Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/_vD-d8Aoooz2R89j7O6bxh1L1a4.roa
File: _vD-d8Aoooz2R89j7O6bxh1L1a4.roa (raw, json)
Hash identifier: W27G7bQR9Tgn4gsjSW52ZoQOZIqi1sMZRC1C3noleLQ=
Subject key identifier: FE:F0:FE:77:C0:28:A2:8C:F6:47:CF:63:EC:EE:9B:C6:1D:4B:D5:AE
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019D03B29AC9734F2097F5C3945CA5343B5A
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/_vD-d8Aoooz2R89j7O6bxh1L1a4.roa
Signing time: Thu 19 Mar 2026 01:25:29 +0000
ROA not before: Thu 19 Mar 2026 01:25:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199948
IP address blocks: 2a06:9801:220::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:03:b2:9a:c9:73:4f:20:97:f5:c3:94:5c:a5:34:3b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Mar 19 01:25:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fef0fe77c028a28cf647cf63ecee9bc61d4bd5ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6c:82:18:30:6b:1b:be:30:2a:e4:89:f7:7e:
94:0d:0c:d6:91:1a:b1:4b:bf:2b:b4:a3:89:be:6f:
79:b8:da:a6:89:3c:81:5c:08:47:42:99:94:46:f1:
71:3e:8c:76:27:19:3e:9b:36:05:75:7e:00:75:8d:
e8:26:52:9b:7e:fc:66:b0:60:3c:0a:6b:9e:48:13:
a0:43:45:5b:cc:af:51:25:37:aa:59:66:55:4f:aa:
18:a1:d1:8e:c5:14:19:29:5a:c8:71:09:59:8d:0b:
79:eb:f0:48:0a:1b:8d:c3:fb:58:6e:d5:c8:d4:6f:
16:7d:03:e4:cc:1b:a1:97:0e:24:b1:78:9b:84:57:
aa:40:35:4a:07:11:8e:5b:be:09:9e:6e:44:5c:ae:
06:c6:77:0d:4b:56:8a:fd:6e:ff:46:98:18:b7:3c:
76:98:da:ce:bc:61:71:ae:8e:3b:2e:ff:e6:5b:c1:
fb:9d:71:48:f7:eb:dd:10:55:34:df:0e:40:7b:17:
01:0c:01:c4:4f:38:63:2e:06:b2:83:cf:21:3e:1c:
8a:8a:41:db:c5:35:cb:57:c0:e4:9d:34:54:69:59:
de:e8:bb:ab:25:5c:1e:88:43:a4:82:05:41:70:f1:
5b:eb:f2:f3:11:24:01:d5:b6:7f:bb:10:9e:6a:d8:
e6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F0:FE:77:C0:28:A2:8C:F6:47:CF:63:EC:EE:9B:C6:1D:4B:D5:AE
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/_vD-d8Aoooz2R89j7O6bxh1L1a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:220::/48
Signature Algorithm: sha256WithRSAEncryption
57:53:28:eb:e7:bf:d2:99:8c:d5:ba:71:d4:ff:73:bc:2c:36:
dc:e5:49:59:c1:f0:47:ff:4c:7e:96:1e:b0:95:74:5f:a2:df:
a8:04:3b:f6:e6:58:1b:03:7b:07:f7:e1:84:f3:bc:dc:5b:33:
03:ee:6a:ba:66:6c:68:67:fe:eb:c9:de:03:1e:c5:a5:61:ef:
06:2a:f0:30:ae:33:7f:6e:1e:91:02:e0:7d:c2:a3:cd:de:b7:
cd:8c:ad:88:f5:c7:0a:a0:16:a4:b7:3f:52:bf:1e:49:ca:cf:
0e:a1:e1:92:c2:79:dd:78:98:32:0e:13:bf:91:f0:6a:df:a9:
16:d4:1e:9e:6a:e1:59:37:e3:44:4c:f4:2f:22:eb:f7:18:9a:
62:89:3f:3f:87:2b:89:d0:54:1c:fa:b2:b6:3f:d2:6b:fe:32:
cb:ba:dc:d7:d1:a2:d7:f6:99:9a:26:b1:68:c4:27:c3:f9:a7:
64:9e:36:9f:9b:02:ef:0e:c5:76:8f:3f:9f:03:b8:94:63:ff:
73:67:b0:25:ea:cc:74:f2:dc:bf:92:a5:08:dd:92:32:1d:9a:
42:7f:c5:70:5e:04:04:4e:f8:84:0e:79:ad:0c:b7:fe:58:d2:
02:e3:e7:2d:dc:5a:c5:81:4b:aa:c0:4d:0a:6a:d8:32:76:2b:
25:a4:36:e6
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ0DsprJc08gl/XDlFylNDtaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYwMzE5MDEyNTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZWYwZmU3N2MwMjhhMjhjZjY0N2NmNjNlY2VlOWJjNjFkNGJkNWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimyCGDBrG74wKuSJ936UDQzWkRqx
S78rtKOJvm95uNqmiTyBXAhHQpmURvFxPox2Jxk+mzYFdX4AdY3oJlKbfvxmsGA8
CmueSBOgQ0VbzK9RJTeqWWZVT6oYodGOxRQZKVrIcQlZjQt56/BIChuNw/tYbtXI
1G8WfQPkzBuhlw4ksXibhFeqQDVKBxGOW74Jnm5EXK4GxncNS1aK/W7/RpgYtzx2
mNrOvGFxro47Lv/mW8H7nXFI9+vdEFU03w5AexcBDAHETzhjLgayg88hPhyKikHb
xTXLV8DknTRUaVne6LurJVweiEOkggVBcPFb6/LzESQB1bZ/uxCeatjmuQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFP7w/nfAKKKM9kfPY+zum8YdS9WuMB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvX3ZELWQ4QW9vb3oyUjg5ajdPNmJ4aDFMMWE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgaYAQIg
MA0GCSqGSIb3DQEBCwUAA4IBAQBXUyjr57/SmYzVunHU/3O8LDbc5UlZwfBH/0x+
lh6wlXRfot+oBDv25lgbA3sH9+GE87zcWzMD7mq6ZmxoZ/7ryd4DHsWlYe8GKvAw
rjN/bh6RAuB9wqPN3rfNjK2I9ccKoBaktz9Svx5Jys8OoeGSwnndeJgyDhO/kfBq
36kW1B6eauFZN+NETPQvIuv3GJpiiT8/hyuJ0FQc+rK2P9Jr/jLLutzX0aLX9pma
JrFoxCfD+adknjafmwLvDsV2jz+fA7iUY/9zZ7Al6sx08ty/kqUI3ZIyHZpCf8Vw
XgQETviEDnmtDLf+WNIC4+ct3FrFgUuqwE0KatgydislpDbm
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:18:37 2026 by rpki-client