Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/pCkAa1m8F2-mv4vKxLQpufHhJ3I.roa
File: pCkAa1m8F2-mv4vKxLQpufHhJ3I.roa (raw, json)
Hash identifier: U2aHttNom1NDZWc79EVIN7t8RhwHPI0w0tw4L79pdg0=
Subject key identifier: A4:29:00:6B:59:BC:17:6F:A6:BF:8B:CA:C4:B4:29:B9:F1:E1:27:72
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019F4E7CB85D808D8B07835AD8C10A7C6601
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/pCkAa1m8F2-mv4vKxLQpufHhJ3I.roa
Signing time: Sat 11 Jul 2026 00:03:44 +0000
ROA not before: Sat 11 Jul 2026 00:03:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219240
IP address blocks: 2a06:9801:7fe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4e:7c:b8:5d:80:8d:8b:07:83:5a:d8:c1:0a:7c:66:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jul 11 00:03:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a429006b59bc176fa6bf8bcac4b429b9f1e12772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e1:dd:70:0e:9d:c0:91:8d:d1:9b:ae:5a:37:
e4:3a:d1:80:ac:9d:fe:18:00:c6:e8:44:56:11:22:
a8:4f:9a:a8:72:4a:74:b2:7a:bb:bf:a7:a7:4e:1f:
bf:de:a7:1b:c3:f7:41:7d:8d:e9:16:b9:2b:f5:d5:
29:9b:04:bf:f5:c5:44:7b:6d:8f:60:72:0a:c9:38:
96:b9:95:a5:ed:41:49:4a:4e:4a:22:54:ae:e3:ad:
c6:c5:f7:c6:92:27:43:47:5f:d7:ea:95:1f:04:59:
26:7d:69:f3:f0:a6:03:c2:c6:bc:c7:6f:11:d3:f5:
72:06:02:f5:3e:f0:10:cc:40:c4:44:3c:d9:8b:de:
0d:f3:a6:5a:27:9c:54:bd:79:70:8a:02:47:57:6f:
18:7f:9d:bb:e0:0d:02:75:f3:4f:61:23:a3:68:60:
43:f2:42:25:90:e0:cb:b6:cf:d1:9a:e7:b0:85:09:
d2:db:f5:cc:e8:8f:8c:d6:82:81:2e:40:bb:e0:2a:
e7:07:8f:40:0b:56:26:0b:89:3a:43:c1:f6:13:99:
b5:50:19:b9:48:87:c2:0c:05:09:7d:1c:7f:27:43:
e8:7c:f0:34:68:a4:de:28:06:68:a8:a9:62:0e:ed:
3d:49:26:6b:94:8b:ea:af:44:b0:51:d1:48:f8:0c:
99:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:29:00:6B:59:BC:17:6F:A6:BF:8B:CA:C4:B4:29:B9:F1:E1:27:72
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/pCkAa1m8F2-mv4vKxLQpufHhJ3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:7fe::/48
Signature Algorithm: sha256WithRSAEncryption
b9:38:3c:f4:50:dd:b5:f2:cf:e6:a1:fd:a7:ff:4c:93:22:63:
8d:4c:c5:6f:01:f0:c7:e6:51:5d:5a:84:a4:a7:56:bf:62:b4:
ba:2f:c5:2b:25:1f:53:fd:02:ee:28:9c:f0:2e:7a:83:29:f7:
20:0a:8a:72:86:29:6b:13:96:0b:27:1d:fa:ce:5d:85:88:5a:
5d:00:3b:47:6e:1d:83:59:87:0e:42:b4:18:40:b2:b4:d1:1a:
e8:8c:e1:c4:84:32:7e:17:e7:04:ef:27:08:c5:e7:f0:b0:84:
d6:74:a8:c6:39:6f:88:e5:8e:f2:84:0e:18:a7:59:a7:97:af:
f1:bc:b6:42:0c:3e:86:09:26:74:db:fd:ff:bb:27:2d:3e:34:
e1:11:fe:46:03:d5:f5:d9:de:a3:b2:1f:20:b5:81:6e:86:e0:
6f:08:b7:1a:62:32:ee:a5:20:f2:83:f1:e5:67:b7:2a:df:a0:
cf:51:15:6e:e3:c3:9e:d8:45:da:73:9b:b2:dc:a2:a5:b6:57:
03:a6:71:67:ab:66:39:66:7c:93:17:0f:6b:ad:7f:df:2d:11:
7e:f3:f7:5e:a8:6e:ff:56:7c:00:01:2c:d3:0d:24:ea:e0:8b:
f0:80:e4:9d:5f:48:da:d7:37:d9:3e:8c:f5:5a:c9:12:83:c1:
a7:c5:5e:34
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ9OfLhdgI2LB4Na2MEKfGYBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYwNzExMDAwMzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDI5MDA2YjU5YmMxNzZmYTZiZjhiY2FjNGI0MjliOWYxZTEyNzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+HdcA6dwJGN0ZuuWjfkOtGArJ3+
GADG6ERWESKoT5qockp0snq7v6enTh+/3qcbw/dBfY3pFrkr9dUpmwS/9cVEe22P
YHIKyTiWuZWl7UFJSk5KIlSu463GxffGkidDR1/X6pUfBFkmfWnz8KYDwsa8x28R
0/VyBgL1PvAQzEDERDzZi94N86ZaJ5xUvXlwigJHV28Yf5274A0CdfNPYSOjaGBD
8kIlkODLts/RmuewhQnS2/XM6I+M1oKBLkC74CrnB49AC1YmC4k6Q8H2E5m1UBm5
SIfCDAUJfRx/J0PofPA0aKTeKAZoqKliDu09SSZrlIvqr0SwUdFI+AyZdQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFKQpAGtZvBdvpr+LysS0Kbnx4SdyMB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvcENrQWExbThGMi1tdjR2S3hMUXB1ZkhoSjNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgaYAQf+
MA0GCSqGSIb3DQEBCwUAA4IBAQC5ODz0UN218s/mof2n/0yTImONTMVvAfDH5lFd
WoSkp1a/YrS6L8UrJR9T/QLuKJzwLnqDKfcgCopyhilrE5YLJx36zl2FiFpdADtH
bh2DWYcOQrQYQLK00RrojOHEhDJ+F+cE7ycIxefwsITWdKjGOW+I5Y7yhA4Yp1mn
l6/xvLZCDD6GCSZ02/3/uyctPjThEf5GA9X12d6jsh8gtYFuhuBvCLcaYjLupSDy
g/HlZ7cq36DPURVu48Oe2EXac5uy3KKltlcDpnFnq2Y5ZnyTFw9rrX/fLRF+8/de
qG7/VnwAASzTDSTq4IvwgOSdX0ja1zfZPoz1WskSg8GnxV40
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:54:57 2026 by rpki-client