Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/Ef3E4zqW8sINaRCdveGzCKyOS3s.roa
File: Ef3E4zqW8sINaRCdveGzCKyOS3s.roa (raw, json)
Hash identifier: vS/baoCa4XitlD0fS1sYZC9oY8w4yClQ2boof7CkvTQ=
Subject key identifier: 11:FD:C4:E3:3A:96:F2:C2:0D:69:10:9D:BD:E1:B3:08:AC:8E:4B:7B
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019F95036344B923BBD4BD93B5A31A73D236
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/Ef3E4zqW8sINaRCdveGzCKyOS3s.roa
Signing time: Fri 24 Jul 2026 16:44:14 +0000
ROA not before: Fri 24 Jul 2026 16:44:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219368
IP address blocks: 2a06:9801:7c8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:03:63:44:b9:23:bb:d4:bd:93:b5:a3:1a:73:d2:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jul 24 16:44:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11fdc4e33a96f2c20d69109dbde1b308ac8e4b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8d:3a:74:90:94:3a:72:6d:64:a2:19:6a:b0:
6b:49:3c:76:62:a9:dd:e6:f9:9a:8a:90:22:58:dc:
bd:22:52:30:24:c4:cd:2c:c5:26:fe:5e:36:cd:fa:
03:9f:67:58:c6:dc:14:d5:08:b2:1a:48:21:af:34:
f8:67:9c:f6:13:64:9d:7a:53:fd:5c:65:16:fc:35:
e2:1e:86:6c:dc:61:b7:dd:ee:82:46:d4:fc:5c:86:
c2:2e:38:9e:05:ed:ca:b2:8c:f8:f8:59:da:78:2a:
87:2a:8f:c1:19:9f:31:37:72:15:a0:ec:ba:b2:ad:
34:b1:1b:39:da:11:ea:cd:a9:c5:95:c7:2f:ea:2c:
69:73:d0:33:b4:5b:10:d0:60:27:1d:50:8a:01:e1:
7a:a2:4e:37:f8:d9:30:7f:d2:fb:0b:5e:2c:49:95:
69:73:42:a0:0d:cb:f3:82:69:5d:7b:96:24:b9:44:
f6:49:47:85:1c:ca:bf:f0:f6:03:e7:09:14:28:1c:
55:25:80:be:45:9e:e2:8f:10:bc:fe:a0:da:1d:fd:
bf:c3:62:68:7a:9a:82:6f:ec:b4:2b:45:3b:b2:66:
d8:31:87:0c:63:2b:a9:89:61:4f:6c:61:1f:00:92:
d1:3f:6a:3c:c8:63:01:1f:37:03:da:87:84:92:9e:
a1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:FD:C4:E3:3A:96:F2:C2:0D:69:10:9D:BD:E1:B3:08:AC:8E:4B:7B
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/Ef3E4zqW8sINaRCdveGzCKyOS3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:7c8::/48
Signature Algorithm: sha256WithRSAEncryption
ae:15:89:f7:6e:ab:68:26:d8:a1:85:31:4c:9b:ae:1c:17:95:
49:a5:5d:b5:50:e5:94:df:71:77:84:27:86:fa:37:7f:0a:19:
b9:66:50:53:02:15:ef:3a:72:e4:6a:6d:da:b5:cb:19:32:35:
9a:81:52:1b:5f:af:19:d7:47:1f:83:1b:1d:eb:4d:5c:19:0b:
65:99:7f:ec:d9:90:db:32:de:ba:bd:3b:95:53:48:eb:c2:f4:
43:63:45:4f:92:8a:74:44:d9:ac:ba:3b:54:9e:8b:e8:9b:58:
0e:a2:c5:7a:85:49:d2:d7:88:b4:8f:ce:e5:27:e3:fa:2c:be:
7b:58:5b:a6:e2:96:10:90:4a:5f:6b:08:9d:a7:26:60:97:7f:
db:c1:62:48:9b:70:ca:b0:99:85:80:97:a5:f9:0f:a8:a2:b2:
50:f9:04:cf:03:6c:73:38:09:88:55:79:81:73:18:44:c7:cf:
c7:e3:40:14:19:6c:9f:64:b7:ae:d0:fc:72:76:1b:42:07:25:
4d:94:41:14:2e:7a:80:04:3d:e9:f8:02:73:37:80:1f:1a:9e:
fd:ab:d8:8c:0d:ab:33:89:e6:d4:a8:d5:fc:bc:ae:85:2c:b3:
d3:c7:4f:5f:92:12:4b:b1:c4:37:04:29:31:7e:a1:35:04:f1:
fa:7d:0e:68
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ+VA2NEuSO71L2TtaMac9I2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYwNzI0MTY0NDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWZkYzRlMzNhOTZmMmMyMGQ2OTEwOWRiZGUxYjMwOGFjOGU0YjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw406dJCUOnJtZKIZarBrSTx2Yqnd
5vmaipAiWNy9IlIwJMTNLMUm/l42zfoDn2dYxtwU1QiyGkghrzT4Z5z2E2SdelP9
XGUW/DXiHoZs3GG33e6CRtT8XIbCLjieBe3Ksoz4+FnaeCqHKo/BGZ8xN3IVoOy6
sq00sRs52hHqzanFlccv6ixpc9AztFsQ0GAnHVCKAeF6ok43+Nkwf9L7C14sSZVp
c0KgDcvzgmlde5YkuUT2SUeFHMq/8PYD5wkUKBxVJYC+RZ7ijxC8/qDaHf2/w2Jo
epqCb+y0K0U7smbYMYcMYyupiWFPbGEfAJLRP2o8yGMBHzcD2oeEkp6huQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBH9xOM6lvLCDWkQnb3hswisjkt7MB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvRWYzRTR6cVc4c0lOYVJDZHZlR3pDS3lPUzNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgaYAQfI
MA0GCSqGSIb3DQEBCwUAA4IBAQCuFYn3bqtoJtihhTFMm64cF5VJpV21UOWU33F3
hCeG+jd/Chm5ZlBTAhXvOnLkam3atcsZMjWagVIbX68Z10cfgxsd601cGQtlmX/s
2ZDbMt66vTuVU0jrwvRDY0VPkop0RNmsujtUnovom1gOosV6hUnS14i0j87lJ+P6
LL57WFum4pYQkEpfawidpyZgl3/bwWJIm3DKsJmFgJel+Q+oorJQ+QTPA2xzOAmI
VXmBcxhEx8/H40AUGWyfZLeu0PxydhtCByVNlEEULnqABD3p+AJzN4AfGp79q9iM
DasziebUqNX8vK6FLLPTx09fkhJLscQ3BCkxfqE1BPH6fQ5o
-----END CERTIFICATE-----
Generated at Wed Aug 12 17:11:40 2026 by rpki-client