Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/ItLsvjI4A33jUv51S2DbCu9eJSo.roa
File: ItLsvjI4A33jUv51S2DbCu9eJSo.roa (raw, json)
Hash identifier: Vkryoa0XfjwtuUKLPaFtDJ7JVXwmwcN/Ruz8YL0HaNA=
Subject key identifier: 22:D2:EC:BE:32:38:03:7D:E3:52:FE:75:4B:60:DB:0A:EF:5E:25:2A
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A04F615395975FD533621418348865DFCE
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/ItLsvjI4A33jUv51S2DbCu9eJSo.roa
Signing time: Sat 29 Aug 2026 21:16:13 +0000
ROA not before: Sat 29 Aug 2026 21:16:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218828
IP address blocks: 2a06:9801:f9d::/48 maxlen: 48
2a06:9801:1500::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4f:61:53:95:97:5f:d5:33:62:14:18:34:88:65:df:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Aug 29 21:16:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=22d2ecbe3238037de352fe754b60db0aef5e252a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fb:04:2a:a9:d4:a4:98:7d:51:20:a8:dc:8e:
bf:6c:83:df:8e:c9:ae:e4:49:34:e6:57:f4:12:70:
ec:9f:15:18:c5:6e:b2:62:07:b5:9e:2c:72:33:b9:
00:b9:16:98:37:ce:36:26:9a:76:d7:3d:06:78:b8:
75:b7:7b:0a:8b:3f:aa:f5:cf:4c:72:03:2f:d9:3e:
c8:b2:e9:fb:49:fe:26:07:70:6d:f1:7a:08:5d:89:
cb:91:94:87:3f:6d:81:07:fa:63:27:f8:62:1f:ba:
8f:b7:17:d9:82:f9:05:7e:49:f1:ff:0c:7d:bd:70:
1d:42:2d:74:1f:e1:b9:be:0e:1a:dc:32:99:b8:e3:
39:9a:a1:99:72:40:fb:bb:4c:25:40:fb:59:c2:fe:
c5:0b:ad:04:2e:06:b7:4e:f2:db:cf:d7:31:dc:35:
6d:48:4e:0a:42:e2:fa:13:2a:1e:28:91:36:da:3a:
c7:20:cf:92:4b:5a:ca:ad:74:4e:7c:3c:fe:70:b9:
c8:fb:1a:16:cb:7e:c7:0d:58:2e:47:0a:43:52:4f:
63:fe:3e:84:46:af:31:e7:81:95:99:62:51:c4:79:
01:35:65:9a:62:4d:39:5d:d3:09:1e:65:ae:e3:a9:
cd:0f:15:88:17:f6:da:08:14:99:ef:05:65:7e:25:
5b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D2:EC:BE:32:38:03:7D:E3:52:FE:75:4B:60:DB:0A:EF:5E:25:2A
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/ItLsvjI4A33jUv51S2DbCu9eJSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:f9d::/48
2a06:9801:1500::/44
Signature Algorithm: sha256WithRSAEncryption
20:34:f5:00:80:39:4c:01:97:8b:87:90:b5:c2:e3:e4:3b:89:
32:7a:bc:a1:22:16:be:2f:02:b1:e3:ff:5e:97:71:56:ca:42:
cb:01:19:14:7f:0d:7f:c7:2c:ca:c3:7e:3f:17:94:0b:66:32:
00:42:a4:e5:10:68:35:3e:23:85:6a:f6:c9:42:64:41:b6:a6:
ad:19:7a:c4:66:2e:9e:b6:78:ca:90:b3:ad:6c:a4:40:b2:ca:
51:1b:15:b1:80:f6:88:86:47:85:55:d3:f5:c9:22:1d:e7:e2:
13:c3:af:4a:61:61:cb:02:85:9f:4e:c2:9b:77:0d:d2:d3:fd:
aa:e0:88:fb:e6:f4:2d:3f:90:9b:bf:cc:7a:50:4c:ba:2e:8a:
5e:4e:2b:be:47:61:eb:8d:cf:62:10:5b:59:2c:67:45:18:90:
79:2a:24:93:5b:70:eb:64:82:06:b9:63:11:1c:7d:2a:77:97:
84:e1:fc:57:03:23:c4:f9:63:ce:39:18:9e:39:c5:d7:da:8c:
29:9c:3d:56:63:f0:b7:34:fb:11:69:ee:fa:9f:28:f4:97:e5:
d5:a8:6b:2c:eb:11:a0:17:1c:61:7e:c8:ae:5f:93:97:71:2a:
44:c3:44:de:66:26:e6:84:88:b3:42:02:9a:b8:33:ec:02:0b:
05:eb:21:08
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaBPYVOVl1/VM2IUGDSIZd/OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYwODI5MjExNjEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMmQyZWNiZTMyMzgwMzdkZTM1MmZlNzU0YjYwZGIwYWVmNWUyNTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fsEKqnUpJh9USCo3I6/bIPfjsmu
5Ek05lf0EnDsnxUYxW6yYge1nixyM7kAuRaYN842Jpp21z0GeLh1t3sKiz+q9c9M
cgMv2T7Isun7Sf4mB3Bt8XoIXYnLkZSHP22BB/pjJ/hiH7qPtxfZgvkFfknx/wx9
vXAdQi10H+G5vg4a3DKZuOM5mqGZckD7u0wlQPtZwv7FC60ELga3TvLbz9cx3DVt
SE4KQuL6EyoeKJE22jrHIM+SS1rKrXROfDz+cLnI+xoWy37HDVguRwpDUk9j/j6E
Rq8x54GVmWJRxHkBNWWaYk05XdMJHmWu46nNDxWIF/baCBSZ7wVlfiVbSwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCLS7L4yOAN941L+dUtg2wrvXiUqMB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvSXRMc3ZqSTRBMzNqVXY1MVMyRGJDdTllSlNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgaYAQ+d
AwcEKgaYARUAMA0GCSqGSIb3DQEBCwUAA4IBAQAgNPUAgDlMAZeLh5C1wuPkO4ky
eryhIha+LwKx4/9el3FWykLLARkUfw1/xyzKw34/F5QLZjIAQqTlEGg1PiOFavbJ
QmRBtqatGXrEZi6etnjKkLOtbKRAsspRGxWxgPaIhkeFVdP1ySId5+ITw69KYWHL
AoWfTsKbdw3S0/2q4Ij75vQtP5Cbv8x6UEy6LopeTiu+R2Hrjc9iEFtZLGdFGJB5
KiSTW3DrZIIGuWMRHH0qd5eE4fxXAyPE+WPOORieOcXX2owpnD1WY/C3NPsRae76
nyj0l+XVqGss6xGgFxxhfsiuX5OXcSpEw0TeZibmhIizQgKauDPsAgsF6yEI
-----END CERTIFICATE-----
Generated at Tue Sep 1 01:42:38 2026 by rpki-client