f:6a:2f:48:ac:
f0:19:ff:4a:ad:85:84:4b:32:45:7b:94:86:ce:40:
14:fc:e3:02:4a:f0:eb:ed:3b:3e:c1:e2:91:5e:71:
1e:09:a6:dc:fa:99:b6:df:6c:56:01:7e:fb:12:fa:
cf:3b:ca:7d:5b:7e:59:1e:b1:e6:33:69:72:81:87:
46:72:1c:d5:71:04:b9:53:c2:95:b5:3b:5a:99:74:
e7:9d:7a:e0:bd:ae:59:ce:42:88:a4:55:29:c6:0c:
9c:7c:e1:5a:e8:e3:61:7c:75:e7:86:0e:4e:04:08:
07:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:16:11:F2:A1:6A:08:92:EF:A2:C6:D3:C1:22:56:30:FC:11:BD:1E
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/5BYR8qFqCJLvosbTwSJWMPwRvR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:1593::/48
Signature Algorithm: sha256WithRSAEncryption
6e:11:fd:09:c9:1f:10:70:9a:70:97:93:2e:92:ce:68:9b:e3:
08:eb:bf:d4:21:3f:85:53:a9:62:8a:e7:40:a7:75:ae:3a:2d:
4e:3c:c5:de:b2:d9:ca:2d:06:4a:d2:e5:b7:69:fe:e7:d4:a6:
a3:b5:45:53:c2:46:d3:82:c4:37:1f:02:33:eb:d2:b8:f3:7c:
01:b6:84:a6:99:3e:69:82:7b:c5:02:00:d6:67:06:d4:f5:65:
54:78:73:ec:22:3f:fe:40:4f:a5:e5:a0:b1:0c:73:69:3d:5f:
d8:cd:c3:db:ca:bf:d4:85:a4:59:4d:13:26:06:d5:a7:e8:60:
f6:7f:bb:f3:60:bd:4d:61:b2:ff:40:20:ce:cb:e3:b9:5b:04:
05:25:5d:52:41:6e:4a:cd:c6:66:4f:6a:cd:7f:91:a6:8b:d0:
e3:21:f2:80:f6:31:59:a4:1e:ca:6d:61:3f:b6:87:4b:57:db:
c3:e0:62:ef:06:de:f3:30:a0:81:40:1f:48:61:48:4f:bf:65:
db:df:0b:d8:df:9b:51:e2:58:3b:e2:d4:61:43:2d:00:15:b2:
35:ff:55:f8:91:6d:6c:57:b5:31:58:07:49:a3:80:94:cb:a7:
02:9e:ab:18:68:72:62:84:18:c5:12:d5:ff:64:74:5a:98:bf:
69:31:20:81
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaF8bVOT3fSVDDIl7cq/2fZMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYxMDI3MDgxNTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDE2MTFmMmExNmEwODkyZWZhMmM2ZDNjMTIyNTYzMGZjMTFiZDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmjGKO/JXasmhnTFkji9IbZ2uQWk
VcPj1kC/iOOG+rOCIeNIDjWNMybHFX+fPNvXiHfXmnep7ZOeNapGCk/RJ0cdfpu8
SWrs6th4IqxC+LIXLHxeJfof7NYjurzwv5hsm3jK62lRJ/FBM5J17XwO2ftBpbza
H5cfdS6gJemDXdTVarLGV50zN/JJnRQ1RuXVT2ovSKzwGf9KrYWESzJFe5SGzkAU
/OMCSvDr7Ts+weKRXnEeCabc+pm232xWAX77EvrPO8p9W35ZHrHmM2lygYdGchzV
cQS5U8KVtTtamXTnnXrgva5ZzkKIpFUpxgycfOFa6ONhfHXnhg5OBAgHIQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOQWEfKhagiS76LG08EiVjD8Eb0eMB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvNUJZUjhxRnFDSkx2b3NiVHdTSldNUHdSdlI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgaYARWT
MA0GCSqGSIb3DQEBCwUAA4IBAQBuEf0JyR8QcJpwl5Muks5om+MI67/UIT+FU6li
iudAp3WuOi1OPMXestnKLQZK0uW3af7n1KajtUVTwkbTgsQ3HwIz69K483wBtoSm
mT5pgnvFAgDWZwbU9WVUeHPsIj/+QE+l5aCxDHNpPV/YzcPbyr/UhaRZTRMmBtWn
6GD2f7vzYL1NYbL/QCDOy+O5WwQFJV1SQW5KzcZmT2rNf5Gmi9DjIfKA9jFZpB7K
bWE/todLV9vD4GLvBt7zMKCBQB9IYUhPv2Xb3wvY35tR4lg74tRhQy0AFbI1/1X4
kW1sV7UxWAdJo4CUy6cCnqsYaHJihBjFEtX/ZHRamL9pMSCB
-----END CERTIFICATE-----
Generated at Sun Nov 15 00:32:58 2026 by rpki-client