Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/4knefqCDyxB6k61OChdQW3Jn0LE.roa
File: 4knefqCDyxB6k61OChdQW3Jn0LE.roa (raw, json)
Hash identifier: DVD8x3n9piC6m5Bpty6Qpn8i8wvzeJzorMdvUmwY2s4=
Subject key identifier: E2:49:DE:7E:A0:83:CB:10:7A:93:AD:4E:0A:17:50:5B:72:67:D0:B1
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019DB2A0AA001241D492C750D027298998D9
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/4knefqCDyxB6k61OChdQW3Jn0LE.roa
Signing time: Wed 22 Apr 2026 00:39:26 +0000
ROA not before: Wed 22 Apr 2026 00:39:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198607
IP address blocks: 2a06:9801:283::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:a0:aa:00:12:41:d4:92:c7:50:d0:27:29:89:98:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Apr 22 00:39:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e249de7ea083cb107a93ad4e0a17505b7267d0b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9d:5a:29:b3:c5:1e:ba:77:ef:f4:61:a6:24:
31:81:6e:1f:de:91:92:70:61:a8:8b:22:10:c9:33:
d4:56:93:c9:f9:d6:31:d6:ed:d8:29:74:be:2b:ac:
50:f4:52:9d:f9:74:8f:31:ce:ec:98:25:1e:9d:97:
c0:70:74:bc:4c:c7:b0:c3:47:0a:54:0f:d6:74:15:
ed:da:83:14:12:f5:fc:8e:08:bf:20:7c:df:19:05:
49:87:90:59:5e:82:6f:1b:81:a2:63:68:53:bd:a7:
2b:61:d0:3c:87:53:3f:68:27:a0:44:42:16:eb:3f:
54:d7:c1:bb:30:a8:9e:f8:19:00:1e:d9:19:8c:bb:
05:93:69:44:26:36:b1:4c:75:19:02:74:6e:9c:06:
af:d5:06:af:88:96:e7:22:63:41:2f:e4:c5:17:d8:
42:7e:26:f5:d1:49:e9:94:22:01:82:c7:b4:2d:be:
f2:dd:cb:bf:c9:37:2a:2d:7e:b0:0f:b1:0a:8d:a7:
9b:84:7d:3b:e4:3c:e1:43:5d:52:fe:f8:bb:4d:70:
39:c7:a3:dd:37:73:32:3c:4f:e0:c2:c9:31:05:f7:
f7:b4:20:04:07:fc:29:55:a5:bc:43:32:2f:92:a6:
4d:2b:b2:a7:74:ef:62:ee:04:9b:e6:32:61:0e:6e:
da:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:49:DE:7E:A0:83:CB:10:7A:93:AD:4E:0A:17:50:5B:72:67:D0:B1
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/4knefqCDyxB6k61OChdQW3Jn0LE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:283::/48
Signature Algorithm: sha256WithRSAEncryption
52:5c:81:81:56:8a:7e:7d:cc:0b:d2:28:60:82:cd:a2:e8:f2:
4b:80:d2:ec:fe:c1:76:30:1e:7e:43:78:76:9b:32:95:e5:2d:
ff:b8:5f:2d:7c:2d:fe:70:db:02:70:90:5e:a9:94:f6:b2:c4:
f5:db:aa:e9:6d:42:f3:ab:ed:d4:bd:e1:e0:9c:48:49:63:77:
f1:0e:5b:fc:a7:54:c0:1c:e2:0a:a2:7a:17:0b:b2:e8:a1:dc:
63:c2:76:90:9e:e3:2d:e5:5e:f6:b5:7b:9d:e0:7e:26:f3:b8:
f6:cc:4b:a9:42:5f:fe:e7:84:5a:2e:75:29:72:66:22:4c:2c:
fb:24:b5:69:3f:20:9e:c9:47:e8:13:ea:90:ef:d7:55:bc:cc:
a2:d4:a2:ee:98:04:e5:a7:c5:22:01:98:f3:43:4a:8e:c8:aa:
2d:fc:bd:3e:5b:fc:b7:94:34:ca:bb:4e:e0:24:57:5d:07:7b:
ff:38:3a:3c:86:0b:37:07:36:4f:5c:b6:cd:eb:41:1d:21:14:
3e:55:4e:e0:71:41:34:27:73:ae:97:6e:19:eb:0c:cd:4a:a7:
5b:5c:f6:bc:b3:58:df:00:85:21:0f:bd:15:55:e5:89:da:6f:
3c:5d:e4:d8:30:c2:3e:87:32:26:39:01:ef:38:33:2e:a8:38:
df:c6:9e:23
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ2yoKoAEkHUksdQ0CcpiZjZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYwNDIyMDAzOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjQ5ZGU3ZWEwODNjYjEwN2E5M2FkNGUwYTE3NTA1YjcyNjdkMGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw51aKbPFHrp37/RhpiQxgW4f3pGS
cGGoiyIQyTPUVpPJ+dYx1u3YKXS+K6xQ9FKd+XSPMc7smCUenZfAcHS8TMeww0cK
VA/WdBXt2oMUEvX8jgi/IHzfGQVJh5BZXoJvG4GiY2hTvacrYdA8h1M/aCegREIW
6z9U18G7MKie+BkAHtkZjLsFk2lEJjaxTHUZAnRunAav1QaviJbnImNBL+TFF9hC
fib10UnplCIBgse0Lb7y3cu/yTcqLX6wD7EKjaebhH075DzhQ11S/vi7TXA5x6Pd
N3MyPE/gwskxBff3tCAEB/wpVaW8QzIvkqZNK7KndO9i7gSb5jJhDm7aAQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOJJ3n6gg8sQepOtTgoXUFtyZ9CxMB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvNGtuZWZxQ0R5eEI2azYxT0NoZFFXM0puMExFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgaYAQKD
MA0GCSqGSIb3DQEBCwUAA4IBAQBSXIGBVop+fcwL0ihggs2i6PJLgNLs/sF2MB5+
Q3h2mzKV5S3/uF8tfC3+cNsCcJBeqZT2ssT126rpbULzq+3UveHgnEhJY3fxDlv8
p1TAHOIKonoXC7LoodxjwnaQnuMt5V72tXud4H4m87j2zEupQl/+54RaLnUpcmYi
TCz7JLVpPyCeyUfoE+qQ79dVvMyi1KLumATlp8UiAZjzQ0qOyKot/L0+W/y3lDTK
u07gJFddB3v/ODo8hgs3BzZPXLbN60EdIRQ+VU7gcUE0J3Oul24Z6wzNSqdbXPa8
s1jfAIUhD70VVeWJ2m88XeTYMMI+hzImOQHvODMuqDjfxp4j
-----END CERTIFICATE-----
Generated at Wed May 13 14:10:10 2026 by rpki-client