Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/mlpZZbQV23iJA9_bIGdJl3VJamg.roa
File: mlpZZbQV23iJA9_bIGdJl3VJamg.roa (raw, json)
Hash identifier: MT0xt2jPnUUsGlpYzWNTvS1Sw391YlPtoJEVkB1ajHw=
Subject key identifier: 9A:5A:59:65:B4:15:DB:78:89:03:DF:DB:20:67:49:97:75:49:6A:68
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A1B17158AEE4CCCBEC3301075C4E89176C
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/mlpZZbQV23iJA9_bIGdJl3VJamg.roa
Signing time: Fri 06 Nov 2026 15:19:17 +0000
ROA not before: Fri 06 Nov 2026 15:19:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200177
IP address blocks: 2a06:9801:88::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 19:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b1:71:58:ae:e4:cc:cb:ec:33:01:07:5c:4e:89:17:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Nov 6 15:19:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9a5a5965b415db788903dfdb2067499775496a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:57:20:ec:95:98:cf:f4:b4:0d:b7:e0:82:fe:
8f:10:fc:c4:d4:2b:25:44:46:16:cd:07:03:70:a2:
ec:44:ae:53:2a:ba:df:f6:a7:88:bf:fe:f9:30:58:
26:9f:2b:af:e0:ad:06:ec:1e:1d:51:0a:23:d6:0a:
7a:de:94:ae:5e:1e:5b:f6:f6:08:47:f5:91:10:b8:
96:9a:7f:4a:1a:04:fb:23:c2:60:42:3c:49:b1:75:
a2:6c:13:45:34:5a:76:03:1d:e1:db:90:a6:89:36:
9e:ba:35:2d:94:02:10:09:20:87:69:47:3e:64:7e:
98:87:11:dc:37:8a:98:c1:5d:5e:18:43:39:4f:95:
71:1d:91:41:50:ca:69:04:8a:52:5a:eb:fa:f7:65:
a5:47:5d:6d:0e:77:9c:d0:0e:41:85:76:d7:22:17:
4d:00:e8:bb:8c:f3:68:24:76:25:85:83:b3:9f:0e:
cd:67:e1:00:2f:0d:15:8d:40:79:3d:6a:17:92:df:
88:bc:3d:bc:55:15:8c:55:13:38:1d:33:5c:24:ed:
eb:58:f4:b6:f4:fe:4c:38:8f:ae:24:07:d4:03:b4:
07:0a:48:b8:26:1f:55:fa:cb:1d:cd:61:36:7e:10:
b3:d6:b9:1b:c1:b4:a5:bf:16:0d:0c:88:22:a3:e8:
dc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5A:59:65:B4:15:DB:78:89:03:DF:DB:20:67:49:97:75:49:6A:68
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/mlpZZbQV23iJA9_bIGdJl3VJamg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:88::/48
Signature Algorithm: sha256WithRSAEncryption
3c:9a:47:65:dd:ea:19:ed:8d:2b:a0:f7:db:b2:75:cd:a4:71:
5d:23:cf:fd:64:f1:6d:b8:ee:20:6c:99:1a:a2:6c:0a:80:59:
cd:e7:4d:35:e7:4d:7e:d4:32:1e:a7:e6:86:01:ce:a1:19:23:
4b:e8:ac:27:41:fe:72:80:f2:ef:04:c9:a9:f5:b1:e1:25:19:
1b:42:19:72:08:be:a5:83:23:5a:68:19:c3:3b:4d:14:43:0f:
f8:27:10:7e:26:f6:2c:32:72:a9:06:ca:de:2d:81:55:06:ba:
53:0f:8e:0d:e0:e5:c0:46:c9:6c:2e:1e:14:14:6d:81:c1:d8:
ee:46:22:07:1c:1a:16:8e:ee:bb:80:ea:ba:d8:1d:ba:45:69:
22:dc:08:ce:c2:18:f6:54:9e:71:e0:04:86:6c:e5:10:d5:89:
e2:73:4d:4c:34:1b:61:4e:48:84:54:b3:57:fb:97:52:99:74:
d7:bf:ce:ed:ee:2a:51:a9:62:b3:29:3c:6a:9d:66:82:32:74:
69:f3:1e:6a:8a:1b:8c:ab:1f:f9:9b:a1:68:52:11:ba:88:a7:
dd:85:5a:7f:e1:64:ae:a8:c7:8a:5e:53:87:6d:40:21:ae:f0:
06:d1:41:aa:16:0a:01:13:85:e3:37:bb:a4:41:e4:ef:9f:01:
3b:b0:9f:85
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaGxcViu5MzL7DMBB1xOiRdsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYxMTA2MTUxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTVhNTk2NWI0MTVkYjc4ODkwM2RmZGIyMDY3NDk5Nzc1NDk2YTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Fcg7JWYz/S0Dbfggv6PEPzE1Csl
REYWzQcDcKLsRK5TKrrf9qeIv/75MFgmnyuv4K0G7B4dUQoj1gp63pSuXh5b9vYI
R/WRELiWmn9KGgT7I8JgQjxJsXWibBNFNFp2Ax3h25CmiTaeujUtlAIQCSCHaUc+
ZH6YhxHcN4qYwV1eGEM5T5VxHZFBUMppBIpSWuv692WlR11tDnec0A5BhXbXIhdN
AOi7jPNoJHYlhYOznw7NZ+EALw0VjUB5PWoXkt+IvD28VRWMVRM4HTNcJO3rWPS2
9P5MOI+uJAfUA7QHCki4Jh9V+ssdzWE2fhCz1rkbwbSlvxYNDIgio+jc9QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJpaWWW0Fdt4iQPf2yBnSZd1SWpoMB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvbWxwWlpiUVYyM2lKQTlfYklHZEpsM1ZKYW1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgaYAQCI
MA0GCSqGSIb3DQEBCwUAA4IBAQA8mkdl3eoZ7Y0roPfbsnXNpHFdI8/9ZPFtuO4g
bJkaomwKgFnN5001501+1DIep+aGAc6hGSNL6KwnQf5ygPLvBMmp9bHhJRkbQhly
CL6lgyNaaBnDO00UQw/4JxB+JvYsMnKpBsreLYFVBrpTD44N4OXARslsLh4UFG2B
wdjuRiIHHBoWju67gOq62B26RWki3AjOwhj2VJ5x4ASGbOUQ1Ynic01MNBthTkiE
VLNX+5dSmXTXv87t7ipRqWKzKTxqnWaCMnRp8x5qihuMqx/5m6FoUhG6iKfdhVp/
4WSuqMeKXlOHbUAhrvAG0UGqFgoBE4XjN7ukQeTvnwE7sJ+F
-----END CERTIFICATE-----
Generated at Sun Nov 15 01:10:21 2026 by rpki-client