Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/I9EtQBU0G40ZG7D8vTO6KPVNRLY.roa
File: I9EtQBU0G40ZG7D8vTO6KPVNRLY.roa (raw, json)
Hash identifier: FaLHL0cupSAntmChTNUJOD7Vheyfxs7QWWOzg68O7x8=
Subject key identifier: 23:D1:2D:40:15:34:1B:8D:19:1B:B0:FC:BD:33:BA:28:F5:4D:44:B6
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019F7696FED5EBC72F8866E02D4736B1CD23
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/I9EtQBU0G40ZG7D8vTO6KPVNRLY.roa
Signing time: Sat 18 Jul 2026 18:57:14 +0000
ROA not before: Sat 18 Jul 2026 18:57:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219261
IP address blocks: 2a06:9801:7dc::/48 maxlen: 48
2a06:9801:f60::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:76:96:fe:d5:eb:c7:2f:88:66:e0:2d:47:36:b1:cd:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jul 18 18:57:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=23d12d4015341b8d191bb0fcbd33ba28f54d44b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6e:fd:81:60:0e:0e:8f:bd:0b:46:55:bc:58:
12:85:6f:34:62:4f:b2:e7:89:72:01:a4:e0:07:f0:
2f:b7:01:ba:28:31:45:51:4a:a1:e8:8b:d5:14:43:
8f:c3:0d:da:ad:11:ee:21:d7:f0:d7:3a:df:3e:ed:
85:60:13:a8:f3:1b:3c:fc:47:f7:af:24:2f:c8:35:
79:e7:14:23:fc:c2:25:77:a0:ff:3e:27:b8:b9:ad:
fd:f3:d3:63:e9:8b:34:7e:ca:59:85:f1:ec:25:e1:
44:91:e8:d8:4e:d7:0c:a1:bd:50:d4:7c:6b:a2:56:
7f:15:0d:f5:df:d7:11:89:5b:f3:17:c2:35:95:04:
52:a1:b6:53:cf:fc:7d:51:65:de:7a:cf:dd:94:34:
0e:74:0e:0e:6f:96:93:a6:28:4f:4d:a7:bc:d1:b5:
a3:bd:6e:61:14:f9:ad:85:ae:26:36:3e:bc:cd:9c:
ad:73:20:1b:0d:25:10:32:72:8c:db:48:b6:b3:af:
86:3e:5a:27:cd:47:a1:0c:82:06:d2:1e:09:0a:5f:
98:1b:4a:28:f0:f9:a2:34:26:ee:f3:aa:db:c8:13:
c9:3d:c5:3e:64:10:e0:83:ee:2b:ed:f2:85:a2:68:
f1:23:ea:83:ee:93:8b:b6:47:f1:39:f2:c0:87:82:
0e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D1:2D:40:15:34:1B:8D:19:1B:B0:FC:BD:33:BA:28:F5:4D:44:B6
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/I9EtQBU0G40ZG7D8vTO6KPVNRLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:7dc::/48
2a06:9801:f60::/44
Signature Algorithm: sha256WithRSAEncryption
a8:ac:ef:a9:f3:8c:2c:4d:37:53:fe:c2:00:b2:c0:fb:0b:c1:
3d:66:27:72:63:cb:8f:fe:0a:44:69:b9:b0:ad:3f:79:8f:19:
f2:f5:e2:1e:c4:4c:f0:a5:05:bc:19:64:b4:b1:26:72:65:1d:
df:39:d0:74:96:ba:fa:d8:92:ec:15:51:71:23:13:c1:f7:e7:
8b:bf:f1:fa:0b:24:79:fd:3e:6b:10:29:b3:05:e4:ab:1d:63:
8c:f9:1c:47:2f:77:82:4a:d9:49:44:82:fc:0c:ed:e5:37:f7:
49:6b:40:18:18:0b:64:84:47:43:31:a6:41:3b:02:90:8c:62:
5e:3f:a6:7c:78:73:ae:36:7c:30:64:62:08:5d:a3:52:28:6d:
75:44:43:70:34:b4:a1:b3:51:f9:96:da:f1:f5:a1:57:76:67:
53:ba:1c:3a:1d:9b:65:df:12:29:7e:e0:c5:37:6e:41:c6:61:
70:f4:01:d4:17:d1:aa:3f:68:d2:03:e2:9e:1c:ff:0c:a1:39:
9b:d9:6d:8e:86:7b:44:ff:75:e5:1a:3e:3b:17:b0:6a:d0:c0:
31:2d:78:67:cc:fe:37:eb:37:dc:2d:31:01:06:6c:f3:9c:ee:
ca:fc:8a:e6:c1:1b:8e:2a:9d:50:8c:a3:7e:78:3e:be:1d:68:
02:43:a5:f9
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ92lv7V68cviGbgLUc2sc0jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYwNzE4MTg1NzE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyM2QxMmQ0MDE1MzQxYjhkMTkxYmIwZmNiZDMzYmEyOGY1NGQ0NGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn279gWAODo+9C0ZVvFgShW80Yk+y
54lyAaTgB/AvtwG6KDFFUUqh6IvVFEOPww3arRHuIdfw1zrfPu2FYBOo8xs8/Ef3
ryQvyDV55xQj/MIld6D/Pie4ua3989Nj6Ys0fspZhfHsJeFEkejYTtcMob1Q1Hxr
olZ/FQ3139cRiVvzF8I1lQRSobZTz/x9UWXees/dlDQOdA4Ob5aTpihPTae80bWj
vW5hFPmtha4mNj68zZytcyAbDSUQMnKM20i2s6+GPlonzUehDIIG0h4JCl+YG0oo
8PmiNCbu86rbyBPJPcU+ZBDgg+4r7fKFomjxI+qD7pOLtkfxOfLAh4IOKwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCPRLUAVNBuNGRuw/L0zuij1TUS2MB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvSTlFdFFCVTBHNDBaRzdEOHZUTzZLUFZOUkxZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgaYAQfc
AwcEKgaYAQ9gMA0GCSqGSIb3DQEBCwUAA4IBAQCorO+p84wsTTdT/sIAssD7C8E9
ZidyY8uP/gpEabmwrT95jxny9eIexEzwpQW8GWS0sSZyZR3fOdB0lrr62JLsFVFx
IxPB9+eLv/H6CyR5/T5rECmzBeSrHWOM+RxHL3eCStlJRIL8DO3lN/dJa0AYGAtk
hEdDMaZBOwKQjGJeP6Z8eHOuNnwwZGIIXaNSKG11RENwNLShs1H5ltrx9aFXdmdT
uhw6HZtl3xIpfuDFN25BxmFw9AHUF9GqP2jSA+KeHP8MoTmb2W2OhntE/3XlGj47
F7Bq0MAxLXhnzP436zfcLTEBBmzznO7K/IrmwRuOKp1QjKN+eD6+HWgCQ6X5
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:31:38 2026 by rpki-client