Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/V0a_LmCoebHp8ZJ25YN-xtlsq5w.roa
File: V0a_LmCoebHp8ZJ25YN-xtlsq5w.roa (raw, json)
Hash identifier: L0Wr3PuslT0gaJPa59SBFxQ+wg3AzBQFUCa20tjNLQQ=
Subject key identifier: 57:46:BF:2E:60:A8:79:B1:E9:F1:92:76:E5:83:7E:C6:D9:6C:AB:9C
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019D06FCE3FB389E130324CD71EDE40BD54E
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/V0a_LmCoebHp8ZJ25YN-xtlsq5w.roa
Signing time: Thu 19 Mar 2026 16:45:29 +0000
ROA not before: Thu 19 Mar 2026 16:45:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199892
IP address blocks: 2a06:9801:224::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:06:fc:e3:fb:38:9e:13:03:24:cd:71:ed:e4:0b:d5:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Mar 19 16:45:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5746bf2e60a879b1e9f19276e5837ec6d96cab9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:01:b6:61:f5:32:35:eb:e7:9d:82:99:bd:9a:
07:4f:b1:61:ec:ac:33:32:d1:43:8c:91:d7:68:86:
a5:3b:a0:17:0c:c7:2d:ee:9e:30:d6:3c:a6:b2:1b:
93:dd:7b:c2:38:b6:71:e1:3f:5f:9e:77:39:cb:f2:
86:7f:fa:e3:11:8e:05:3c:8d:16:2b:e0:69:09:a0:
1b:41:4c:18:6b:65:16:d9:ac:94:22:fa:ed:f5:87:
34:4c:cc:d0:30:54:d2:cb:75:7b:d8:bb:6e:88:12:
cd:7b:5c:26:a7:50:1b:92:b0:74:86:fc:74:fe:d1:
54:5f:6a:e3:79:ec:61:59:80:61:c9:bd:c4:d9:f9:
6e:9e:bb:74:6c:75:ed:f8:c4:8e:d1:cd:08:72:45:
12:d0:21:97:13:9d:1b:84:96:6a:06:10:5c:14:6d:
02:aa:0d:d3:2d:39:d5:c5:8e:15:aa:8d:88:1a:7e:
46:b5:a2:f5:b1:fa:53:2a:e6:16:d2:52:42:77:8b:
77:0c:78:90:91:fc:80:87:c6:bf:e3:95:da:d6:2b:
6e:08:1d:71:15:d7:0f:e0:e5:69:da:79:b1:bf:fd:
83:25:64:7c:82:77:40:a4:34:ef:73:dc:d9:bf:99:
6a:89:ac:9c:0d:99:89:1a:52:a3:4d:6d:0c:81:6e:
3f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:46:BF:2E:60:A8:79:B1:E9:F1:92:76:E5:83:7E:C6:D9:6C:AB:9C
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/V0a_LmCoebHp8ZJ25YN-xtlsq5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:224::/48
Signature Algorithm: sha256WithRSAEncryption
2f:9b:7d:53:09:e1:d7:b8:19:59:93:b7:0d:ed:c8:02:b5:b5:
c0:d4:ad:78:d6:b1:c0:7b:16:a2:37:7c:24:82:fc:4f:d9:4d:
64:fb:68:f3:8b:62:13:6c:f8:4a:0f:aa:7d:a8:67:12:08:27:
aa:07:c6:54:7e:1d:11:df:05:19:2e:e7:d6:4d:a1:18:ed:fb:
32:b0:15:11:f9:63:50:ee:28:54:26:d3:3f:85:c0:9d:fa:18:
b6:ad:66:aa:38:f6:f6:1e:7b:90:27:7d:15:8f:ba:82:b4:61:
99:ff:16:4b:7b:21:58:c5:7f:f5:d2:fc:0a:a7:0e:15:f2:43:
3d:e7:ed:94:51:c6:ce:e8:8a:99:ce:01:35:88:88:84:1d:3e:
a0:41:8e:61:41:40:6f:c4:c7:9b:fc:25:b7:b1:32:d6:d7:9c:
83:3a:f6:7f:17:d7:f9:07:ba:a7:99:73:71:d3:db:88:50:9d:
2d:ce:ff:91:30:5c:6e:50:5d:ac:da:79:75:76:d7:22:69:87:
10:f9:6a:d8:f0:07:6b:e6:3c:08:d8:66:23:96:22:d6:e1:d7:
43:56:15:b7:04:7e:5a:5e:5d:da:dd:44:af:07:76:87:41:8d:
f3:cf:4e:1c:65:66:37:30:78:1f:f2:30:ff:f7:20:dd:cd:54:
04:bd:bd:17
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ0G/OP7OJ4TAyTNce3kC9VOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYwMzE5MTY0NTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzQ2YmYyZTYwYTg3OWIxZTlmMTkyNzZlNTgzN2VjNmQ5NmNhYjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowG2YfUyNevnnYKZvZoHT7Fh7Kwz
MtFDjJHXaIalO6AXDMct7p4w1jymshuT3XvCOLZx4T9fnnc5y/KGf/rjEY4FPI0W
K+BpCaAbQUwYa2UW2ayUIvrt9Yc0TMzQMFTSy3V72LtuiBLNe1wmp1AbkrB0hvx0
/tFUX2rjeexhWYBhyb3E2flunrt0bHXt+MSO0c0IckUS0CGXE50bhJZqBhBcFG0C
qg3TLTnVxY4Vqo2IGn5GtaL1sfpTKuYW0lJCd4t3DHiQkfyAh8a/45Xa1ituCB1x
FdcP4OVp2nmxv/2DJWR8gndApDTvc9zZv5lqiaycDZmJGlKjTW0MgW4/KwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFdGvy5gqHmx6fGSduWDfsbZbKucMB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvVjBhX0xtQ29lYkhwOFpKMjVZTi14dGxzcTV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgaYAQIk
MA0GCSqGSIb3DQEBCwUAA4IBAQAvm31TCeHXuBlZk7cN7cgCtbXA1K141rHAexai
N3wkgvxP2U1k+2jzi2ITbPhKD6p9qGcSCCeqB8ZUfh0R3wUZLufWTaEY7fsysBUR
+WNQ7ihUJtM/hcCd+hi2rWaqOPb2HnuQJ30Vj7qCtGGZ/xZLeyFYxX/10vwKpw4V
8kM95+2UUcbO6IqZzgE1iIiEHT6gQY5hQUBvxMeb/CW3sTLW15yDOvZ/F9f5B7qn
mXNx09uIUJ0tzv+RMFxuUF2s2nl1dtciaYcQ+WrY8Adr5jwI2GYjliLW4ddDVhW3
BH5aXl3a3USvB3aHQY3zz04cZWY3MHgf8jD/9yDdzVQEvb0X
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:18:36 2026 by rpki-client