Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/K04O1g3sAV4tavou56_sNCxGDtg.roa
File: K04O1g3sAV4tavou56_sNCxGDtg.roa (raw, json)
Hash identifier: +Ch58kpHpbF5vhiAXtaEfLNgUfpomj6UxVUfg4opgl4=
Subject key identifier: 2B:4E:0E:D6:0D:EC:01:5E:2D:6A:FA:2E:E7:AF:EC:34:2C:46:0E:D8
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019CB9BBA0F080CE7F46170421DC2E632BEB
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/K04O1g3sAV4tavou56_sNCxGDtg.roa
Signing time: Wed 04 Mar 2026 16:43:27 +0000
ROA not before: Wed 04 Mar 2026 16:43:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34927
IP address blocks: 2a06:9801:c6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b9:bb:a0:f0:80:ce:7f:46:17:04:21:dc:2e:63:2b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Mar 4 16:43:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2b4e0ed60dec015e2d6afa2ee7afec342c460ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e4:62:3e:1b:5d:2d:bb:b5:03:24:f2:00:21:
46:72:4f:c0:2b:d7:c0:4e:48:8b:2e:2c:5b:6e:41:
93:4c:0b:5a:51:b6:8e:da:8f:06:bc:a0:8f:3c:ac:
b5:25:a6:3e:6a:82:a1:e2:1d:45:ff:ed:50:64:07:
24:41:fc:8c:d6:74:64:75:14:13:19:41:3c:93:9e:
fe:ae:b3:b1:10:d6:91:cf:35:f4:bb:89:bf:89:88:
1b:5f:50:b3:b6:b5:c3:31:b3:63:9b:a2:d7:25:a9:
7c:aa:59:9d:7c:ea:6e:d7:80:af:9f:57:4e:df:4c:
80:86:cc:47:f3:76:b5:4e:26:52:28:36:ac:8a:81:
24:7a:03:39:fe:38:77:23:3b:29:d5:a5:f6:72:d2:
cb:bf:30:b6:ad:10:2c:8e:73:cd:d6:43:38:24:f9:
1f:2f:9d:12:73:e8:7e:12:ef:00:cf:03:68:66:37:
fd:d2:66:86:d0:00:7a:a2:9c:0d:15:d2:8d:42:79:
cd:b8:88:a3:a2:6b:ae:bf:6d:3c:a1:17:4f:9f:50:
4b:d8:7a:b0:f7:83:e8:89:ff:3c:99:a4:48:73:76:
43:52:65:28:6e:05:59:df:41:a8:80:02:01:eb:1d:
36:6b:f5:dc:91:52:4a:4c:cb:3c:39:96:31:90:e6:
37:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:4E:0E:D6:0D:EC:01:5E:2D:6A:FA:2E:E7:AF:EC:34:2C:46:0E:D8
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/K04O1g3sAV4tavou56_sNCxGDtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:c6::/48
Signature Algorithm: sha256WithRSAEncryption
5b:5c:2c:66:02:b1:ad:af:80:a7:0d:ce:9d:d3:98:95:6e:95:
7c:25:bb:cb:59:26:69:de:20:f5:e8:9e:52:34:e7:60:12:83:
fa:a3:4b:bf:70:e9:5b:0a:cb:c4:f3:76:10:e2:93:8f:88:a4:
29:62:9b:e4:3b:a6:11:c0:ea:89:72:da:24:3a:a3:97:7e:8b:
8a:f1:13:ef:16:e3:33:da:85:71:88:06:20:0d:a7:ea:5d:c6:
52:56:65:2b:51:5c:0d:e2:82:f9:ae:1e:98:8b:fd:02:d6:0a:
27:c3:78:87:bb:ae:c9:5c:3f:1e:5f:73:46:90:55:d3:62:21:
ef:9a:6c:a1:a7:57:bf:f1:08:c2:91:41:46:b0:07:ea:fe:b5:
b6:85:a4:21:52:ea:76:63:98:bc:7a:75:e6:fe:3d:9e:42:7d:
c0:06:ad:96:0b:a8:c9:9d:e4:4c:25:60:82:c4:82:3e:4a:de:
4b:ec:73:e0:35:e8:af:ec:37:66:43:8c:d4:cc:22:9b:13:52:
0e:ae:58:5a:13:98:d2:f9:54:f1:22:e8:18:78:ce:a2:49:02:
56:92:9c:be:d2:a8:ba:01:da:ad:68:b8:da:ea:6b:ea:fa:80:
b4:83:bb:8d:b2:84:08:05:ef:56:49:e7:8d:9c:eb:03:6b:cb:
4d:45:b2:e2
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZy5u6DwgM5/RhcEIdwuYyvrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYwMzA0MTY0MzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjRlMGVkNjBkZWMwMTVlMmQ2YWZhMmVlN2FmZWMzNDJjNDYwZWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uRiPhtdLbu1AyTyACFGck/AK9fA
TkiLLixbbkGTTAtaUbaO2o8GvKCPPKy1JaY+aoKh4h1F/+1QZAckQfyM1nRkdRQT
GUE8k57+rrOxENaRzzX0u4m/iYgbX1CztrXDMbNjm6LXJal8qlmdfOpu14Cvn1dO
30yAhsxH83a1TiZSKDasioEkegM5/jh3Izsp1aX2ctLLvzC2rRAsjnPN1kM4JPkf
L50Sc+h+Eu8AzwNoZjf90maG0AB6opwNFdKNQnnNuIijomuuv208oRdPn1BL2Hqw
94Poif88maRIc3ZDUmUobgVZ30GogAIB6x02a/XckVJKTMs8OZYxkOY3QQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFCtODtYN7AFeLWr6Luev7DQsRg7YMB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvSzA0TzFnM3NBVjR0YXZvdTU2X3NOQ3hHRHRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgaYAQDG
MA0GCSqGSIb3DQEBCwUAA4IBAQBbXCxmArGtr4CnDc6d05iVbpV8JbvLWSZp3iD1
6J5SNOdgEoP6o0u/cOlbCsvE83YQ4pOPiKQpYpvkO6YRwOqJctokOqOXfouK8RPv
FuMz2oVxiAYgDafqXcZSVmUrUVwN4oL5rh6Yi/0C1gonw3iHu67JXD8eX3NGkFXT
YiHvmmyhp1e/8QjCkUFGsAfq/rW2haQhUup2Y5i8enXm/j2eQn3ABq2WC6jJneRM
JWCCxII+St5L7HPgNeiv7DdmQ4zUzCKbE1IOrlhaE5jS+VTxIugYeM6iSQJWkpy+
0qi6AdqtaLja6mvq+oC0g7uNsoQIBe9WSeeNnOsDa8tNRbLi
-----END CERTIFICATE-----
Generated at Sat Mar 7 04:44:42 2026 by rpki-client