Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/jHup-m-VgtTOpZExLkpo_Hanr3M.roa
File: jHup-m-VgtTOpZExLkpo_Hanr3M.roa (raw, json)
Hash identifier: yJOEa9QxpzFhOXTRoSvGB/URGEPPWkO0tYkjixN/Cn0=
Subject key identifier: 8C:7B:A9:FA:6F:95:82:D4:CE:A5:91:31:2E:4A:68:FC:76:A7:AF:73
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019F84ABD0118E15FA51BD1D1593956A6B18
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/jHup-m-VgtTOpZExLkpo_Hanr3M.roa
Signing time: Tue 21 Jul 2026 12:34:40 +0000
ROA not before: Tue 21 Jul 2026 12:34:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205298
IP address blocks: 2a06:9801:f30::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:34:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:ab:d0:11:8e:15:fa:51:bd:1d:15:93:95:6a:6b:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jul 21 12:34:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8c7ba9fa6f9582d4cea591312e4a68fc76a7af73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8a:b2:71:c1:b4:95:20:5d:3f:5a:a6:43:59:
2b:64:30:e2:e6:bc:80:eb:06:57:62:86:fe:f8:1c:
6a:a6:34:c1:20:03:a8:20:f0:1c:33:45:64:59:d4:
9d:f4:07:64:37:e9:33:fa:7a:30:a3:ab:d9:f9:ab:
e5:83:02:3e:9b:28:3c:b5:9c:bd:19:d9:d3:1e:39:
24:4d:c3:76:04:c6:94:ca:c6:5a:70:c8:c1:75:dc:
90:1c:a2:b9:1d:54:0a:ea:8d:8e:d6:e4:5b:78:e1:
47:26:6e:22:d2:9f:12:9c:40:fa:79:aa:f6:6a:3d:
0f:c2:8f:5a:13:ac:07:7c:81:61:51:94:5c:6d:56:
9c:80:bf:49:4e:bb:ae:d2:62:ad:c3:03:6c:ac:11:
b2:23:7c:dc:8a:92:48:36:cc:5a:c9:e9:78:2f:2c:
b2:57:04:45:dc:c9:ac:f1:d7:ad:1e:d8:69:21:1e:
09:8e:02:2b:68:7c:ee:03:17:ac:26:8e:67:d5:73:
6f:c4:b4:1a:7c:92:39:bf:34:f1:28:f6:46:a7:9f:
6f:73:25:76:a2:69:6a:97:95:46:e0:1b:6c:3c:24:
96:2d:36:d3:b4:4c:41:9e:47:60:13:47:e9:4b:a5:
7d:2b:7d:44:c0:7e:db:99:ce:1c:0e:dc:3a:00:0a:
c1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:7B:A9:FA:6F:95:82:D4:CE:A5:91:31:2E:4A:68:FC:76:A7:AF:73
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/jHup-m-VgtTOpZExLkpo_Hanr3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:f30::/44
Signature Algorithm: sha256WithRSAEncryption
21:56:af:b5:af:e1:24:7e:ef:aa:ad:e2:e1:9b:c2:92:74:9a:
8e:7c:00:c7:b8:15:db:6d:48:4d:fd:e9:04:b1:d5:ca:a6:de:
d1:c2:18:9e:04:12:fa:77:4e:6e:26:23:db:ba:da:c7:cc:9f:
4f:c7:34:3d:7f:f0:c1:25:b4:3d:07:92:a7:50:c8:9f:e5:ff:
e8:f5:ea:b3:89:ef:f9:fd:d3:81:9a:34:b5:65:d5:dd:2e:61:
b4:eb:c2:4b:dc:f9:c7:68:66:d7:f4:91:12:19:34:1a:02:e4:
10:d1:af:93:25:ce:44:02:f7:22:55:92:14:06:c9:b4:66:85:
53:52:16:11:93:6d:9c:18:23:e4:7b:61:6a:01:6a:82:20:69:
96:0a:ee:77:5c:8e:31:c3:73:b5:75:0b:1e:72:6a:46:1a:06:
3f:b3:e0:b9:ad:18:01:dd:b6:04:d5:35:02:24:f4:d6:37:56:
47:0f:78:85:22:28:36:8a:93:2b:55:3c:4b:2c:30:6b:1d:4a:
6f:3e:d5:fe:7a:a2:0d:be:73:e1:09:a0:13:25:84:3c:c0:11:
8c:cd:60:6b:b4:e6:23:47:74:fa:e4:af:f8:6d:9b:2f:d7:55:
70:92:1b:ff:05:b8:ef:42:cf:7b:cf:34:73:38:3c:22:95:49:
75:55:5a:9a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ+Eq9ARjhX6Ub0dFZOVamsYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYwNzIxMTIzNDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzdiYTlmYTZmOTU4MmQ0Y2VhNTkxMzEyZTRhNjhmYzc2YTdhZjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2oqyccG0lSBdP1qmQ1krZDDi5ryA
6wZXYob++BxqpjTBIAOoIPAcM0VkWdSd9AdkN+kz+nowo6vZ+avlgwI+myg8tZy9
GdnTHjkkTcN2BMaUysZacMjBddyQHKK5HVQK6o2O1uRbeOFHJm4i0p8SnED6ear2
aj0Pwo9aE6wHfIFhUZRcbVacgL9JTruu0mKtwwNsrBGyI3zcipJINsxayel4Lyyy
VwRF3Mms8detHthpIR4JjgIraHzuAxesJo5n1XNvxLQafJI5vzTxKPZGp59vcyV2
omlql5VG4BtsPCSWLTbTtExBnkdgE0fpS6V9K31EwH7bmc4cDtw6AArBpQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFIx7qfpvlYLUzqWRMS5KaPx2p69zMB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvakh1cC1tLVZndFRPcFpFeExrcG9fSGFucjNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgaYAQ8w
MA0GCSqGSIb3DQEBCwUAA4IBAQAhVq+1r+Ekfu+qreLhm8KSdJqOfADHuBXbbUhN
/ekEsdXKpt7RwhieBBL6d05uJiPbutrHzJ9PxzQ9f/DBJbQ9B5KnUMif5f/o9eqz
ie/5/dOBmjS1ZdXdLmG068JL3PnHaGbX9JESGTQaAuQQ0a+TJc5EAvciVZIUBsm0
ZoVTUhYRk22cGCPke2FqAWqCIGmWCu53XI4xw3O1dQsecmpGGgY/s+C5rRgB3bYE
1TUCJPTWN1ZHD3iFIig2ipMrVTxLLDBrHUpvPtX+eqINvnPhCaATJYQ8wBGMzWBr
tOYjR3T65K/4bZsv11Vwkhv/BbjvQs97zzRzODwilUl1VVqa
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:43 2026 by rpki-client