Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/Cao86DB0Q6b0uXMPvTq_z9-0F8A.roa
File: Cao86DB0Q6b0uXMPvTq_z9-0F8A.roa (raw, json)
Hash identifier: bUAGdvOfR3927TW2SQD8PtOy/ZtJKy3i26wB34hITXo=
Subject key identifier: 09:AA:3C:E8:30:74:43:A6:F4:B9:73:0F:BD:3A:BF:CF:DF:B4:17:C0
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019DADAE7D486352D331BAECD705A1599964
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/Cao86DB0Q6b0uXMPvTq_z9-0F8A.roa
Signing time: Tue 21 Apr 2026 01:36:26 +0000
ROA not before: Tue 21 Apr 2026 01:36:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198767
IP address blocks: 2a06:9801:27d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ad:ae:7d:48:63:52:d3:31:ba:ec:d7:05:a1:59:99:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Apr 21 01:36:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=09aa3ce8307443a6f4b9730fbd3abfcfdfb417c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f0:4e:5d:7a:51:20:97:51:ef:50:7d:9f:a8:
50:b2:0f:6d:5c:31:60:99:9c:98:9a:0c:90:8d:82:
a6:fc:0e:e5:6b:e1:34:1d:ac:d8:f8:96:e0:ea:4e:
eb:b4:99:9e:49:ed:84:49:1a:10:34:f1:0f:a7:a6:
ac:67:24:45:7a:fc:dd:6f:2b:28:17:ee:4f:2e:ff:
b9:70:aa:38:3e:b1:41:e5:f6:b1:89:fe:e2:3f:18:
9a:41:78:0b:49:01:ba:cd:a3:56:58:12:9b:9d:41:
73:c1:a1:06:2f:1e:b6:2a:d7:bf:f3:59:00:23:96:
36:7b:ed:82:f0:99:b7:f8:0b:90:a9:ae:c9:f7:13:
37:78:5f:77:21:e7:33:f9:b5:96:34:1e:a8:79:33:
44:e1:94:cb:81:94:d0:72:6d:4a:95:81:d1:21:7d:
bf:2a:5d:42:d0:3d:b1:14:d3:51:b3:12:c1:4a:69:
0b:5c:99:24:08:b1:c0:22:b9:8f:50:ab:c4:bd:03:
3c:46:ba:18:6d:18:d7:2b:50:c8:ce:e6:de:80:d7:
f8:c9:ec:f4:66:7a:57:d8:d1:df:7b:10:50:b6:f6:
57:93:0b:91:08:0c:08:0e:49:f0:8b:86:b9:ab:d2:
88:b6:e8:b3:c1:0e:ff:ee:54:d2:c9:b6:19:dd:cd:
f7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:AA:3C:E8:30:74:43:A6:F4:B9:73:0F:BD:3A:BF:CF:DF:B4:17:C0
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/Cao86DB0Q6b0uXMPvTq_z9-0F8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:27d::/48
Signature Algorithm: sha256WithRSAEncryption
12:72:01:a4:53:34:8b:95:e2:8c:1d:f1:35:64:d7:3e:ee:b7:
3e:42:ff:9c:bd:f3:11:87:92:db:2a:5d:42:53:40:d2:83:fa:
99:dc:3e:60:65:04:73:0c:e8:d7:3b:91:92:39:27:aa:e8:a0:
11:58:2f:75:e9:ce:3e:eb:62:20:c0:10:a5:14:b6:4f:19:2e:
b4:9c:42:27:0f:f9:e0:63:e0:a9:66:5a:22:eb:f8:db:55:2c:
e7:07:7b:38:6b:40:09:6a:b3:ed:02:79:c0:44:b5:c7:3c:2d:
1b:64:dc:2e:0c:1f:98:49:b8:26:c4:d5:40:89:5b:26:76:02:
8f:76:8a:03:45:87:23:21:a5:ea:67:9c:8d:ec:c4:d7:2b:be:
7b:80:0b:5e:c5:3c:50:7d:86:f3:3a:af:21:1d:6b:e0:a6:37:
31:2e:aa:0b:b1:3f:3b:c9:36:11:d3:83:95:48:e4:2a:97:86:
7d:76:49:c7:66:34:67:79:fc:2a:c0:89:82:d7:29:1a:2e:19:
3a:2c:a9:e9:bf:4d:71:dd:b4:b0:05:df:8c:1a:7f:9c:b6:a9:
8c:87:71:25:42:b5:26:d6:7b:3f:ed:a9:cb:2a:d1:c4:08:07:
1c:3e:94:e2:1e:34:e0:b4:b0:a6:66:00:9b:ea:d9:0b:02:76:
eb:c2:97:d5
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ2trn1IY1LTMbrs1wWhWZlkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYwNDIxMDEzNjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOWFhM2NlODMwNzQ0M2E2ZjRiOTczMGZiZDNhYmZjZmRmYjQxN2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPBOXXpRIJdR71B9n6hQsg9tXDFg
mZyYmgyQjYKm/A7la+E0HazY+Jbg6k7rtJmeSe2ESRoQNPEPp6asZyRFevzdbyso
F+5PLv+5cKo4PrFB5faxif7iPxiaQXgLSQG6zaNWWBKbnUFzwaEGLx62Kte/81kA
I5Y2e+2C8Jm3+AuQqa7J9xM3eF93Iecz+bWWNB6oeTNE4ZTLgZTQcm1KlYHRIX2/
Kl1C0D2xFNNRsxLBSmkLXJkkCLHAIrmPUKvEvQM8RroYbRjXK1DIzubegNf4yez0
ZnpX2NHfexBQtvZXkwuRCAwIDknwi4a5q9KItuizwQ7/7lTSybYZ3c33KQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFAmqPOgwdEOm9LlzD706v8/ftBfAMB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvQ2FvODZEQjBRNmIwdVhNUHZUcV96OS0wRjhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgaYAQJ9
MA0GCSqGSIb3DQEBCwUAA4IBAQAScgGkUzSLleKMHfE1ZNc+7rc+Qv+cvfMRh5Lb
Kl1CU0DSg/qZ3D5gZQRzDOjXO5GSOSeq6KARWC916c4+62IgwBClFLZPGS60nEIn
D/ngY+CpZloi6/jbVSznB3s4a0AJarPtAnnARLXHPC0bZNwuDB+YSbgmxNVAiVsm
dgKPdooDRYcjIaXqZ5yN7MTXK757gAtexTxQfYbzOq8hHWvgpjcxLqoLsT87yTYR
04OVSOQql4Z9dknHZjRnefwqwImC1ykaLhk6LKnpv01x3bSwBd+MGn+ctqmMh3El
QrUm1ns/7anLKtHECAccPpTiHjTgtLCmZgCb6tkLAnbrwpfV
-----END CERTIFICATE-----
Generated at Wed May 13 14:10:10 2026 by rpki-client