Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/Hh6sEPit11ykIgCk_l_1PZX8w1A.roa
File: Hh6sEPit11ykIgCk_l_1PZX8w1A.roa (raw, json)
Hash identifier: tNu7CLmnE8Clwg3jVCnx6SaGNC7bku7mpO24fhwXsbU=
Subject key identifier: 1E:1E:AC:10:F8:AD:D7:5C:A4:22:00:A4:FE:5F:F5:3D:95:FC:C3:50
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A0CDF39815ABC66DD425B3717E89073F4F
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/Hh6sEPit11ykIgCk_l_1PZX8w1A.roa
Signing time: Wed 23 Sep 2026 11:08:08 +0000
ROA not before: Wed 23 Sep 2026 11:08:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218707
IP address blocks: 2a06:9801:151c::/48 maxlen: 48
2a06:9801:1540::/48 maxlen: 48
2a06:9801:1541::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:f3:98:15:ab:c6:6d:d4:25:b3:71:7e:89:07:3f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Sep 23 11:08:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e1eac10f8add75ca42200a4fe5ff53d95fcc350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ed:3a:bb:c3:54:a1:3b:3b:ef:a5:da:0d:69:
c3:6d:64:35:ee:0a:df:60:d7:67:59:32:72:3a:b0:
f8:b7:1b:09:71:dd:3b:33:10:eb:fa:8a:98:44:6f:
96:d4:be:e9:da:18:cd:a1:a2:7c:9f:f2:bf:fa:4e:
95:16:f0:fa:0e:79:f8:be:85:01:9e:45:fb:a5:2c:
0e:20:52:17:3b:3c:92:fa:33:f9:0d:c0:c0:b0:d3:
44:36:c7:f8:3d:68:2b:c6:3f:aa:e3:a5:36:7e:86:
51:93:73:75:cf:b5:c8:4c:06:05:2d:08:5a:e5:90:
d2:1d:bf:67:20:f6:1f:69:eb:03:92:0f:2f:bf:57:
af:00:fe:f0:44:06:17:3d:ed:3c:b2:93:ee:78:61:
26:c7:08:92:c7:87:f5:a1:3d:f1:90:18:c0:91:9b:
13:7a:a5:7a:79:48:67:c4:b2:8c:63:75:3b:69:3a:
30:8c:39:48:e9:c0:e8:90:aa:2e:f2:8d:6c:c7:30:
32:5a:0a:68:80:22:96:de:71:cd:6f:88:5a:d9:c4:
25:e9:33:ee:31:8e:d8:8c:c9:06:4e:35:0a:34:38:
da:6c:05:bb:a9:ee:e4:6a:a7:0f:c6:9b:ac:8a:8f:
5b:4a:a1:7b:73:4c:65:0f:67:aa:dd:76:75:a7:96:
bb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:1E:AC:10:F8:AD:D7:5C:A4:22:00:A4:FE:5F:F5:3D:95:FC:C3:50
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/Hh6sEPit11ykIgCk_l_1PZX8w1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:151c::/48
2a06:9801:1540::/47
Signature Algorithm: sha256WithRSAEncryption
7d:37:2a:2b:d8:a6:01:9e:c0:ff:cb:dd:86:2d:a4:9d:d2:79:
26:1c:ac:3a:7e:47:8e:8a:21:73:0b:b7:36:cd:f1:81:70:5e:
5c:da:df:b9:bf:ce:ee:9c:14:4a:ee:b5:24:99:67:67:90:45:
f5:4d:ad:e2:18:0d:a8:a4:fe:c3:b5:a5:23:23:d8:02:82:bc:
5d:2d:12:e1:5c:63:cd:6e:28:d0:3e:22:96:00:8c:c0:0d:fc:
7b:be:da:a3:6b:86:e4:af:e8:c9:ea:48:44:96:c7:dd:d7:9a:
a5:33:2c:d6:a6:d6:37:6f:d3:0a:33:e6:c7:09:e4:91:92:ac:
d0:8f:51:c0:d0:f1:bd:dc:9c:5b:25:02:1a:12:e9:cc:a5:33:
76:a9:65:7b:a8:d1:22:e3:68:3d:09:98:77:89:c8:f7:6e:97:
d1:da:15:73:f4:26:c1:24:1b:0e:36:5c:dc:5a:21:e4:34:f3:
25:ca:fc:58:6b:7d:e6:82:73:9e:f2:10:80:93:ad:48:76:13:
b2:4d:6c:e1:a0:04:ab:e9:c2:4a:20:74:7c:e5:f6:07:30:52:
55:d6:a2:50:46:7d:2a:3f:5f:87:b0:8e:78:64:26:b6:77:bd:
d3:35:b1:ab:c6:a3:42:8a:b9:78:8b:dc:24:ca:25:00:39:d4:
02:6d:3f:ea
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaDN85gVq8Zt1CWzcX6JBz9PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYwOTIzMTEwODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTFlYWMxMGY4YWRkNzVjYTQyMjAwYTRmZTVmZjUzZDk1ZmNjMzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhu06u8NUoTs776XaDWnDbWQ17grf
YNdnWTJyOrD4txsJcd07MxDr+oqYRG+W1L7p2hjNoaJ8n/K/+k6VFvD6Dnn4voUB
nkX7pSwOIFIXOzyS+jP5DcDAsNNENsf4PWgrxj+q46U2foZRk3N1z7XITAYFLQha
5ZDSHb9nIPYfaesDkg8vv1evAP7wRAYXPe08spPueGEmxwiSx4f1oT3xkBjAkZsT
eqV6eUhnxLKMY3U7aTowjDlI6cDokKou8o1sxzAyWgpogCKW3nHNb4ha2cQl6TPu
MY7YjMkGTjUKNDjabAW7qe7kaqcPxpusio9bSqF7c0xlD2eq3XZ1p5a7MwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFB4erBD4rddcpCIApP5f9T2V/MNQMB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvSGg2c0VQaXQxMXlrSWdDa19sXzFQWlg4dzFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgaYARUc
AwcBKgaYARVAMA0GCSqGSIb3DQEBCwUAA4IBAQB9Nyor2KYBnsD/y92GLaSd0nkm
HKw6fkeOiiFzC7c2zfGBcF5c2t+5v87unBRK7rUkmWdnkEX1Ta3iGA2opP7DtaUj
I9gCgrxdLRLhXGPNbijQPiKWAIzADfx7vtqja4bkr+jJ6khElsfd15qlMyzWptY3
b9MKM+bHCeSRkqzQj1HA0PG93JxbJQIaEunMpTN2qWV7qNEi42g9CZh3icj3bpfR
2hVz9CbBJBsONlzcWiHkNPMlyvxYa33mgnOe8hCAk61IdhOyTWzhoASr6cJKIHR8
5fYHMFJV1qJQRn0qP1+HsI54ZCa2d73TNbGrxqNCirl4i9wkyiUAOdQCbT/q
-----END CERTIFICATE-----
Generated at Wed Sep 23 16:20:55 2026 by rpki-client