Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/6-rp7AcyIU7VB_8mfMMgGMBK9Qo.roa
File: 6-rp7AcyIU7VB_8mfMMgGMBK9Qo.roa (raw, json)
Hash identifier: ea5f1PH8+8+biphHM2g473gK9DY9Fsaqexxfs26JJMc=
Subject key identifier: EB:EA:E9:EC:07:32:21:4E:D5:07:FF:26:7C:C3:20:18:C0:4A:F5:0A
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019DF76C17C567C9CA0737415130FF8D275A
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/6-rp7AcyIU7VB_8mfMMgGMBK9Qo.roa
Signing time: Tue 05 May 2026 09:15:49 +0000
ROA not before: Tue 05 May 2026 09:15:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205702
IP address blocks: 2a06:9801:2b5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:34:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f7:6c:17:c5:67:c9:ca:07:37:41:51:30:ff:8d:27:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: May 5 09:15:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ebeae9ec0732214ed507ff267cc32018c04af50a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ea:de:ba:49:a6:33:9c:e8:c0:30:d9:e9:81:
bf:92:58:6c:fd:0e:b7:9d:05:c0:1a:c6:4c:7d:e6:
fd:e1:9a:28:f2:9d:e3:30:b8:de:b5:05:a0:21:77:
94:38:3d:93:40:2c:e7:ae:d2:59:bf:89:1d:69:5d:
83:81:a1:a7:66:cc:a7:a7:7a:41:06:97:19:ee:17:
99:18:64:90:e5:82:74:05:c5:4d:f3:fd:24:e5:53:
e9:2a:7e:eb:77:c5:c4:4f:84:cb:7a:de:8a:84:2f:
bf:df:96:a3:1d:0b:a2:e2:a7:69:f5:7f:80:c3:bf:
07:f9:5e:5e:52:cd:1f:d9:f5:aa:b2:ed:c6:ff:f1:
db:6d:8b:70:51:cd:55:6d:ba:cf:24:bf:a1:c2:67:
92:c1:88:56:ac:55:73:9b:92:d0:30:38:d4:40:a9:
4a:15:f3:7e:1f:7d:61:c7:47:20:e5:fa:2b:c5:92:
84:9d:50:51:b0:af:0b:33:d1:90:24:a7:ac:19:59:
bb:21:ce:f8:1a:d3:af:44:55:d7:4b:63:76:62:f5:
4f:22:eb:50:b6:b0:9c:32:a2:d3:28:b1:4b:e3:2a:
0d:7b:b5:bd:9c:0d:2a:70:d2:1f:c0:53:68:84:ef:
c9:9b:e2:32:27:8c:4e:5a:a9:8c:04:e7:f7:9d:9b:
ff:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:EA:E9:EC:07:32:21:4E:D5:07:FF:26:7C:C3:20:18:C0:4A:F5:0A
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/6-rp7AcyIU7VB_8mfMMgGMBK9Qo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:2b5::/48
Signature Algorithm: sha256WithRSAEncryption
93:a2:7a:d9:07:ce:f0:a5:35:25:c7:d1:e7:31:5a:f2:53:40:
de:0c:0c:b9:a8:c8:7f:1e:6d:09:16:18:bb:8e:0d:ae:a3:26:
97:76:f8:f7:06:ab:b0:44:98:e8:79:28:16:7c:24:30:3b:8e:
28:a4:c7:4b:31:cd:55:76:5a:1b:d4:8c:50:02:c2:f7:a4:e4:
dd:e1:00:a4:00:c2:58:59:ac:f4:b2:33:31:64:a0:81:84:ad:
e6:89:10:7b:7e:46:44:5a:32:51:66:f1:e2:c4:6f:4f:b8:8f:
5f:ee:fc:39:b3:33:07:3e:94:aa:e9:d2:0b:a9:97:66:db:2f:
e3:70:2c:ae:43:fa:e4:55:42:4b:0f:f0:84:62:85:c0:ec:61:
2b:2f:f1:a1:09:7c:f8:1e:1d:71:16:17:75:85:30:2e:a4:4a:
3e:33:9a:12:4d:b0:22:86:f5:9c:0c:2a:2d:b7:b9:f2:2d:84:
99:be:8a:c1:ae:99:b9:25:3a:36:98:22:ee:75:fc:00:38:10:
50:38:fe:8c:7a:4a:ac:15:25:22:fd:c1:fd:a4:0a:61:6f:f1:
71:5c:12:41:2f:f0:94:44:6e:95:63:2c:f7:d1:06:c8:4a:a9:
3e:b2:62:b0:23:77:25:30:ba:5f:3b:37:5e:ee:ea:ed:d3:ca:
56:5e:8e:0c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ33bBfFZ8nKBzdBUTD/jSdaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYwNTA1MDkxNTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYmVhZTllYzA3MzIyMTRlZDUwN2ZmMjY3Y2MzMjAxOGMwNGFmNTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnureukmmM5zowDDZ6YG/klhs/Q63
nQXAGsZMfeb94Zoo8p3jMLjetQWgIXeUOD2TQCznrtJZv4kdaV2DgaGnZsynp3pB
BpcZ7heZGGSQ5YJ0BcVN8/0k5VPpKn7rd8XET4TLet6KhC+/35ajHQui4qdp9X+A
w78H+V5eUs0f2fWqsu3G//HbbYtwUc1VbbrPJL+hwmeSwYhWrFVzm5LQMDjUQKlK
FfN+H31hx0cg5forxZKEnVBRsK8LM9GQJKesGVm7Ic74GtOvRFXXS2N2YvVPIutQ
trCcMqLTKLFL4yoNe7W9nA0qcNIfwFNohO/Jm+IyJ4xOWqmMBOf3nZv/PwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOvq6ewHMiFO1Qf/JnzDIBjASvUKMB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvNi1ycDdBY3lJVTdWQl84bWZNTWdHTUJLOVFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgaYAQK1
MA0GCSqGSIb3DQEBCwUAA4IBAQCTonrZB87wpTUlx9HnMVryU0DeDAy5qMh/Hm0J
Fhi7jg2uoyaXdvj3BquwRJjoeSgWfCQwO44opMdLMc1Vdlob1IxQAsL3pOTd4QCk
AMJYWaz0sjMxZKCBhK3miRB7fkZEWjJRZvHixG9PuI9f7vw5szMHPpSq6dILqZdm
2y/jcCyuQ/rkVUJLD/CEYoXA7GErL/GhCXz4Hh1xFhd1hTAupEo+M5oSTbAihvWc
DCott7nyLYSZvorBrpm5JTo2mCLudfwAOBBQOP6MekqsFSUi/cH9pAphb/FxXBJB
L/CURG6VYyz30QbISqk+smKwI3clMLpfOzde7urt08pWXo4M
-----END CERTIFICATE-----
Generated at Tue May 12 23:45:53 2026 by rpki-client