Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/VunQJXMmojdlsqQfg0hKo8QtQF8.roa
File: VunQJXMmojdlsqQfg0hKo8QtQF8.roa (raw, json)
Hash identifier: DhN/wwf0C60AJs46+1Lqe9JkmEKvd5KpeMMvIisZPvw=
Subject key identifier: 56:E9:D0:25:73:26:A2:37:65:B2:A4:1F:83:48:4A:A3:C4:2D:40:5F
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019F42E4181951CE3A2FD1261893BB27D567
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/VunQJXMmojdlsqQfg0hKo8QtQF8.roa
Signing time: Wed 08 Jul 2026 18:01:12 +0000
ROA not before: Wed 08 Jul 2026 18:01:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201028
IP address blocks: 2a06:9801:1000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:42:e4:18:19:51:ce:3a:2f:d1:26:18:93:bb:27:d5:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jul 8 18:01:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56e9d0257326a23765b2a41f83484aa3c42d405f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b2:84:c6:27:38:43:45:7f:08:fe:18:25:38:
f1:05:a1:09:5c:11:aa:e4:63:fe:00:95:a7:5f:87:
90:e1:27:95:b6:1c:3f:32:24:28:b8:03:3d:4c:db:
c8:f8:9d:9c:de:7c:d4:1f:2e:a2:a0:50:34:0d:96:
1c:18:18:5a:cd:bf:d6:6a:55:0e:da:29:1f:66:00:
96:8a:cc:76:f8:99:71:4f:f8:6b:cd:59:80:84:19:
d3:5a:01:f9:b7:c1:59:68:94:94:42:56:dc:48:46:
74:18:69:6b:67:de:ca:cf:39:be:2b:67:cb:bc:03:
66:31:33:33:73:76:2d:d2:d3:62:f2:6c:9d:64:23:
fd:e5:aa:65:31:14:d1:a1:d1:06:47:55:d7:e4:93:
cb:81:9c:d8:61:f1:85:21:d7:ef:71:83:bc:c2:e1:
be:95:35:56:7d:b1:20:10:82:88:26:70:18:a1:62:
85:ef:7c:df:4d:73:88:4d:a2:0c:4a:6c:94:db:56:
70:52:dc:20:52:ba:7d:86:6c:c9:c9:4d:1b:7e:61:
d7:ac:3c:0c:ed:fa:c8:01:a9:69:03:59:29:0e:62:
03:6a:2e:96:c3:ef:c9:ba:8a:df:74:fc:ae:75:cd:
e0:dc:a4:64:9f:b3:9c:46:60:a0:e7:87:e7:eb:5d:
07:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E9:D0:25:73:26:A2:37:65:B2:A4:1F:83:48:4A:A3:C4:2D:40:5F
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/VunQJXMmojdlsqQfg0hKo8QtQF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:1000::/40
Signature Algorithm: sha256WithRSAEncryption
49:05:51:0f:d9:25:37:54:7c:75:86:32:2e:a0:9e:05:fc:68:
b9:79:42:ab:d6:9f:9b:d7:e4:d3:96:5f:d9:ca:6e:6c:9a:ac:
19:71:fb:23:10:4b:db:eb:be:c6:14:92:4c:dd:d3:0f:0a:96:
94:91:88:76:bd:51:2e:23:54:c4:70:b4:66:94:8e:9d:6b:4b:
d1:59:9c:00:fb:24:31:af:89:e7:4e:96:dc:23:fc:fb:ad:1b:
73:b8:b3:de:0b:c5:9a:da:f0:c8:57:ae:26:32:5c:ad:35:df:
8b:39:f2:e6:99:62:01:ca:3f:b1:2b:9d:28:78:38:5f:88:ca:
20:64:ea:b6:a4:0f:ab:82:99:ab:cc:0b:6b:e8:6b:93:1b:9b:
ba:c2:1b:63:b5:04:86:42:b0:43:04:8a:f2:31:c7:54:96:4c:
62:b3:63:ee:c6:53:29:2c:2e:ff:f7:b2:15:96:55:0e:dd:4d:
f1:5f:00:5d:16:e7:65:3d:4f:b9:c4:7a:31:09:26:0d:f1:68:
b4:52:42:50:8d:f0:0a:d2:7d:75:fa:9c:0d:ec:69:6d:5d:08:
22:15:38:d7:f0:23:81:7a:83:10:9e:60:82:f9:50:c8:a4:fe:
80:c9:f6:05:57:a8:9f:4a:32:b0:4f:f2:56:f0:43:e3:a8:a9:
d9:e4:c5:17
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZ9C5BgZUc46L9EmGJO7J9VnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYwNzA4MTgwMTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NmU5ZDAyNTczMjZhMjM3NjViMmE0MWY4MzQ4NGFhM2M0MmQ0MDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubKExic4Q0V/CP4YJTjxBaEJXBGq
5GP+AJWnX4eQ4SeVthw/MiQouAM9TNvI+J2c3nzUHy6ioFA0DZYcGBhazb/WalUO
2ikfZgCWisx2+JlxT/hrzVmAhBnTWgH5t8FZaJSUQlbcSEZ0GGlrZ97Kzzm+K2fL
vANmMTMzc3Yt0tNi8mydZCP95aplMRTRodEGR1XX5JPLgZzYYfGFIdfvcYO8wuG+
lTVWfbEgEIKIJnAYoWKF73zfTXOITaIMSmyU21ZwUtwgUrp9hmzJyU0bfmHXrDwM
7frIAalpA1kpDmIDai6Ww+/JuorfdPyudc3g3KRkn7OcRmCg54fn610HSwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFFbp0CVzJqI3ZbKkH4NISqPELUBfMB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvVnVuUUpYTW1vamRsc3FRZmcwaEtvOFF0UUY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgaYARAw
DQYJKoZIhvcNAQELBQADggEBAEkFUQ/ZJTdUfHWGMi6gngX8aLl5QqvWn5vX5NOW
X9nKbmyarBlx+yMQS9vrvsYUkkzd0w8KlpSRiHa9US4jVMRwtGaUjp1rS9FZnAD7
JDGviedOltwj/PutG3O4s94LxZra8MhXriYyXK0134s58uaZYgHKP7ErnSh4OF+I
yiBk6rakD6uCmavMC2voa5Mbm7rCG2O1BIZCsEMEivIxx1SWTGKzY+7GUyksLv/3
shWWVQ7dTfFfAF0W52U9T7nEejEJJg3xaLRSQlCN8ArSfXX6nA3saW1dCCIVONfw
I4F6gxCeYIL5UMik/oDJ9gVXqJ9KMrBP8lbwQ+OoqdnkxRc=
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:31:56 2026 by rpki-client