Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/B07FD0mXLenbUP4UWXlCd5dorK8.roa
File: B07FD0mXLenbUP4UWXlCd5dorK8.roa (raw, json)
Hash identifier: TpOkeoUzAqb0jutBCtaxyC5ZLQATznN73cc15lEB8TI=
Subject key identifier: 07:4E:C5:0F:49:97:2D:E9:DB:50:FE:14:59:79:42:77:97:68:AC:AF
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A1D5A79BB3C0AFF382FEF09A66EC2ACF1D
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/B07FD0mXLenbUP4UWXlCd5dorK8.roa
Signing time: Fri 13 Nov 2026 16:04:53 +0000
ROA not before: Fri 13 Nov 2026 16:04:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213582
IP address blocks: 2a06:9801:15e3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d5:a7:9b:b3:c0:af:f3:82:fe:f0:9a:66:ec:2a:cf:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Nov 13 16:04:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=074ec50f49972de9db50fe14597942779768acaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c7:cd:f2:38:9e:69:13:fb:14:d5:f2:cb:f4:
59:7c:9e:fa:36:2a:9c:7c:02:10:dd:c0:a6:1c:76:
f4:26:09:63:ab:79:89:ee:1c:f4:22:66:44:4a:ca:
0c:3b:de:00:c3:71:b8:de:62:d0:f6:52:7f:85:94:
b8:22:e0:23:0e:48:e3:a6:95:92:75:ae:a2:5d:24:
73:68:14:e5:aa:c6:58:32:41:47:f1:0a:84:64:b9:
09:26:81:93:72:3d:d3:ff:29:fa:6b:ed:55:c8:80:
24:af:1f:0f:a5:cd:10:20:c4:8a:cc:c0:14:f5:01:
e0:95:6f:a5:78:de:3d:b1:be:fb:29:7e:37:f6:35:
38:58:2f:25:e2:88:bd:88:57:66:d2:e8:c9:97:da:
6c:89:d5:b1:12:43:21:d7:7a:37:84:06:78:31:61:
e9:53:df:32:2c:98:4e:3f:8e:e1:69:08:7d:79:42:
1d:7b:34:1c:4b:dd:62:2c:8d:68:26:e9:db:4f:7e:
75:4a:34:40:59:81:cd:ed:6f:ce:1f:35:68:49:0b:
b9:21:55:34:d5:d9:3d:1e:ea:de:b6:48:08:4a:55:
84:70:d9:cb:ba:12:0a:85:cd:90:ae:a6:ea:e2:0c:
6d:56:39:6a:a0:42:dc:cd:19:a5:1a:4e:eb:ba:35:
ba:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:4E:C5:0F:49:97:2D:E9:DB:50:FE:14:59:79:42:77:97:68:AC:AF
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/B07FD0mXLenbUP4UWXlCd5dorK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:15e3::/48
Signature Algorithm: sha256WithRSAEncryption
87:de:0c:1b:f8:4f:65:cc:85:93:e2:0a:60:7c:f1:e2:8d:6c:
e0:29:1f:02:25:cb:2e:af:49:8e:a8:43:bd:d4:57:38:13:ed:
99:25:6b:0e:60:67:27:92:29:90:5d:20:e0:b0:a1:3b:20:69:
9a:2f:95:a4:a6:46:7d:c5:2d:0b:4d:4f:b1:b0:af:bb:da:80:
1e:09:9f:d2:1c:54:82:bc:2d:98:b8:b6:c4:28:a9:3f:41:08:
04:50:64:58:e1:9a:4c:18:f9:4a:a4:fc:d2:31:eb:46:d3:bd:
41:26:06:fc:a2:4c:8e:9a:e6:a7:c8:c2:48:2a:29:43:9b:b5:
b9:14:4c:00:34:6f:39:67:15:84:32:90:c1:59:52:6c:e4:7b:
f6:62:f1:c6:be:a2:6f:f1:6c:6f:75:1b:c1:5d:ba:bb:b2:62:
b8:c8:dd:d8:e4:18:fa:4e:46:ee:d6:78:85:81:3e:8a:89:c9:
1f:8c:94:6a:d8:ac:11:d1:77:b5:71:07:15:6e:77:4e:3a:01:
a3:0a:45:29:de:30:de:e2:8d:1d:e7:34:d3:8c:11:2b:64:09:
26:cf:ec:87:9c:bc:e8:64:ac:a7:87:7e:14:7f:98:8b:ea:c3:
cf:e7:50:06:65:38:00:33:11:bb:10:f6:b3:17:df:36:db:80:
aa:5a:83:36
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaHVp5uzwK/zgv7wmmbsKs8dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYxMTEzMTYwNDUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzRlYzUwZjQ5OTcyZGU5ZGI1MGZlMTQ1OTc5NDI3Nzk3NjhhY2FmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysfN8jieaRP7FNXyy/RZfJ76Niqc
fAIQ3cCmHHb0Jgljq3mJ7hz0ImZESsoMO94Aw3G43mLQ9lJ/hZS4IuAjDkjjppWS
da6iXSRzaBTlqsZYMkFH8QqEZLkJJoGTcj3T/yn6a+1VyIAkrx8Ppc0QIMSKzMAU
9QHglW+leN49sb77KX439jU4WC8l4oi9iFdm0ujJl9psidWxEkMh13o3hAZ4MWHp
U98yLJhOP47haQh9eUIdezQcS91iLI1oJunbT351SjRAWYHN7W/OHzVoSQu5IVU0
1dk9HuretkgISlWEcNnLuhIKhc2Qrqbq4gxtVjlqoELczRmlGk7rujW62wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFAdOxQ9Jly3p21D+FFl5QneXaKyvMB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvQjA3RkQwbVhMZW5iVVA0VVdYbENkNWRvcks4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgaYARXj
MA0GCSqGSIb3DQEBCwUAA4IBAQCH3gwb+E9lzIWT4gpgfPHijWzgKR8CJcsur0mO
qEO91Fc4E+2ZJWsOYGcnkimQXSDgsKE7IGmaL5WkpkZ9xS0LTU+xsK+72oAeCZ/S
HFSCvC2YuLbEKKk/QQgEUGRY4ZpMGPlKpPzSMetG071BJgb8okyOmuanyMJIKilD
m7W5FEwANG85ZxWEMpDBWVJs5Hv2YvHGvqJv8WxvdRvBXbq7smK4yN3Y5Bj6Tkbu
1niFgT6KickfjJRq2KwR0Xe1cQcVbndOOgGjCkUp3jDe4o0d5zTTjBErZAkmz+yH
nLzoZKynh34Uf5iL6sPP51AGZTgAMxG7EPazF98224CqWoM2
-----END CERTIFICATE-----
Generated at Sat Nov 14 21:08:03 2026 by rpki-client