Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/o3_CjRhmoDAH8Oe5OIzwXkruPe8.roa
File: o3_CjRhmoDAH8Oe5OIzwXkruPe8.roa (raw, json)
Hash identifier: U5ltCLFQJ/nWr5Aq9eLws/wL59VvdTgSLhuE5YRTveQ=
Subject key identifier: A3:7F:C2:8D:18:66:A0:30:07:F0:E7:B9:38:8C:F0:5E:4A:EE:3D:EF
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019F141436EEBE45DC696075F1470F07D11A
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/o3_CjRhmoDAH8Oe5OIzwXkruPe8.roa
Signing time: Mon 29 Jun 2026 15:51:36 +0000
ROA not before: Mon 29 Jun 2026 15:51:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201640
IP address blocks: 2a06:9801:23::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:14:36:ee:be:45:dc:69:60:75:f1:47:0f:07:d1:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jun 29 15:51:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a37fc28d1866a03007f0e7b9388cf05e4aee3def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9e:6d:95:fc:c6:96:de:91:6b:dd:66:89:3a:
6d:da:fd:84:58:67:bb:0d:8a:e4:bb:9d:fd:27:b6:
2e:59:f9:a5:4b:a8:0f:53:04:f0:ef:4e:f5:62:a5:
a3:e0:ae:86:b4:54:84:74:80:c3:b0:bb:0e:a6:cd:
92:14:05:e0:36:90:8e:56:ec:43:7a:77:28:ae:33:
bc:3d:c2:e0:76:e9:7e:7d:02:5e:8e:b1:3e:df:81:
3b:1d:e8:21:a9:23:62:d3:80:ca:3d:23:8c:aa:a5:
f9:03:68:15:00:a3:35:47:57:14:d5:40:ec:5d:6f:
ec:66:4d:b4:4e:62:4c:15:d1:a3:82:25:1f:9c:a3:
bf:fe:8a:36:12:7f:a7:66:2a:82:4f:04:69:64:25:
7d:9d:17:74:c7:54:ad:ce:77:3c:4e:20:4a:83:b5:
ee:e5:26:90:cf:2d:3d:6a:6f:b4:90:20:1f:66:c5:
f6:a7:1b:dd:c8:8c:5f:10:93:d0:14:02:af:04:d1:
dc:cc:eb:3d:f3:e2:f1:59:b3:0d:2e:d4:3e:9c:c3:
b8:e3:5f:59:6a:7d:49:02:70:bd:02:ff:da:94:81:
d1:c7:dc:c1:61:4d:e5:b5:b1:34:6a:f4:db:3b:91:
05:44:b2:12:3f:ed:ce:c9:13:72:af:2b:d1:c7:65:
13:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:7F:C2:8D:18:66:A0:30:07:F0:E7:B9:38:8C:F0:5E:4A:EE:3D:EF
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/o3_CjRhmoDAH8Oe5OIzwXkruPe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:23::/48
Signature Algorithm: sha256WithRSAEncryption
44:6d:4f:29:9f:a7:96:a2:89:f0:df:66:e1:b3:0b:d6:aa:29:
a2:9a:f9:fb:17:2d:8f:bd:18:f7:dc:83:8a:0e:13:e6:cf:43:
2b:f3:65:7d:f7:ec:2c:76:ea:15:fe:f1:71:87:d3:43:5f:5b:
86:6f:c8:1f:49:8f:8a:80:39:bd:71:3e:43:b9:a4:9c:c5:c6:
0d:0f:83:0f:f1:81:8c:d5:f3:fe:a0:58:da:34:94:8e:f4:56:
71:c1:db:87:28:a7:b9:8a:13:51:3a:19:1e:4a:fe:25:b4:57:
e6:2b:ea:79:c9:d5:fb:82:ad:62:3a:dc:88:f8:a0:51:d9:2d:
38:df:c9:4e:92:f6:4a:fa:a3:1d:45:44:64:61:9c:14:76:b9:
66:2d:37:42:78:8e:cc:53:82:55:db:d8:08:14:b0:69:35:3e:
24:86:bf:a8:14:f9:80:90:04:de:14:89:64:ac:95:71:d1:ed:
24:2b:58:da:e3:1e:5c:a5:60:8e:fc:a4:86:dc:06:bf:94:85:
c4:c0:b9:61:8d:f4:1d:0f:29:f4:56:5e:bd:5c:2a:f5:a1:e5:
2a:01:4d:cf:62:07:f6:e3:16:2b:56:95:31:43:a1:6c:2e:40:
73:25:c4:0f:af:59:37:06:ed:d6:93:1d:09:ec:dd:56:27:2b:
1e:d7:6f:b9
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ8UFDbuvkXcaWB18UcPB9EaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYwNjI5MTU1MTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMzdmYzI4ZDE4NjZhMDMwMDdmMGU3YjkzODhjZjA1ZTRhZWUzZGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4p5tlfzGlt6Ra91miTpt2v2EWGe7
DYrku539J7YuWfmlS6gPUwTw7071YqWj4K6GtFSEdIDDsLsOps2SFAXgNpCOVuxD
encorjO8PcLgdul+fQJejrE+34E7HeghqSNi04DKPSOMqqX5A2gVAKM1R1cU1UDs
XW/sZk20TmJMFdGjgiUfnKO//oo2En+nZiqCTwRpZCV9nRd0x1Stznc8TiBKg7Xu
5SaQzy09am+0kCAfZsX2pxvdyIxfEJPQFAKvBNHczOs98+LxWbMNLtQ+nMO4419Z
an1JAnC9Av/alIHRx9zBYU3ltbE0avTbO5EFRLISP+3OyRNyryvRx2UTTwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFKN/wo0YZqAwB/DnuTiM8F5K7j3vMB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvbzNfQ2pSaG1vREFIOE9lNU9JendYa3J1UGU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgaYAQAj
MA0GCSqGSIb3DQEBCwUAA4IBAQBEbU8pn6eWoonw32bhswvWqimimvn7Fy2PvRj3
3IOKDhPmz0Mr82V99+wsduoV/vFxh9NDX1uGb8gfSY+KgDm9cT5DuaScxcYND4MP
8YGM1fP+oFjaNJSO9FZxwduHKKe5ihNROhkeSv4ltFfmK+p5ydX7gq1iOtyI+KBR
2S0438lOkvZK+qMdRURkYZwUdrlmLTdCeI7MU4JV29gIFLBpNT4khr+oFPmAkATe
FIlkrJVx0e0kK1ja4x5cpWCO/KSG3Aa/lIXEwLlhjfQdDyn0Vl69XCr1oeUqAU3P
Ygf24xYrVpUxQ6FsLkBzJcQPr1k3Bu3Wkx0J7N1WJyse12+5
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:12 2026 by rpki-client