Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/R4Pyc2eAqzl3IDGmsLjV1UwODyw.roa
File: R4Pyc2eAqzl3IDGmsLjV1UwODyw.roa (raw, json)
Hash identifier: WG13n+PTdUVx0aFLkSfl8uxIDKBJZb/5HRoIZV+wCxM=
Subject key identifier: 47:83:F2:73:67:80:AB:39:77:20:31:A6:B0:B8:D5:D5:4C:0E:0F:2C
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019FCAF92C20704C940B34322D5576461B91
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/R4Pyc2eAqzl3IDGmsLjV1UwODyw.roa
Signing time: Tue 04 Aug 2026 04:12:35 +0000
ROA not before: Tue 04 Aug 2026 04:12:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215030
IP address blocks: 2a06:9801:1a::/48 maxlen: 48
2a06:9801:1200::/48 maxlen: 48
2a06:9801:1201::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ca:f9:2c:20:70:4c:94:0b:34:32:2d:55:76:46:1b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Aug 4 04:12:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4783f2736780ab39772031a6b0b8d5d54c0e0f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c1:5b:5e:eb:64:ac:f2:74:1a:0a:d4:37:fc:
96:c5:83:f2:e1:c0:4b:17:47:8a:cd:5b:2d:b7:d9:
2e:67:23:e9:cd:a0:0e:0c:92:b2:75:3c:e6:5b:e9:
ad:44:cd:aa:af:5b:6a:25:85:01:3c:d5:aa:d3:a5:
0d:6f:43:fa:ad:37:b0:5d:22:73:6d:9a:69:87:4c:
10:43:76:cf:17:b6:56:78:2d:d9:12:aa:66:dc:03:
10:1c:94:d6:a0:81:7a:8d:f5:f9:42:52:9d:ae:0d:
b3:1c:ca:9c:bb:f3:28:50:28:b8:6c:0e:50:64:30:
bd:74:fe:19:0b:f3:63:7e:e9:5f:b2:1d:78:12:88:
ac:b9:07:b6:49:21:d2:95:75:52:8b:5a:a2:8d:ef:
82:7f:6d:3e:92:52:be:00:6b:ae:9e:7e:69:db:17:
69:27:36:1d:9e:a3:d5:ab:e9:ba:5b:8d:48:e0:e4:
00:78:b9:cb:d3:70:55:9b:f0:89:99:e5:6e:10:74:
74:b7:aa:22:63:ce:b6:07:35:a2:1a:77:fa:b6:b5:
3f:cf:fd:34:b3:d8:06:79:16:89:ee:37:d5:ff:48:
97:63:f4:67:04:2b:b8:9a:10:cf:f5:57:86:bb:82:
64:c7:19:99:58:6d:a3:62:41:98:e8:58:27:5c:08:
f2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:83:F2:73:67:80:AB:39:77:20:31:A6:B0:B8:D5:D5:4C:0E:0F:2C
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/R4Pyc2eAqzl3IDGmsLjV1UwODyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:1a::/48
2a06:9801:1200::/47
Signature Algorithm: sha256WithRSAEncryption
b6:f6:cc:de:91:2b:53:c3:dc:99:9a:9f:5a:f8:da:a6:51:2a:
64:ce:6c:2b:2d:e1:94:04:3a:13:1c:41:cc:1e:29:fe:3a:83:
ca:b5:d9:d9:7b:6f:86:fd:5c:f0:28:3a:87:6d:3f:96:e8:84:
ee:b4:83:77:21:31:02:5f:67:2e:66:91:61:93:68:72:2f:22:
e4:aa:f7:3b:7f:cc:0d:95:06:56:00:8c:da:84:d5:50:f4:80:
57:9b:45:77:d1:f3:3b:6a:1b:d6:dd:54:e4:31:51:d3:d5:c6:
69:36:12:53:a7:83:8f:4c:c5:36:8b:f1:c0:66:e3:f4:63:aa:
bf:5e:6e:87:c8:0b:42:83:02:62:96:99:1b:ee:41:72:ba:5a:
6e:39:97:38:b7:39:fa:42:73:b2:24:cb:37:47:0c:89:d5:21:
76:1f:b8:e7:ac:f5:2a:79:89:03:03:3a:28:38:21:1a:f3:ff:
64:00:9b:92:d0:5f:f3:07:ff:80:e6:16:cf:2e:b4:fd:42:4f:
4e:0c:02:d6:ee:d9:b5:9f:a4:03:72:54:98:d7:06:8b:18:9a:
ae:3b:da:2b:ab:a7:f6:0b:f2:4c:31:90:b8:92:bc:b7:ae:ad:
ec:27:0d:b2:43:38:e5:d9:d0:a5:99:16:79:31:79:9b:a1:5a:
30:53:7a:9c
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ/K+SwgcEyUCzQyLVV2RhuRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYwODA0MDQxMjM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzgzZjI3MzY3ODBhYjM5NzcyMDMxYTZiMGI4ZDVkNTRjMGUwZjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8FbXutkrPJ0GgrUN/yWxYPy4cBL
F0eKzVstt9kuZyPpzaAODJKydTzmW+mtRM2qr1tqJYUBPNWq06UNb0P6rTewXSJz
bZpph0wQQ3bPF7ZWeC3ZEqpm3AMQHJTWoIF6jfX5QlKdrg2zHMqcu/MoUCi4bA5Q
ZDC9dP4ZC/Njfulfsh14EoisuQe2SSHSlXVSi1qije+Cf20+klK+AGuunn5p2xdp
JzYdnqPVq+m6W41I4OQAeLnL03BVm/CJmeVuEHR0t6oiY862BzWiGnf6trU/z/00
s9gGeRaJ7jfV/0iXY/RnBCu4mhDP9VeGu4JkxxmZWG2jYkGY6FgnXAjyLQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFEeD8nNngKs5dyAxprC41dVMDg8sMB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvUjRQeWMyZUFxemwzSURHbXNMalYxVXdPRHl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgaYAQAa
AwcBKgaYARIAMA0GCSqGSIb3DQEBCwUAA4IBAQC29szekStTw9yZmp9a+NqmUSpk
zmwrLeGUBDoTHEHMHin+OoPKtdnZe2+G/VzwKDqHbT+W6ITutIN3ITECX2cuZpFh
k2hyLyLkqvc7f8wNlQZWAIzahNVQ9IBXm0V30fM7ahvW3VTkMVHT1cZpNhJTp4OP
TMU2i/HAZuP0Y6q/Xm6HyAtCgwJilpkb7kFyulpuOZc4tzn6QnOyJMs3RwyJ1SF2
H7jnrPUqeYkDAzooOCEa8/9kAJuS0F/zB/+A5hbPLrT9Qk9ODALW7tm1n6QDclSY
1waLGJquO9orq6f2C/JMMZC4kry3rq3sJw2yQzjl2dClmRZ5MXmboVowU3qc
-----END CERTIFICATE-----
Generated at Wed Aug 12 17:11:39 2026 by rpki-client