Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/8S0vKK64zN6iQGSEdfIgyY02Iys.roa
File: 8S0vKK64zN6iQGSEdfIgyY02Iys.roa (raw, json)
Hash identifier: w6kMXo+ukucgVuuxk7LjywCGIjtZwN303boSK6R2BXY=
Subject key identifier: F1:2D:2F:28:AE:B8:CC:DE:A2:40:64:84:75:F2:20:C9:8D:36:23:2B
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019EA70D0B0EB502A549401225DCE316C165
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/8S0vKK64zN6iQGSEdfIgyY02Iys.roa
Signing time: Mon 08 Jun 2026 11:45:10 +0000
ROA not before: Mon 08 Jun 2026 11:45:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202817
IP address blocks: 2a06:9801:742::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a7:0d:0b:0e:b5:02:a5:49:40:12:25:dc:e3:16:c1:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jun 8 11:45:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f12d2f28aeb8ccdea240648475f220c98d36232b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:45:80:f4:db:73:40:cd:8c:89:2b:52:b4:68:
47:a8:00:50:f1:d7:fe:d6:35:a5:9e:19:cb:4d:fe:
d6:aa:a6:89:97:77:59:74:3a:56:72:04:c5:76:1c:
17:c2:a7:ad:95:95:70:10:57:6d:bb:49:eb:05:ad:
eb:f5:a4:83:4b:d6:48:ff:dd:09:be:76:16:50:de:
c2:76:12:f5:3a:00:c4:ca:bb:23:d1:b7:94:32:33:
85:a4:71:e7:0b:8b:42:96:c2:2c:63:68:fb:bd:57:
24:5d:f3:29:ad:d5:47:a8:7f:59:77:b8:b6:13:00:
8e:58:39:9d:4d:82:05:67:6c:64:64:49:5a:a1:41:
d3:b1:76:b2:8e:eb:c3:5c:5f:db:fd:91:ca:8e:32:
3f:1a:89:9c:c7:a8:a1:0c:0f:1b:5c:12:84:02:6a:
26:ab:01:86:84:a3:28:9b:1c:07:d2:8d:52:c6:cf:
3b:72:4b:9c:a5:62:1f:52:c6:0f:28:aa:3e:cc:55:
33:a7:8f:ec:61:25:21:80:10:d8:63:47:5e:a6:5c:
86:36:38:18:5b:7c:97:4a:ab:b2:8a:8b:d3:03:f2:
c2:ab:44:50:fa:27:fe:17:82:05:2c:ae:33:fc:5f:
8b:db:97:0d:02:c0:9d:81:ac:7a:b8:65:7f:ab:00:
a3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:2D:2F:28:AE:B8:CC:DE:A2:40:64:84:75:F2:20:C9:8D:36:23:2B
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/8S0vKK64zN6iQGSEdfIgyY02Iys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:742::/48
Signature Algorithm: sha256WithRSAEncryption
4a:f0:75:f8:4d:97:39:ca:8a:ef:0e:70:bc:67:2d:15:42:ea:
a3:f6:68:b6:93:bf:8c:45:4b:5b:0f:50:8e:73:d7:8c:65:8e:
20:8a:d6:0c:f6:b1:38:2e:f4:86:bb:16:47:9a:0e:88:f9:1e:
d9:c6:b1:5a:ba:20:9c:81:27:e0:68:87:f7:ad:01:14:4c:92:
a6:35:26:a4:d8:6a:9b:5d:0d:96:6b:06:ef:58:bd:72:2f:df:
78:f4:29:be:9c:8e:6c:bd:3b:dd:5b:3e:3e:07:40:e1:c5:98:
c5:58:1d:85:85:ba:b8:f1:ad:44:06:89:0a:9a:84:55:a9:0d:
16:2c:4a:6b:b3:07:e9:60:94:37:9a:ed:cb:55:b0:59:0e:30:
f8:3a:8d:20:01:8e:54:a7:85:67:70:8f:d2:28:a6:86:7c:36:
15:11:ac:a1:ef:81:a1:7a:aa:23:bc:65:b9:11:2b:1e:49:4f:
21:ce:0d:f4:f8:77:b3:8b:7e:b8:4b:51:fd:0b:6f:d9:ec:ef:
cb:b9:20:19:d6:9e:b0:a1:52:98:b1:5b:dd:1d:6f:76:a0:c6:
c2:24:57:b0:f6:58:cb:c3:08:75:08:aa:3f:54:c3:fb:8e:27:
f7:ba:88:3b:e4:51:b8:32:b2:fb:f8:b3:58:22:d8:44:7d:a3:
3c:30:6e:d7
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ6nDQsOtQKlSUASJdzjFsFlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYwNjA4MTE0NTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTJkMmYyOGFlYjhjY2RlYTI0MDY0ODQ3NWYyMjBjOThkMzYyMzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0WA9NtzQM2MiStStGhHqABQ8df+
1jWlnhnLTf7WqqaJl3dZdDpWcgTFdhwXwqetlZVwEFdtu0nrBa3r9aSDS9ZI/90J
vnYWUN7CdhL1OgDEyrsj0beUMjOFpHHnC4tClsIsY2j7vVckXfMprdVHqH9Zd7i2
EwCOWDmdTYIFZ2xkZElaoUHTsXayjuvDXF/b/ZHKjjI/Gomcx6ihDA8bXBKEAmom
qwGGhKMomxwH0o1Sxs87ckucpWIfUsYPKKo+zFUzp4/sYSUhgBDYY0deplyGNjgY
W3yXSquyiovTA/LCq0RQ+if+F4IFLK4z/F+L25cNAsCdgax6uGV/qwCjJQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFPEtLyiuuMzeokBkhHXyIMmNNiMrMB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvOFMwdktLNjR6TjZpUUdTRWRmSWd5WTAySXlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgaYAQdC
MA0GCSqGSIb3DQEBCwUAA4IBAQBK8HX4TZc5yorvDnC8Zy0VQuqj9mi2k7+MRUtb
D1COc9eMZY4gitYM9rE4LvSGuxZHmg6I+R7ZxrFauiCcgSfgaIf3rQEUTJKmNSak
2GqbXQ2WawbvWL1yL9949Cm+nI5svTvdWz4+B0DhxZjFWB2Fhbq48a1EBokKmoRV
qQ0WLEprswfpYJQ3mu3LVbBZDjD4Oo0gAY5Up4VncI/SKKaGfDYVEayh74Gheqoj
vGW5ESseSU8hzg30+Hezi364S1H9C2/Z7O/LuSAZ1p6woVKYsVvdHW92oMbCJFew
9ljLwwh1CKo/VMP7jif3uog75FG4MrL7+LNYIthEfaM8MG7X
-----END CERTIFICATE-----
Generated at Thu Jun 11 16:26:14 2026 by rpki-client