Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/UqsKqWx4iFKWm4oLfRIsfn3cTCc.roa
File: UqsKqWx4iFKWm4oLfRIsfn3cTCc.roa (raw, json)
Hash identifier: de4dFlepSj0cKkb472ZNfK2uNULLROrqjaDoZB5fy0s=
Subject key identifier: 52:AB:0A:A9:6C:78:88:52:96:9B:8A:0B:7D:12:2C:7E:7D:DC:4C:27
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A193BEEF4556EB018CEA4B7CC93EA7E94D
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/UqsKqWx4iFKWm4oLfRIsfn3cTCc.roa
Signing time: Sat 31 Oct 2026 20:55:26 +0000
ROA not before: Sat 31 Oct 2026 20:55:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201164
IP address blocks: 2a06:9801:5b::/48 maxlen: 48
2a06:9801:400::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:93:be:ef:45:56:eb:01:8c:ea:4b:7c:c9:3e:a7:e9:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Oct 31 20:55:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=52ab0aa96c788852969b8a0b7d122c7e7ddc4c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0d:21:e5:48:10:c6:5d:3e:e2:a1:eb:40:47:
20:fb:8e:07:66:c8:29:fd:e5:11:6f:d7:a4:a1:74:
3a:26:a4:0a:ff:04:d8:2e:aa:0a:8b:7d:8d:e6:f6:
6e:5d:e9:0f:1f:fd:48:13:5d:9d:e1:aa:d8:63:8c:
49:ff:aa:d0:97:ec:cf:b9:66:55:c5:49:69:c8:9b:
fd:af:a8:0c:36:3a:4e:0f:a5:f8:d9:52:91:73:d2:
85:b3:1c:41:74:02:ff:b2:0a:04:72:95:9e:4a:e5:
d4:53:3d:2e:fc:33:68:2c:66:79:15:20:37:44:61:
87:70:da:08:2b:e1:a9:eb:d7:6f:92:8c:a4:1a:a7:
6e:a4:cb:ec:de:6c:89:14:24:96:6e:ee:86:b9:b7:
66:a9:55:70:57:2e:2e:8b:a9:2d:ea:2c:9b:cc:45:
ab:e3:1f:04:37:69:34:58:74:37:8e:c4:32:f6:f2:
ca:b0:b5:01:06:af:90:36:6d:fe:1b:21:7f:2f:f4:
e5:4b:4c:b0:01:3d:cc:1d:f1:04:ad:50:1a:0c:8b:
c8:40:1d:3c:da:97:38:23:21:67:18:3a:ee:e3:ad:
61:37:cf:37:7a:15:42:d2:c9:1f:13:0b:88:0a:40:
a9:5f:49:b0:b4:56:62:d1:d8:7e:fa:17:6b:76:21:
42:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:AB:0A:A9:6C:78:88:52:96:9B:8A:0B:7D:12:2C:7E:7D:DC:4C:27
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/UqsKqWx4iFKWm4oLfRIsfn3cTCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:5b::/48
2a06:9801:400::/40
Signature Algorithm: sha256WithRSAEncryption
37:4b:e9:d1:3f:e7:d7:3c:54:f3:a3:2a:bd:91:aa:b7:78:67:
7d:06:2c:a3:05:da:51:25:ca:7e:8a:8e:8a:41:2d:f5:89:4a:
fe:74:38:ee:80:e1:8b:65:24:14:26:11:cd:65:6c:4b:00:0b:
75:cc:ae:9e:ac:bc:02:58:06:23:31:65:c3:8d:df:ba:d8:70:
d6:45:55:87:ec:a3:69:e0:d2:25:c9:fb:d6:74:12:4b:d0:ef:
bd:4e:f2:bd:64:3a:b3:91:7a:c4:30:f1:8a:4e:d1:ad:8b:52:
9e:6e:c7:4f:dc:5a:53:4e:59:1f:3a:63:73:74:a1:20:1a:3f:
cf:80:85:3d:a7:46:4f:14:95:2d:bf:2b:ee:e6:e6:71:d9:c0:
3f:22:78:34:6d:91:77:58:d7:29:c8:9a:21:00:8f:ed:67:4e:
2b:4f:51:8d:50:e8:fa:96:cf:8d:fb:0a:5f:7a:e3:b2:2b:4f:
5d:c1:86:04:31:0e:f1:95:53:3c:8a:61:71:19:96:4e:5c:bb:
be:e8:6c:69:d7:aa:90:c3:c9:e0:dd:fb:d5:d3:af:2a:4f:9a:
3d:d1:d1:9f:c3:b7:68:68:46:a8:17:c5:44:b7:4f:f0:37:a4:
b6:c1:11:df:72:fc:67:41:39:50:af:1f:16:4c:ce:a7:23:84:
94:60:eb:52
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgISAaGTvu9FVusBjOpLfMk+p+lNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYxMDMxMjA1NTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MmFiMGFhOTZjNzg4ODUyOTY5YjhhMGI3ZDEyMmM3ZTdkZGM0YzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoA0h5UgQxl0+4qHrQEcg+44HZsgp
/eURb9ekoXQ6JqQK/wTYLqoKi32N5vZuXekPH/1IE12d4arYY4xJ/6rQl+zPuWZV
xUlpyJv9r6gMNjpOD6X42VKRc9KFsxxBdAL/sgoEcpWeSuXUUz0u/DNoLGZ5FSA3
RGGHcNoIK+Gp69dvkoykGqdupMvs3myJFCSWbu6GubdmqVVwVy4ui6kt6iybzEWr
4x8EN2k0WHQ3jsQy9vLKsLUBBq+QNm3+GyF/L/TlS0ywAT3MHfEErVAaDIvIQB08
2pc4IyFnGDru461hN883ehVC0skfEwuICkCpX0mwtFZi0dh++hdrdiFCYwIDAQAB
o4ICFDCCAhAwHQYDVR0OBBYEFFKrCqlseIhSlpuKC30SLH593EwnMB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvVXFzS3FXeDRpRktXbTRvTGZSSXNmbjNjVENjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcAKgaYAQBb
AwYAKgaYAQQwDQYJKoZIhvcNAQELBQADggEBADdL6dE/59c8VPOjKr2Rqrd4Z30G
LKMF2lElyn6KjopBLfWJSv50OO6A4YtlJBQmEc1lbEsAC3XMrp6svAJYBiMxZcON
37rYcNZFVYfso2ng0iXJ+9Z0EkvQ771O8r1kOrOResQw8YpO0a2LUp5ux0/cWlNO
WR86Y3N0oSAaP8+AhT2nRk8UlS2/K+7m5nHZwD8ieDRtkXdY1ynImiEAj+1nTitP
UY1Q6PqWz437Cl9647IrT13BhgQxDvGVUzyKYXEZlk5cu77obGnXqpDDyeDd+9XT
rypPmj3R0Z/Dt2hoRqgXxUS3T/A3pLbBEd9y/GdBOVCvHxZMzqcjhJRg61I=
-----END CERTIFICATE-----
Generated at Sat Nov 14 21:08:53 2026 by rpki-client