Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/qAoiYAjVwsdHFQX3qpl_ENYr838.roa
File: qAoiYAjVwsdHFQX3qpl_ENYr838.roa (raw, json)
Hash identifier: vOYAfbNNScvVM3ncN0s4r8jufCDH2mdh7o4iG5Kovos=
Subject key identifier: A8:0A:22:60:08:D5:C2:C7:47:15:05:F7:AA:99:7F:10:D6:2B:F3:7F
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A0CE250933383F7A7FE5565ABE5B456661
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/qAoiYAjVwsdHFQX3qpl_ENYr838.roa
Signing time: Wed 23 Sep 2026 12:02:08 +0000
ROA not before: Wed 23 Sep 2026 12:02:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218602
IP address blocks: 2a06:9801:1569::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:25:09:33:38:3f:7a:7f:e5:56:5a:be:5b:45:66:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Sep 23 12:02:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a80a226008d5c2c7471505f7aa997f10d62bf37f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7d:e7:91:91:e3:2c:82:c1:78:2e:ae:0c:f1:
d5:a2:51:84:cb:2a:77:96:30:17:e8:24:51:56:ff:
31:31:6a:b5:9e:08:d8:8c:fb:2a:f5:a5:e8:ac:0e:
fc:3e:45:45:3f:36:8b:71:67:a5:cc:83:e7:78:92:
2a:d1:12:e4:90:dc:3e:83:0b:25:9b:b7:e1:2d:17:
9a:ad:4f:ff:b0:1a:b7:18:7a:5d:e9:00:45:af:e9:
ab:6a:79:c4:23:3b:c0:2b:61:62:3e:10:cf:a5:77:
34:20:90:7c:d7:f9:9a:ff:f7:79:af:bd:71:65:f5:
17:e5:88:dd:12:52:46:04:3e:6e:cd:c7:18:90:3c:
50:93:77:68:0d:42:d9:41:e6:e7:c4:87:dd:cf:01:
7d:dd:58:af:32:18:3e:4a:36:81:f1:83:48:57:5c:
46:6e:24:21:0f:62:b1:ac:0d:0a:6a:ee:f8:9a:fb:
66:12:58:22:1a:7b:0c:e5:0e:a3:fe:5a:7f:10:9e:
3e:35:0e:a5:f8:48:4b:4a:e8:b7:89:04:11:ae:b6:
6c:62:c0:1e:e4:92:77:a0:9d:1a:0c:0e:e4:7e:1f:
69:35:04:9a:3f:95:a3:fe:1e:59:12:d7:25:a5:d9:
f1:a7:ba:9e:3f:f0:27:5a:14:0f:28:a7:da:5b:51:
97:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:0A:22:60:08:D5:C2:C7:47:15:05:F7:AA:99:7F:10:D6:2B:F3:7F
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/qAoiYAjVwsdHFQX3qpl_ENYr838.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:1569::/48
Signature Algorithm: sha256WithRSAEncryption
b4:b8:1a:cb:57:6b:e4:ef:7d:92:d4:3d:11:1e:ae:39:51:7e:
47:f2:9d:21:6f:15:25:ff:73:db:fe:c7:b9:80:ae:ab:7e:23:
10:00:69:f5:45:32:ff:ef:d5:8c:2c:36:5c:03:18:63:15:d7:
8d:b5:ad:19:dc:bc:5d:ca:40:71:a0:b0:0b:a6:15:93:7c:2a:
a6:ef:1a:9b:9d:27:2e:93:42:ec:f2:d8:80:5e:3e:2b:a0:08:
12:12:40:40:ca:b6:7f:f0:96:3e:82:ec:8d:24:d2:70:7a:a8:
92:ed:ed:f1:88:c4:1b:bb:aa:01:bf:92:d7:f6:cc:aa:f5:47:
90:64:e5:c3:5e:6b:3c:79:c9:47:20:f8:e2:b6:f8:ad:ec:1d:
e8:d8:37:d8:de:0f:b9:83:b1:23:fa:b3:dc:a0:5c:b4:7d:4f:
d3:b5:d3:9f:2d:e2:07:89:6f:45:71:a6:7d:c6:1b:88:b1:4d:
0f:d3:bc:e8:af:14:c2:ea:1b:25:da:e7:7c:8f:f1:09:3a:ba:
97:92:ce:e2:93:da:ac:05:fe:b2:87:99:e6:9b:fc:17:ca:8c:
7d:48:e7:46:6b:e2:3c:2d:a0:2b:b8:c2:81:85:fd:41:e7:78:
12:d7:53:a5:bc:c3:fd:a9:60:a6:fc:53:01:e7:e8:d5:ef:5a:
37:b0:da:91
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaDOJQkzOD96f+VWWr5bRWZhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYwOTIzMTIwMjA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODBhMjI2MDA4ZDVjMmM3NDcxNTA1ZjdhYTk5N2YxMGQ2MmJmMzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuX3nkZHjLILBeC6uDPHVolGEyyp3
ljAX6CRRVv8xMWq1ngjYjPsq9aXorA78PkVFPzaLcWelzIPneJIq0RLkkNw+gwsl
m7fhLRearU//sBq3GHpd6QBFr+mrannEIzvAK2FiPhDPpXc0IJB81/ma//d5r71x
ZfUX5YjdElJGBD5uzccYkDxQk3doDULZQebnxIfdzwF93VivMhg+SjaB8YNIV1xG
biQhD2KxrA0Kau74mvtmElgiGnsM5Q6j/lp/EJ4+NQ6l+EhLSui3iQQRrrZsYsAe
5JJ3oJ0aDA7kfh9pNQSaP5Wj/h5ZEtclpdnxp7qeP/AnWhQPKKfaW1GXlwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFKgKImAI1cLHRxUF96qZfxDWK/N/MB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvcUFvaVlBalZ3c2RIRlFYM3FwbF9FTllyODM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgaYARVp
MA0GCSqGSIb3DQEBCwUAA4IBAQC0uBrLV2vk732S1D0RHq45UX5H8p0hbxUl/3Pb
/se5gK6rfiMQAGn1RTL/79WMLDZcAxhjFdeNta0Z3LxdykBxoLALphWTfCqm7xqb
nScuk0Ls8tiAXj4roAgSEkBAyrZ/8JY+guyNJNJweqiS7e3xiMQbu6oBv5LX9syq
9UeQZOXDXms8eclHIPjitvit7B3o2DfY3g+5g7Ej+rPcoFy0fU/TtdOfLeIHiW9F
caZ9xhuIsU0P07zorxTC6hsl2ud8j/EJOrqXks7ik9qsBf6yh5nmm/wXyox9SOdG
a+I8LaAruMKBhf1B53gS11OlvMP9qWCm/FMB5+jV71o3sNqR
-----END CERTIFICATE-----
Generated at Wed Sep 23 22:41:26 2026 by rpki-client