Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/bRd1mJoEjPeY4vmA0TPx2g7p3wc.roa
File: bRd1mJoEjPeY4vmA0TPx2g7p3wc.roa (raw, json)
Hash identifier: 0qggyqlOHC0htGD2LJR3Z4AGVSaLOTTcev7wadjfrC8=
Subject key identifier: 6D:17:75:98:9A:04:8C:F7:98:E2:F9:80:D1:33:F1:DA:0E:E9:DF:07
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A14A141E66E86E7A61DA5BC1B2E2E461BF
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/bRd1mJoEjPeY4vmA0TPx2g7p3wc.roa
Signing time: Sat 17 Oct 2026 13:36:34 +0000
ROA not before: Sat 17 Oct 2026 13:36:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200085
IP address blocks: 2a06:9801:240::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4a:14:1e:66:e8:6e:7a:61:da:5b:c1:b2:e2:e4:61:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Oct 17 13:36:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d1775989a048cf798e2f980d133f1da0ee9df07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:50:9b:8d:f9:d1:3e:73:e3:81:7d:3b:0d:e1:
c1:71:22:bc:0f:f5:58:aa:90:73:f5:8e:11:19:a7:
6d:58:60:5a:57:25:9d:4b:fa:62:a2:f9:c4:ee:45:
5e:d3:44:2f:a3:9c:c4:54:13:9a:74:c4:2f:05:26:
ed:a5:d3:58:ce:79:1a:83:fc:e4:e3:d4:35:78:94:
43:67:75:10:ea:06:dd:cd:dc:82:a6:fe:20:a5:17:
ab:5a:60:b1:85:41:12:8e:f9:5d:72:43:46:8a:d8:
e6:59:dc:6a:85:38:24:27:77:eb:d0:e9:54:e7:60:
c7:75:9d:10:46:66:55:a0:53:2e:f0:98:c9:34:0a:
b1:c0:df:28:a7:c5:48:b7:4b:21:f0:e9:09:32:bd:
97:0d:d0:a0:7c:76:3c:1d:f7:7d:3e:0e:c6:72:61:
99:8e:52:db:06:ea:ea:a5:c3:40:b4:32:0f:73:04:
20:1b:10:f5:19:12:fa:84:05:f9:d1:17:f6:7c:34:
a8:48:72:70:db:0a:c0:1f:b2:48:dc:2e:ea:6d:a8:
a6:1a:85:71:9c:65:73:3c:ee:14:a6:86:4b:27:d0:
24:1f:a6:9f:6d:8f:0d:1e:28:21:1b:6f:8a:a6:bb:
d5:48:87:5d:4b:6a:95:43:21:23:67:b5:ed:71:0b:
25:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:17:75:98:9A:04:8C:F7:98:E2:F9:80:D1:33:F1:DA:0E:E9:DF:07
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/bRd1mJoEjPeY4vmA0TPx2g7p3wc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:240::/44
Signature Algorithm: sha256WithRSAEncryption
69:9f:e7:3e:ce:8f:3a:36:55:30:78:01:1d:c5:b9:68:d9:e0:
2b:ac:bb:35:8c:d1:24:c8:62:ba:45:67:7f:9c:a1:b6:45:62:
26:b2:9e:60:07:b1:ef:c1:56:98:fa:65:d3:c9:c4:d3:d0:c4:
4f:0b:8b:a7:7e:ba:c6:51:a9:c5:00:c5:8e:63:6a:7f:63:22:
93:ad:83:d3:3c:9f:46:8c:f7:61:2b:59:49:b7:1a:6f:93:81:
02:d1:45:9b:5a:7b:81:59:01:5a:df:a6:8d:95:44:ec:3b:b3:
e1:ab:10:71:da:06:de:a0:8c:ae:80:b5:f8:62:2c:dd:80:2e:
f4:a1:4b:49:dd:9b:a3:7e:74:4f:63:57:84:cc:6d:35:71:f5:
54:ea:fd:e8:f6:4b:7f:ef:78:aa:8c:a1:83:70:ee:45:8f:0a:
c9:ee:60:ff:4c:13:fd:ff:0e:ef:a0:41:cf:e1:a9:76:46:17:
7e:44:ee:b4:12:50:93:25:38:57:5c:dd:53:c2:b5:c0:4b:45:
28:5d:b3:fa:0f:d7:e7:84:99:d1:f2:1c:1b:b5:cb:3b:46:52:
5e:63:d8:e6:07:ad:57:cd:49:77:5c:b5:c1:2d:ba:c5:90:f9:
a8:22:18:de:52:a4:19:a4:c5:c2:28:52:e8:5f:6b:a9:ba:cc:
24:87:74:5a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaFKFB5m6G56YdpbwbLi5GG/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYxMDE3MTMzNjM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDE3NzU5ODlhMDQ4Y2Y3OThlMmY5ODBkMTMzZjFkYTBlZTlkZjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFCbjfnRPnPjgX07DeHBcSK8D/VY
qpBz9Y4RGadtWGBaVyWdS/piovnE7kVe00Qvo5zEVBOadMQvBSbtpdNYznkag/zk
49Q1eJRDZ3UQ6gbdzdyCpv4gpRerWmCxhUESjvldckNGitjmWdxqhTgkJ3fr0OlU
52DHdZ0QRmZVoFMu8JjJNAqxwN8op8VIt0sh8OkJMr2XDdCgfHY8Hfd9Pg7GcmGZ
jlLbBurqpcNAtDIPcwQgGxD1GRL6hAX50Rf2fDSoSHJw2wrAH7JI3C7qbaimGoVx
nGVzPO4UpoZLJ9AkH6afbY8NHighG2+KprvVSIddS2qVQyEjZ7XtcQslWwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFG0XdZiaBIz3mOL5gNEz8doO6d8HMB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvYlJkMW1Kb0VqUGVZNHZtQTBUUHgyZzdwM3djLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgaYAQJA
MA0GCSqGSIb3DQEBCwUAA4IBAQBpn+c+zo86NlUweAEdxblo2eArrLs1jNEkyGK6
RWd/nKG2RWImsp5gB7HvwVaY+mXTycTT0MRPC4unfrrGUanFAMWOY2p/YyKTrYPT
PJ9GjPdhK1lJtxpvk4EC0UWbWnuBWQFa36aNlUTsO7PhqxBx2gbeoIyugLX4Yizd
gC70oUtJ3ZujfnRPY1eEzG01cfVU6v3o9kt/73iqjKGDcO5FjwrJ7mD/TBP9/w7v
oEHP4al2Rhd+RO60ElCTJThXXN1TwrXAS0UoXbP6D9fnhJnR8hwbtcs7RlJeY9jm
B61XzUl3XLXBLbrFkPmoIhjeUqQZpMXCKFLoX2upuswkh3Ra
-----END CERTIFICATE-----
Generated at Sat Nov 14 21:08:51 2026 by rpki-client