Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/aIdpE27j7d5X6KulfLJB3YBeuB8.roa
File: aIdpE27j7d5X6KulfLJB3YBeuB8.roa (raw, json)
Hash identifier: 1Q5zSTJSUlNVdvQDaPzbrIK5wHVvN4QdfeNI7BSuwZY=
Subject key identifier: 68:87:69:13:6E:E3:ED:DE:57:E8:AB:A5:7C:B2:41:DD:80:5E:B8:1F
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019DADA9E9DB53E9993EE04AD6571C104A5D
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/aIdpE27j7d5X6KulfLJB3YBeuB8.roa
Signing time: Tue 21 Apr 2026 01:31:26 +0000
ROA not before: Tue 21 Apr 2026 01:31:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214428
IP address blocks: 2a06:9801:500::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:34:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ad:a9:e9:db:53:e9:99:3e:e0:4a:d6:57:1c:10:4a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Apr 21 01:31:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=688769136ee3edde57e8aba57cb241dd805eb81f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8f:3e:a3:f6:18:2a:75:4d:58:60:5f:8c:34:
30:0a:0f:5e:25:38:08:7f:86:81:47:33:e9:39:34:
a1:fc:02:2f:71:b9:e6:af:6a:f0:d3:0b:7f:66:1e:
27:03:c5:27:95:af:58:16:e5:61:88:fc:71:8a:6a:
ea:18:48:11:8d:69:c7:9f:8d:69:29:e6:56:49:b0:
d9:09:f2:dc:23:80:64:5f:27:07:39:98:ac:32:77:
96:a6:91:35:18:bd:41:46:9e:93:b9:42:73:b9:1b:
c9:cd:b7:4d:15:c6:f2:44:59:5f:a1:e7:b0:d1:41:
02:2a:1f:9c:ef:f8:dc:ac:98:66:9d:1e:cf:da:34:
dd:10:71:15:87:0d:d4:96:84:a7:d2:8b:74:26:51:
33:e6:90:c0:e1:1c:0f:7d:a5:92:95:5b:40:01:f0:
4a:25:cb:27:1e:bb:fa:b1:d6:26:ae:c7:96:ce:a4:
6c:7b:f6:4e:ce:da:1b:ef:12:9a:21:37:e3:f7:41:
3c:14:ea:9c:aa:41:17:21:38:6b:b8:13:e1:a7:87:
91:37:f3:f7:6a:44:5d:fe:f1:00:d3:5e:95:ed:50:
f7:62:25:da:32:06:75:2c:79:f1:20:3a:44:c1:a2:
aa:00:ee:b6:15:db:e4:2d:a5:b1:b1:54:1f:48:72:
ed:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:87:69:13:6E:E3:ED:DE:57:E8:AB:A5:7C:B2:41:DD:80:5E:B8:1F
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/aIdpE27j7d5X6KulfLJB3YBeuB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:500::/40
Signature Algorithm: sha256WithRSAEncryption
46:9c:08:2f:19:12:02:b6:54:28:f0:1c:d0:0d:9b:c2:02:bb:
d7:1b:11:01:c7:bc:cb:dc:0e:59:92:37:d1:56:40:38:35:88:
8b:91:ea:c9:74:50:bc:d3:47:ad:0a:b6:e2:22:28:f9:28:15:
74:40:3c:0d:3b:db:76:4e:bb:23:0d:66:d7:67:8d:29:24:05:
a0:06:41:4f:ab:51:4b:af:1a:d9:82:6d:72:ec:f1:ba:d8:39:
a3:05:2b:16:09:ae:29:9b:bc:4a:a3:41:70:e5:c1:ba:ff:79:
fc:77:85:c6:4a:66:84:4e:1e:5e:8b:d8:7a:c4:7d:f1:f6:c2:
f6:30:8b:2c:55:7f:e7:90:3c:c5:dc:d5:e3:1e:e8:c4:7d:a2:
11:95:61:5b:b5:74:f4:8d:12:6f:98:a5:52:ea:72:f5:7d:63:
bd:8d:4a:c1:44:57:5f:8c:f1:df:cd:27:19:ab:d0:e8:25:91:
48:d0:ff:64:74:30:b0:81:b5:91:03:2c:35:0d:71:fc:7e:91:
7b:30:2f:ef:4c:2f:0b:d3:11:94:20:d2:79:89:7e:0c:2b:96:
86:80:ea:22:75:33:fb:da:db:17:aa:3c:44:40:b4:96:f5:0f:
39:0b:3f:4c:d0:8c:ad:be:b1:8f:3d:61:80:46:8f:fb:52:2c:
57:4e:37:af
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZ2tqenbU+mZPuBK1lccEEpdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYwNDIxMDEzMTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODg3NjkxMzZlZTNlZGRlNTdlOGFiYTU3Y2IyNDFkZDgwNWViODFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuI8+o/YYKnVNWGBfjDQwCg9eJTgI
f4aBRzPpOTSh/AIvcbnmr2rw0wt/Zh4nA8Unla9YFuVhiPxximrqGEgRjWnHn41p
KeZWSbDZCfLcI4BkXycHOZisMneWppE1GL1BRp6TuUJzuRvJzbdNFcbyRFlfoeew
0UECKh+c7/jcrJhmnR7P2jTdEHEVhw3UloSn0ot0JlEz5pDA4RwPfaWSlVtAAfBK
JcsnHrv6sdYmrseWzqRse/ZOztob7xKaITfj90E8FOqcqkEXIThruBPhp4eRN/P3
akRd/vEA016V7VD3YiXaMgZ1LHnxIDpEwaKqAO62FdvkLaWxsVQfSHLtpwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFGiHaRNu4+3eV+irpXyyQd2AXrgfMB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvYUlkcEUyN2o3ZDVYNkt1bGZMSkIzWUJldUI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgaYAQUw
DQYJKoZIhvcNAQELBQADggEBAEacCC8ZEgK2VCjwHNANm8ICu9cbEQHHvMvcDlmS
N9FWQDg1iIuR6sl0ULzTR60KtuIiKPkoFXRAPA0723ZOuyMNZtdnjSkkBaAGQU+r
UUuvGtmCbXLs8brYOaMFKxYJrimbvEqjQXDlwbr/efx3hcZKZoROHl6L2HrEffH2
wvYwiyxVf+eQPMXc1eMe6MR9ohGVYVu1dPSNEm+YpVLqcvV9Y72NSsFEV1+M8d/N
Jxmr0OglkUjQ/2R0MLCBtZEDLDUNcfx+kXswL+9MLwvTEZQg0nmJfgwrloaA6iJ1
M/va2xeqPERAtJb1DzkLP0zQjK2+sY89YYBGj/tSLFdON68=
-----END CERTIFICATE-----
Generated at Tue May 12 22:17:02 2026 by rpki-client