Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/5RxRlHMwSILvDJgzDnOyX9olI80.roa
File: 5RxRlHMwSILvDJgzDnOyX9olI80.roa (raw, json)
Hash identifier: 2rmFBM2TKPypAIf3W6fZRe82dcNVWqWDGfapzx8te90=
Subject key identifier: E5:1C:51:94:73:30:48:82:EF:0C:98:33:0E:73:B2:5F:DA:25:23:CD
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019E503787FC7934F74867D33506025F725E
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/5RxRlHMwSILvDJgzDnOyX9olI80.roa
Signing time: Fri 22 May 2026 15:04:37 +0000
ROA not before: Fri 22 May 2026 15:04:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203233
IP address blocks: 2a06:9801:28a::/48 maxlen: 48
2a06:9801:780::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:50:37:87:fc:79:34:f7:48:67:d3:35:06:02:5f:72:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: May 22 15:04:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e51c519473304882ef0c98330e73b25fda2523cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f7:72:b5:1d:aa:b7:73:2b:61:f7:60:b2:dc:
e8:ff:46:a8:50:79:bf:86:16:fb:70:58:ec:a3:65:
65:05:e9:57:df:ff:bc:fe:14:32:8b:24:26:7e:4e:
80:8b:e4:98:ba:82:95:01:de:47:50:8e:1b:cb:e1:
74:d9:82:45:44:44:2f:09:03:2a:80:3a:78:66:b7:
cb:46:a9:d6:0c:86:79:28:ad:8c:68:e5:88:83:30:
f0:d1:95:89:8c:8c:a7:70:4a:09:18:06:79:af:26:
ba:94:ce:12:6d:d8:6f:b1:60:52:85:c6:e2:45:05:
5f:c0:c8:fb:2d:35:55:a7:2b:64:19:8d:f9:a7:7b:
7e:1f:1a:80:58:3d:e9:1e:ab:01:f2:46:43:86:df:
a9:8c:af:a1:1f:bb:8f:a7:78:9c:6f:07:ef:ad:14:
d0:62:28:07:17:cb:32:73:ee:9f:f5:43:d5:a2:e7:
b9:41:a7:61:89:bf:f3:2a:31:85:a1:dc:4f:52:38:
21:7a:f0:aa:aa:00:18:e2:be:6e:90:0c:1f:25:bd:
3c:f0:2e:b4:96:0b:33:43:f2:74:28:64:5b:b3:ac:
4e:cc:7c:41:46:a9:5c:93:7f:db:56:80:8c:27:2b:
f3:1a:e6:d6:08:78:9e:78:5f:c1:21:5f:f6:de:0d:
c9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:1C:51:94:73:30:48:82:EF:0C:98:33:0E:73:B2:5F:DA:25:23:CD
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/5RxRlHMwSILvDJgzDnOyX9olI80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:28a::/48
2a06:9801:780::/44
Signature Algorithm: sha256WithRSAEncryption
69:09:d0:9f:18:d0:ba:95:7c:13:35:d7:bc:42:18:87:8f:50:
47:ec:87:71:0c:42:63:be:6f:5a:66:d5:5d:ec:df:5a:47:0a:
52:d6:c2:39:4b:94:37:4e:30:7a:25:7d:b4:19:da:b1:4b:88:
ee:ca:fc:3a:c7:c0:70:cd:24:9f:32:53:27:16:f9:0d:6b:94:
01:fa:9f:96:33:75:de:15:7c:3f:79:c4:29:77:59:39:ad:39:
10:bb:8b:c2:a3:89:49:47:a5:0e:ac:93:0c:3f:15:58:91:da:
85:52:dc:c0:c9:e0:c7:bb:6f:55:e3:b8:5d:9a:09:a0:2f:bf:
b2:4a:85:fc:a8:9d:ce:22:15:47:58:a0:b5:14:fc:57:85:4e:
a1:cb:78:1e:85:e7:15:44:48:bc:cf:5e:0f:ce:16:4e:35:34:
64:4f:8e:6a:8d:42:55:01:18:37:c0:f3:89:82:f5:1e:06:d8:
3d:98:a6:ce:ee:c8:5f:da:60:b9:e1:4c:1b:12:a5:d7:de:ce:
31:89:db:03:67:42:f1:db:82:4e:dd:85:f1:c3:4b:b4:c7:d5:
be:dd:43:b8:4e:de:08:29:d0:a0:31:61:03:ed:d5:71:bd:d3:
3f:b2:e9:0d:e1:9c:a1:da:ae:b9:57:ae:47:74:c0:a2:4d:67:
b7:b2:4d:1c
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ5QN4f8eTT3SGfTNQYCX3JeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYwNTIyMTUwNDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTFjNTE5NDczMzA0ODgyZWYwYzk4MzMwZTczYjI1ZmRhMjUyM2NkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/dytR2qt3MrYfdgstzo/0aoUHm/
hhb7cFjso2VlBelX3/+8/hQyiyQmfk6Ai+SYuoKVAd5HUI4by+F02YJFREQvCQMq
gDp4ZrfLRqnWDIZ5KK2MaOWIgzDw0ZWJjIyncEoJGAZ5rya6lM4SbdhvsWBShcbi
RQVfwMj7LTVVpytkGY35p3t+HxqAWD3pHqsB8kZDht+pjK+hH7uPp3icbwfvrRTQ
YigHF8syc+6f9UPVoue5Qadhib/zKjGFodxPUjghevCqqgAY4r5ukAwfJb088C60
lgszQ/J0KGRbs6xOzHxBRqlck3/bVoCMJyvzGubWCHieeF/BIV/23g3JXQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOUcUZRzMEiC7wyYMw5zsl/aJSPNMB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvNVJ4UmxITXdTSUx2REpnekRuT3lYOW9sSTgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgaYAQKK
AwcEKgaYAQeAMA0GCSqGSIb3DQEBCwUAA4IBAQBpCdCfGNC6lXwTNde8QhiHj1BH
7IdxDEJjvm9aZtVd7N9aRwpS1sI5S5Q3TjB6JX20GdqxS4juyvw6x8BwzSSfMlMn
FvkNa5QB+p+WM3XeFXw/ecQpd1k5rTkQu4vCo4lJR6UOrJMMPxVYkdqFUtzAyeDH
u29V47hdmgmgL7+ySoX8qJ3OIhVHWKC1FPxXhU6hy3gehecVREi8z14PzhZONTRk
T45qjUJVARg3wPOJgvUeBtg9mKbO7shf2mC54UwbEqXX3s4xidsDZ0Lx24JO3YXx
w0u0x9W+3UO4Tt4IKdCgMWED7dVxvdM/sukN4Zyh2q65V65HdMCiTWe3sk0c
-----END CERTIFICATE-----
Generated at Thu Jun 4 15:07:27 2026 by rpki-client