Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/yAMEZM52pRDQmH7C5Jq9bfUpBn0.roa
File: yAMEZM52pRDQmH7C5Jq9bfUpBn0.roa (raw, json)
Hash identifier: r0VLo07dxDqPepISUMKxCjzHmz4rQGy+jri30daMl9o=
Subject key identifier: C8:03:04:64:CE:76:A5:10:D0:98:7E:C2:E4:9A:BD:6D:F5:29:06:7D
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019F425DFEB4C07B084D7535AAEB83F45DF7
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/yAMEZM52pRDQmH7C5Jq9bfUpBn0.roa
Signing time: Wed 08 Jul 2026 15:34:44 +0000
ROA not before: Wed 08 Jul 2026 15:34:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219239
IP address blocks: 2a06:9801:7fb::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:42:5d:fe:b4:c0:7b:08:4d:75:35:aa:eb:83:f4:5d:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jul 8 15:34:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c8030464ce76a510d0987ec2e49abd6df529067d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:db:63:f7:e0:1c:6b:06:a6:ea:21:c5:2e:b0:
d4:40:ce:f4:5a:42:9e:de:76:36:d9:78:6d:f6:c0:
de:50:38:60:40:f6:69:1f:8a:24:3a:cc:48:40:8f:
b5:90:29:3c:fb:fd:10:25:76:73:fa:55:18:f4:ae:
aa:14:cc:7e:f6:98:25:e2:fa:78:22:ce:4b:18:7f:
83:78:e2:5d:2b:18:16:6a:f8:a9:39:67:12:e6:6a:
f1:a8:e9:f9:d5:f1:fe:be:0a:d6:e2:44:00:db:83:
b4:c9:d9:00:81:5b:66:eb:e7:1e:d9:6a:ee:97:14:
62:e8:1b:3f:bc:54:1f:e5:60:e2:54:54:58:30:bb:
44:8e:08:ef:28:03:61:8d:9a:e9:12:f1:fc:9d:d4:
5d:82:6b:12:8a:de:59:0b:48:ae:20:bf:96:4c:f5:
3b:79:e0:9c:a2:72:e3:03:4b:e2:15:6f:62:08:51:
83:3f:3e:08:93:f5:f4:01:1f:59:8f:22:20:ac:e8:
1c:f8:38:92:2d:85:e6:a0:16:b2:4d:3c:bc:32:82:
7b:74:80:fb:16:85:9a:ab:7b:0b:3a:26:3d:cc:de:
97:59:c7:41:d2:e7:55:89:6c:db:10:27:06:08:71:
00:50:8d:c1:39:15:ce:19:97:32:9f:95:91:d8:11:
b7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:03:04:64:CE:76:A5:10:D0:98:7E:C2:E4:9A:BD:6D:F5:29:06:7D
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/yAMEZM52pRDQmH7C5Jq9bfUpBn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:7fb::/48
Signature Algorithm: sha256WithRSAEncryption
05:24:b4:3e:dd:86:f8:0e:c3:39:8e:f2:af:01:3f:8d:13:15:
52:42:74:46:93:8d:97:16:33:94:63:36:17:b6:c4:c9:05:b3:
b6:33:da:c8:5d:cc:2e:ec:b5:de:4e:e3:1b:61:fd:2e:7d:f0:
55:24:ff:53:f3:b1:88:f7:c3:81:d0:75:2b:2d:c1:4b:af:64:
96:78:fb:0d:89:d1:af:a7:f6:62:26:09:b0:62:5c:26:4b:d8:
01:f2:8a:3c:44:03:11:88:ff:ec:41:a7:7b:e4:3b:8b:b4:40:
a1:35:6a:3d:f0:41:9b:76:ba:cb:cd:7e:78:b9:02:76:08:6d:
29:09:66:05:a4:b7:5c:8a:2b:cb:9c:50:3b:6b:af:12:aa:ae:
3f:8f:f9:c6:a2:11:7d:4c:4a:f7:b9:b5:fe:c1:23:4e:81:54:
37:b2:ab:a7:16:93:85:03:33:d2:b2:72:d8:28:3c:eb:4c:e2:
f5:0f:08:00:07:af:67:8b:2f:3e:a7:6e:00:49:2c:84:ee:70:
da:f6:b6:20:1e:b7:02:ee:70:18:bb:d9:a8:1e:4e:93:2f:e0:
cf:cc:b7:d0:12:fa:a7:c3:1b:35:93:4e:33:04:4a:08:44:36:
a0:49:92:51:74:43:cd:60:f3:a6:5c:0b:e5:12:23:98:a5:11:
cc:16:d0:fa
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ9CXf60wHsITXU1quuD9F33MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYwNzA4MTUzNDQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODAzMDQ2NGNlNzZhNTEwZDA5ODdlYzJlNDlhYmQ2ZGY1MjkwNjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dtj9+Acawam6iHFLrDUQM70WkKe
3nY22Xht9sDeUDhgQPZpH4okOsxIQI+1kCk8+/0QJXZz+lUY9K6qFMx+9pgl4vp4
Is5LGH+DeOJdKxgWavipOWcS5mrxqOn51fH+vgrW4kQA24O0ydkAgVtm6+ce2Wru
lxRi6Bs/vFQf5WDiVFRYMLtEjgjvKANhjZrpEvH8ndRdgmsSit5ZC0iuIL+WTPU7
eeCconLjA0viFW9iCFGDPz4Ik/X0AR9ZjyIgrOgc+DiSLYXmoBayTTy8MoJ7dID7
FoWaq3sLOiY9zN6XWcdB0udViWzbECcGCHEAUI3BORXOGZcyn5WR2BG3/wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMgDBGTOdqUQ0Jh+wuSavW31KQZ9MB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEveUFNRVpNNTJwUkRRbUg3QzVKcTliZlVwQm4wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgaYAQf7
MA0GCSqGSIb3DQEBCwUAA4IBAQAFJLQ+3Yb4DsM5jvKvAT+NExVSQnRGk42XFjOU
YzYXtsTJBbO2M9rIXcwu7LXeTuMbYf0uffBVJP9T87GI98OB0HUrLcFLr2SWePsN
idGvp/ZiJgmwYlwmS9gB8oo8RAMRiP/sQad75DuLtEChNWo98EGbdrrLzX54uQJ2
CG0pCWYFpLdciivLnFA7a68Sqq4/j/nGohF9TEr3ubX+wSNOgVQ3squnFpOFAzPS
snLYKDzrTOL1DwgAB69niy8+p24ASSyE7nDa9rYgHrcC7nAYu9moHk6TL+DPzLfQ
Evqnwxs1k04zBEoIRDagSZJRdEPNYPOmXAvlEiOYpRHMFtD6
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:17:28 2026 by rpki-client