Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/WCvlVu8VHAoNVZAk32n_05gUL70.roa
File: WCvlVu8VHAoNVZAk32n_05gUL70.roa (raw, json)
Hash identifier: 86/wk6v5EoCvtxNXL3nijaFCwqREAr/q25eGfGgdVcw=
Subject key identifier: 58:2B:E5:56:EF:15:1C:0A:0D:55:90:24:DF:69:FF:D3:98:14:2F:BD
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019F13C57B4AE872D4F35F05F6648A6A69AE
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/WCvlVu8VHAoNVZAk32n_05gUL70.roa
Signing time: Mon 29 Jun 2026 14:25:36 +0000
ROA not before: Mon 29 Jun 2026 14:25:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214757
IP address blocks: 2a06:9801:7cb::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:c5:7b:4a:e8:72:d4:f3:5f:05:f6:64:8a:6a:69:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jun 29 14:25:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=582be556ef151c0a0d559024df69ffd398142fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:30:c8:05:e2:a5:f5:d3:81:98:84:de:7d:96:
4a:69:f0:4e:6d:84:1d:b6:3a:d9:be:48:88:40:07:
ab:57:f7:d0:82:7f:58:a1:25:79:58:bc:5a:f3:7b:
05:14:fc:7e:cf:ce:71:29:37:f9:06:71:97:f8:ec:
c6:36:e2:ca:1a:5b:f9:d2:f1:ab:f7:c0:57:1b:aa:
63:aa:30:46:4e:f4:38:ed:58:46:83:3b:a2:7d:09:
05:97:88:f6:43:97:ad:4e:d5:98:1e:28:1b:17:40:
a5:ca:80:44:aa:be:92:1a:99:d2:ca:32:83:c2:82:
a1:cd:c0:78:8b:ed:de:8f:ca:48:ee:78:71:95:17:
01:85:b6:60:df:7d:06:eb:cd:d8:5a:a4:0a:f3:97:
ec:4e:9a:fd:97:ff:62:24:3b:3f:05:25:93:76:c1:
08:ad:66:dc:8d:f5:f4:7c:f3:f8:c3:1e:7d:1d:f7:
1c:8f:e3:64:67:34:21:92:c0:04:b5:a1:a5:e9:93:
f3:39:57:3c:67:af:2d:a6:e2:b4:0a:07:eb:9e:38:
01:ee:71:34:c9:fc:d8:c4:c3:5f:25:02:37:1e:a7:
27:0d:04:b0:fb:06:58:e4:a5:03:8f:3c:33:f2:d8:
c4:16:18:d7:a4:8a:64:ca:32:a8:0d:da:22:a3:45:
53:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:2B:E5:56:EF:15:1C:0A:0D:55:90:24:DF:69:FF:D3:98:14:2F:BD
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/WCvlVu8VHAoNVZAk32n_05gUL70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:7cb::/48
Signature Algorithm: sha256WithRSAEncryption
7b:8b:5b:b5:da:7e:b4:cf:70:ea:72:b6:b3:40:7e:d4:66:86:
65:fd:c1:8d:cd:85:83:18:bd:60:81:cf:23:64:fc:0f:43:6b:
23:a0:38:89:23:c2:ca:c9:9c:97:a1:90:96:38:6f:7b:04:96:
24:ac:d6:50:54:a4:a2:57:6c:29:fc:75:85:b6:58:d8:a0:47:
52:17:f4:82:e0:26:a8:dc:86:ab:7d:2d:37:f4:26:1f:74:c9:
74:d1:ea:db:3d:e3:33:dc:b2:04:b0:a3:58:2a:42:67:2c:ff:
f0:44:4a:5b:fd:5a:34:d1:44:3e:b2:c1:91:8b:19:2d:54:bd:
8f:ab:08:c0:de:da:32:76:de:94:ad:fb:67:4c:ea:64:82:eb:
1a:61:8e:2f:d6:b1:16:b4:42:83:42:a9:96:da:25:91:46:dd:
5b:4d:40:07:2b:35:54:f1:56:31:22:4c:63:3c:c4:f4:c3:1e:
1f:f6:6a:29:36:88:33:7b:8d:8a:60:04:57:95:94:28:73:0d:
42:a2:7a:a9:a4:a3:71:36:de:1f:29:cf:49:eb:85:cc:56:cf:
9b:cc:3f:52:cf:c6:1f:49:3b:a0:bb:ab:e9:41:15:12:6c:ad:
bc:94:5e:f0:4e:3f:68:b6:57:a1:8b:ba:07:3a:47:dd:60:9f:
35:00:bf:62
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ8TxXtK6HLU818F9mSKammuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYwNjI5MTQyNTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODJiZTU1NmVmMTUxYzBhMGQ1NTkwMjRkZjY5ZmZkMzk4MTQyZmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4TDIBeKl9dOBmITefZZKafBObYQd
tjrZvkiIQAerV/fQgn9YoSV5WLxa83sFFPx+z85xKTf5BnGX+OzGNuLKGlv50vGr
98BXG6pjqjBGTvQ47VhGgzuifQkFl4j2Q5etTtWYHigbF0ClyoBEqr6SGpnSyjKD
woKhzcB4i+3ej8pI7nhxlRcBhbZg330G683YWqQK85fsTpr9l/9iJDs/BSWTdsEI
rWbcjfX0fPP4wx59Hfccj+NkZzQhksAEtaGl6ZPzOVc8Z68tpuK0CgfrnjgB7nE0
yfzYxMNfJQI3HqcnDQSw+wZY5KUDjzwz8tjEFhjXpIpkyjKoDdoio0VTzQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFgr5VbvFRwKDVWQJN9p/9OYFC+9MB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvV0N2bFZ1OFZIQW9OVlpBazMybl8wNWdVTDcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgaYAQfL
MA0GCSqGSIb3DQEBCwUAA4IBAQB7i1u12n60z3DqcrazQH7UZoZl/cGNzYWDGL1g
gc8jZPwPQ2sjoDiJI8LKyZyXoZCWOG97BJYkrNZQVKSiV2wp/HWFtljYoEdSF/SC
4Cao3IarfS039CYfdMl00erbPeMz3LIEsKNYKkJnLP/wREpb/Vo00UQ+ssGRixkt
VL2PqwjA3toydt6UrftnTOpkgusaYY4v1rEWtEKDQqmW2iWRRt1bTUAHKzVU8VYx
IkxjPMT0wx4f9mopNogze42KYARXlZQocw1ConqppKNxNt4fKc9J64XMVs+bzD9S
z8YfSTugu6vpQRUSbK28lF7wTj9otlehi7oHOkfdYJ81AL9i
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:50 2026 by rpki-client