Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/ykHcQPiU_fyiG5CBr0gNACbCgfM.roa
File: ykHcQPiU_fyiG5CBr0gNACbCgfM.roa (raw, json)
Hash identifier: noTUdctJrtuS5NgcedGLtzkzNpdcqFZyoICSFtDAuiI=
Subject key identifier: CA:41:DC:40:F8:94:FD:FC:A2:1B:90:81:AF:48:0D:00:26:C2:81:F3
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A16DF8383B673DEEBFBFCCB144EFD28A72
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/ykHcQPiU_fyiG5CBr0gNACbCgfM.roa
Signing time: Sat 24 Oct 2026 12:52:26 +0000
ROA not before: Sat 24 Oct 2026 12:52:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218327
IP address blocks: 2a06:9801:158a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6d:f8:38:3b:67:3d:ee:bf:bf:cc:b1:44:ef:d2:8a:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Oct 24 12:52:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca41dc40f894fdfca21b9081af480d0026c281f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:00:14:75:91:3b:60:b5:66:07:a7:91:b1:d7:
f9:1e:35:da:14:c9:c1:b3:a4:b2:60:c7:63:bd:8a:
28:a1:62:3d:3f:dc:5a:a4:e3:aa:0e:86:e1:6b:c0:
41:1e:7c:38:3e:35:ee:24:a4:29:ca:62:9c:5d:ee:
41:43:8b:66:f7:14:8a:89:ff:f7:80:49:8a:5b:2b:
b7:46:76:e4:12:91:b7:72:83:d0:c2:ef:51:08:16:
74:e8:09:0a:1e:88:fd:c5:ba:5c:70:57:58:35:27:
3a:bd:2d:63:ee:1f:57:b0:ec:d4:89:ea:84:8e:3f:
45:97:84:4d:96:4f:9d:20:9a:30:18:27:33:89:d1:
ce:c4:26:95:d2:85:b5:ad:68:b8:f3:90:39:47:d3:
4a:bc:14:69:af:6a:27:4e:7d:e0:0b:4a:2c:50:ea:
93:f9:3d:35:7c:58:60:9b:b7:75:a9:49:2e:58:62:
89:84:ef:ca:9f:da:5f:e2:73:d9:0a:e8:78:39:0c:
32:da:a8:6c:4a:8e:e3:cf:b1:ad:a5:99:f0:ad:75:
b6:d7:c3:b8:22:e8:72:f8:56:0c:14:ff:d5:ee:62:
31:5f:51:00:2c:51:3d:e3:bd:f2:33:23:81:fe:85:
bc:16:11:41:75:62:a3:61:f7:fd:23:fd:38:4f:6c:
86:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:41:DC:40:F8:94:FD:FC:A2:1B:90:81:AF:48:0D:00:26:C2:81:F3
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/ykHcQPiU_fyiG5CBr0gNACbCgfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:158a::/48
Signature Algorithm: sha256WithRSAEncryption
bd:fe:df:57:5c:7b:18:d2:3d:e3:17:c5:1b:44:15:3a:1e:5d:
56:37:24:59:79:a8:6d:21:1c:ac:7e:7c:c5:ba:07:ff:7d:ac:
86:22:f9:6c:f4:b8:ea:c0:87:b4:fb:8d:ff:c1:e4:da:72:96:
8a:e8:d4:3d:cc:c5:2e:2a:75:16:77:ae:9d:3a:78:02:c4:7e:
8b:29:e1:cb:91:50:53:8a:3d:3d:a2:bd:13:a8:f4:85:04:d9:
f7:0d:63:45:7d:d0:e1:9e:11:c7:52:e4:f1:2f:a3:cb:53:2d:
86:c3:1a:ee:50:16:04:49:55:d3:12:44:c7:eb:bc:8f:ed:81:
88:f0:17:12:48:bd:e8:a2:ef:03:00:f1:97:03:7e:db:bb:6c:
eb:96:38:55:64:cc:16:7c:0e:90:b4:4e:a7:ce:7a:61:75:9b:
3e:67:11:27:0d:79:45:b0:bc:4a:57:e1:ab:de:e5:9c:47:cf:
df:1b:a4:9c:53:c4:5d:2e:bc:fb:a1:6c:f3:90:18:8e:53:3d:
56:4c:6a:f6:da:37:58:49:b2:2a:0a:e0:44:e7:cc:50:e7:93:
ef:91:3b:7e:cd:99:32:5f:b0:fe:fa:ae:3e:32:6c:39:fa:d2:
54:18:38:7e:2b:c1:6e:f5:78:30:dd:db:06:79:7a:f4:f3:66:
b1:4a:53:f5
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaFt+Dg7Zz3uv7/MsUTv0opyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYxMDI0MTI1MjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTQxZGM0MGY4OTRmZGZjYTIxYjkwODFhZjQ4MGQwMDI2YzI4MWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AAUdZE7YLVmB6eRsdf5HjXaFMnB
s6SyYMdjvYoooWI9P9xapOOqDobha8BBHnw4PjXuJKQpymKcXe5BQ4tm9xSKif/3
gEmKWyu3RnbkEpG3coPQwu9RCBZ06AkKHoj9xbpccFdYNSc6vS1j7h9XsOzUieqE
jj9Fl4RNlk+dIJowGCczidHOxCaV0oW1rWi485A5R9NKvBRpr2onTn3gC0osUOqT
+T01fFhgm7d1qUkuWGKJhO/Kn9pf4nPZCuh4OQwy2qhsSo7jz7GtpZnwrXW218O4
Iuhy+FYMFP/V7mIxX1EALFE9473yMyOB/oW8FhFBdWKjYff9I/04T2yGKQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMpB3ED4lP38ohuQga9IDQAmwoHzMB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEveWtIY1FQaVVfZnlpRzVDQnIwZ05BQ2JDZ2ZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgaYARWK
MA0GCSqGSIb3DQEBCwUAA4IBAQC9/t9XXHsY0j3jF8UbRBU6Hl1WNyRZeahtIRys
fnzFugf/fayGIvls9LjqwIe0+43/weTacpaK6NQ9zMUuKnUWd66dOngCxH6LKeHL
kVBTij09or0TqPSFBNn3DWNFfdDhnhHHUuTxL6PLUy2GwxruUBYESVXTEkTH67yP
7YGI8BcSSL3oou8DAPGXA37bu2zrljhVZMwWfA6QtE6nznphdZs+ZxEnDXlFsLxK
V+Gr3uWcR8/fG6ScU8RdLrz7oWzzkBiOUz1WTGr22jdYSbIqCuBE58xQ55PvkTt+
zZkyX7D++q4+Mmw5+tJUGDh+K8Fu9Xgw3dsGeXr082axSlP1
-----END CERTIFICATE-----
Generated at Sat Nov 14 21:50:23 2026 by rpki-client