Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/1Q9JZIKOMwqWBoEvuJbQQo1yFhs.roa
File: 1Q9JZIKOMwqWBoEvuJbQQo1yFhs.roa (raw, json)
Hash identifier: lRyw3t3LoQwt17PRghLuEFULnLpJkDvh/TgoweaFMoY=
Subject key identifier: D5:0F:49:64:82:8E:33:0A:96:06:81:2F:B8:96:D0:42:8D:72:16:1B
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A0D51061AA6C48D662FB0577216C784948
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/1Q9JZIKOMwqWBoEvuJbQQo1yFhs.roa
Signing time: Thu 24 Sep 2026 20:16:55 +0000
ROA not before: Thu 24 Sep 2026 20:16:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218646
IP address blocks: 2a06:9801:fcb::/48 maxlen: 48
2a06:9801:1560::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 01:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:10:61:aa:6c:48:d6:62:fb:05:77:21:6c:78:49:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Sep 24 20:16:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d50f4964828e330a9606812fb896d0428d72161b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9a:2b:62:15:4f:14:00:7d:6d:3b:f0:50:e9:
8e:99:f0:4e:c6:57:7b:37:c7:2e:ee:dd:9b:76:33:
39:a7:c2:2a:0c:ae:02:d0:89:88:83:ac:bc:99:d3:
af:b4:d0:60:0c:1c:65:13:26:c5:6b:66:95:52:fe:
d9:32:d9:07:dd:c4:da:12:5b:e2:3b:60:5c:b3:1a:
97:8b:03:eb:71:2d:1e:e4:2e:1e:c1:d9:3d:f1:c0:
5b:c9:a8:8d:89:60:ac:42:86:7a:ae:d6:9f:cb:49:
cc:69:41:1d:7e:b3:db:79:eb:04:e1:5f:20:f7:0c:
ad:ab:75:e5:a0:8f:fb:ed:f0:e1:f4:11:b2:c8:87:
ed:59:c3:f0:a4:a3:0b:36:19:ab:fd:56:5b:b3:d6:
0f:f0:5d:4b:76:79:7b:ef:b5:32:d8:d3:3d:bc:75:
40:4c:e5:e7:ab:69:a8:7c:a8:0e:d1:cb:29:7f:f5:
6b:c3:49:fb:fa:41:e6:19:06:3d:be:15:d4:4b:80:
50:7f:fa:3d:26:4c:c8:38:df:3d:90:7c:bd:1b:06:
ac:32:d6:bf:88:44:7a:c5:c1:d1:12:7d:df:08:e1:
24:ce:35:dc:2e:09:7c:41:6c:fc:b6:0c:d3:27:04:
23:04:cb:e7:49:e8:cb:62:87:93:02:97:9d:d9:9c:
83:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:0F:49:64:82:8E:33:0A:96:06:81:2F:B8:96:D0:42:8D:72:16:1B
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/1Q9JZIKOMwqWBoEvuJbQQo1yFhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:fcb::/48
2a06:9801:1560::/48
Signature Algorithm: sha256WithRSAEncryption
4d:ef:f4:25:0f:a8:f7:c0:19:6e:55:df:70:6d:31:5e:a6:e7:
cf:cb:d6:39:4b:85:57:7c:06:20:43:3d:c9:ed:e5:88:36:91:
f7:bb:bb:9b:57:05:94:2a:8f:f4:59:af:b7:62:c4:8b:95:cb:
91:96:4b:0d:cc:6f:79:07:32:9e:ed:8d:64:e8:68:70:fd:25:
33:80:97:e0:0c:ba:30:1b:63:85:09:9a:d3:41:7f:73:d4:b5:
f8:f4:2f:bf:d9:d2:7c:af:08:06:bf:d9:d6:de:80:9d:78:b3:
96:fc:74:22:fc:fc:99:5d:38:7d:a5:4e:f0:8b:d3:c2:ac:17:
2a:1d:ba:0e:9b:83:84:79:24:0e:33:9e:76:16:03:ea:e8:a5:
f0:af:ce:6c:1c:45:b8:92:96:bc:19:95:9a:94:2e:f5:2b:55:
c0:e3:25:a7:b7:ac:3d:3f:20:73:ee:84:3c:05:63:53:1d:49:
05:34:f9:da:6b:e4:33:e0:42:68:0c:39:eb:eb:07:28:c3:a0:
be:fd:20:19:35:53:ed:01:0d:da:5f:ef:4f:3b:1e:3e:29:81:
a9:d5:52:c0:b6:39:2e:22:29:1b:cd:10:fa:4a:a3:5f:7f:69:
b3:6c:ee:2a:e6:23:17:47:88:81:72:a4:05:60:a2:df:fc:50:
b5:13:30:0c
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaDVEGGqbEjWYvsFdyFseElIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYwOTI0MjAxNjU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTBmNDk2NDgyOGUzMzBhOTYwNjgxMmZiODk2ZDA0MjhkNzIxNjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyporYhVPFAB9bTvwUOmOmfBOxld7
N8cu7t2bdjM5p8IqDK4C0ImIg6y8mdOvtNBgDBxlEybFa2aVUv7ZMtkH3cTaElvi
O2BcsxqXiwPrcS0e5C4ewdk98cBbyaiNiWCsQoZ6rtafy0nMaUEdfrPbeesE4V8g
9wytq3XloI/77fDh9BGyyIftWcPwpKMLNhmr/VZbs9YP8F1Ldnl777Uy2NM9vHVA
TOXnq2mofKgO0cspf/Vrw0n7+kHmGQY9vhXUS4BQf/o9JkzION89kHy9GwasMta/
iER6xcHREn3fCOEkzjXcLgl8QWz8tgzTJwQjBMvnSejLYoeTAped2ZyDDQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFNUPSWSCjjMKlgaBL7iW0EKNchYbMB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvMVE5SlpJS09Nd3FXQm9FdnVKYlFRbzF5RmhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgaYAQ/L
AwcAKgaYARVgMA0GCSqGSIb3DQEBCwUAA4IBAQBN7/QlD6j3wBluVd9wbTFepufP
y9Y5S4VXfAYgQz3J7eWINpH3u7ubVwWUKo/0Wa+3YsSLlcuRlksNzG95BzKe7Y1k
6Ghw/SUzgJfgDLowG2OFCZrTQX9z1LX49C+/2dJ8rwgGv9nW3oCdeLOW/HQi/PyZ
XTh9pU7wi9PCrBcqHboOm4OEeSQOM552FgPq6KXwr85sHEW4kpa8GZWalC71K1XA
4yWnt6w9PyBz7oQ8BWNTHUkFNPnaa+Qz4EJoDDnr6wcow6C+/SAZNVPtAQ3aX+9P
Ox4+KYGp1VLAtjkuIikbzRD6SqNff2mzbO4q5iMXR4iBcqQFYKLf/FC1EzAM
-----END CERTIFICATE-----
Generated at Tue Sep 29 12:42:53 2026 by rpki-client