Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/KnpiECGHYb0nCWLj-DYR-zP6KEM.roa
File: KnpiECGHYb0nCWLj-DYR-zP6KEM.roa (raw, json)
Hash identifier: WaCKk/q5X6CMX7ReN8PAGxSSMnrbCnaf0XA+FKCuRWE=
Subject key identifier: 2A:7A:62:10:21:87:61:BD:27:09:62:E3:F8:36:11:FB:33:FA:28:43
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A1C57AFC0BEB20C0E001343D3B2741DAF9
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/KnpiECGHYb0nCWLj-DYR-zP6KEM.roa
Signing time: Tue 10 Nov 2026 12:42:13 +0000
ROA not before: Tue 10 Nov 2026 12:42:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218127
IP address blocks: 2a06:9801:159f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c5:7a:fc:0b:eb:20:c0:e0:01:34:3d:3b:27:41:da:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Nov 10 12:42:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a7a6210218761bd270962e3f83611fb33fa2843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:89:40:85:cb:e1:06:0c:18:be:9e:fc:60:06:
46:f9:58:9a:72:dd:95:93:38:3c:f6:7f:6b:a5:39:
e6:04:d0:81:a2:82:18:fd:d1:aa:5c:fa:b7:6d:fb:
91:5f:6f:ee:1c:15:81:05:7c:4f:46:5b:be:e3:26:
93:b7:04:aa:00:50:dc:e7:4d:05:32:7d:ff:f6:42:
bf:ba:be:3a:d1:60:5c:3a:34:9e:4d:af:8e:dd:90:
60:f5:46:53:8c:47:c9:96:e6:15:e6:11:0e:ef:67:
dc:2b:6f:61:c5:4d:d4:54:a1:c4:5c:a1:1f:c4:78:
85:26:3b:50:c2:82:85:c5:4f:73:c7:ba:84:4b:ce:
fa:79:58:7e:e4:f8:bd:67:14:30:ea:c0:5c:34:d1:
4c:a7:f2:43:90:86:64:64:10:a9:0f:b0:d1:71:32:
06:c2:5b:7e:13:68:3b:87:af:94:38:d7:37:33:f8:
3d:91:97:09:8b:cf:72:2f:99:2b:78:95:7d:20:e0:
80:f3:95:1e:fb:6f:68:31:6b:23:2b:aa:ca:68:e6:
e9:53:97:92:f8:f0:08:f0:a9:c4:ce:fc:d4:08:10:
65:b9:f8:03:e8:bb:53:9b:60:7d:50:40:2b:9a:98:
a6:09:91:5d:43:43:c9:02:28:40:43:f0:dd:b4:f6:
a1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:7A:62:10:21:87:61:BD:27:09:62:E3:F8:36:11:FB:33:FA:28:43
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/KnpiECGHYb0nCWLj-DYR-zP6KEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:159f::/48
Signature Algorithm: sha256WithRSAEncryption
85:24:7a:43:44:f6:88:f8:59:1c:c1:3e:9d:1c:24:61:30:55:
df:d5:5e:82:86:e1:14:89:7f:b3:ee:b3:1b:cf:ed:5d:2b:b8:
af:6b:1e:52:87:0f:06:16:81:ac:7a:1f:54:ed:47:4c:13:75:
03:52:b3:8b:c4:e0:80:d2:ac:89:07:cd:ce:5a:e9:19:70:87:
0d:9a:e8:86:ee:24:35:9f:17:bb:0a:d1:7a:98:ed:5f:f0:43:
a8:00:b9:48:72:f9:f3:06:88:60:dc:d0:27:94:3b:4a:53:be:
e7:3e:b4:b6:79:34:15:1f:0f:87:86:21:13:26:c2:24:9e:ef:
78:33:85:bf:a6:09:11:67:f9:12:e4:93:c7:36:12:ca:5b:de:
2d:36:63:4a:a1:75:7f:61:d0:7b:9a:40:c4:98:07:c4:09:8a:
5c:75:35:8c:0f:19:4b:25:9c:45:30:5c:21:36:6d:b9:03:75:
5a:5d:2c:c1:8b:43:98:2b:07:6c:06:03:ad:ce:d3:a0:04:38:
d7:36:30:8e:68:94:b8:4e:c8:63:fc:70:08:70:91:ff:b0:fa:
44:c4:78:13:e3:4f:77:e0:68:77:a1:9c:1e:2c:21:59:6e:21:
22:e8:65:36:37:f5:3b:c0:be:28:1d:17:a9:5e:7c:d4:4d:b2:
3a:27:f7:ef
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaHFevwL6yDA4AE0PTsnQdr5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYxMTEwMTI0MjEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTdhNjIxMDIxODc2MWJkMjcwOTYyZTNmODM2MTFmYjMzZmEyODQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYlAhcvhBgwYvp78YAZG+Viact2V
kzg89n9rpTnmBNCBooIY/dGqXPq3bfuRX2/uHBWBBXxPRlu+4yaTtwSqAFDc500F
Mn3/9kK/ur460WBcOjSeTa+O3ZBg9UZTjEfJluYV5hEO72fcK29hxU3UVKHEXKEf
xHiFJjtQwoKFxU9zx7qES876eVh+5Pi9ZxQw6sBcNNFMp/JDkIZkZBCpD7DRcTIG
wlt+E2g7h6+UONc3M/g9kZcJi89yL5kreJV9IOCA85Ue+29oMWsjK6rKaObpU5eS
+PAI8KnEzvzUCBBlufgD6LtTm2B9UEArmpimCZFdQ0PJAihAQ/DdtPahLQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFCp6YhAhh2G9Jwli4/g2Efsz+ihDMB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvS25waUVDR0hZYjBuQ1dMai1EWVItelA2S0VNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgaYARWf
MA0GCSqGSIb3DQEBCwUAA4IBAQCFJHpDRPaI+FkcwT6dHCRhMFXf1V6ChuEUiX+z
7rMbz+1dK7ivax5Shw8GFoGseh9U7UdME3UDUrOLxOCA0qyJB83OWukZcIcNmuiG
7iQ1nxe7CtF6mO1f8EOoALlIcvnzBohg3NAnlDtKU77nPrS2eTQVHw+HhiETJsIk
nu94M4W/pgkRZ/kS5JPHNhLKW94tNmNKoXV/YdB7mkDEmAfECYpcdTWMDxlLJZxF
MFwhNm25A3VaXSzBi0OYKwdsBgOtztOgBDjXNjCOaJS4Tshj/HAIcJH/sPpExHgT
40934Gh3oZweLCFZbiEi6GU2N/U7wL4oHRepXnzUTbI6J/fv
-----END CERTIFICATE-----
Generated at Sat Nov 14 21:08:04 2026 by rpki-client