Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/k7B5hZjhMIpuKXCPPnsVpCXSCtY.roa
File: k7B5hZjhMIpuKXCPPnsVpCXSCtY.roa (raw, json)
Hash identifier: BjBDG6Er6uMsus47vIP69glf+yvoP4fxntO9a68BjcA=
Subject key identifier: 93:B0:79:85:98:E1:30:8A:6E:29:70:8F:3E:7B:15:A4:25:D2:0A:D6
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019FC9F3A798B245E7B22A223B3D0080ED71
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/k7B5hZjhMIpuKXCPPnsVpCXSCtY.roa
Signing time: Mon 03 Aug 2026 23:26:56 +0000
ROA not before: Mon 03 Aug 2026 23:26:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34927
IP address blocks: 2a06:9801:c6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c9:f3:a7:98:b2:45:e7:b2:2a:22:3b:3d:00:80:ed:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Aug 3 23:26:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=93b0798598e1308a6e29708f3e7b15a425d20ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:db:90:55:7f:99:12:9f:19:21:de:7a:d4:45:
99:ac:63:81:ac:b0:8a:55:d0:1d:14:b1:17:69:24:
41:24:35:7f:51:7a:7d:fd:93:ed:3d:56:d5:6f:6f:
72:16:51:e6:d0:98:2d:d8:3e:dc:9e:4a:57:c3:09:
57:ba:d9:9c:06:6c:b3:12:f0:dd:62:a8:eb:1c:9f:
c0:7b:ad:fc:8f:9a:69:07:17:d6:88:49:88:7d:49:
67:cd:32:3c:3b:03:8d:e4:d5:a2:24:24:a9:bb:d8:
3f:40:59:79:93:8d:54:22:14:e3:1d:d6:a5:72:da:
69:50:e7:b1:59:eb:43:6b:03:f2:01:35:4f:42:b4:
fc:39:68:f9:59:d7:e1:ab:f4:1a:47:df:ec:ef:95:
23:34:21:0b:7b:eb:3d:f0:c5:18:93:ef:16:c2:7d:
8c:90:10:4f:51:c5:a8:52:e4:01:6c:63:01:cd:91:
76:59:2a:89:60:be:11:a2:c5:65:95:b7:cd:da:c1:
dc:79:3a:88:d0:96:ad:da:db:80:e0:41:89:9c:ec:
3f:27:5f:1f:bf:98:af:8c:63:95:6c:0f:5a:46:72:
b6:66:63:a5:73:00:29:2d:c1:93:63:ab:cb:56:69:
e2:a3:bb:ae:45:03:74:74:e9:40:4a:79:2c:39:54:
be:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B0:79:85:98:E1:30:8A:6E:29:70:8F:3E:7B:15:A4:25:D2:0A:D6
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/k7B5hZjhMIpuKXCPPnsVpCXSCtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:c6::/48
Signature Algorithm: sha256WithRSAEncryption
6b:a4:69:ac:e6:35:c8:6a:c7:4a:65:97:98:85:da:a0:5e:32:
c1:c3:a1:45:ff:fe:b0:ef:a7:00:59:9f:89:6d:c3:5b:3a:96:
e8:f8:bd:9d:fc:37:48:9d:6c:40:79:50:51:53:40:7d:c5:84:
c5:c3:30:58:5e:5f:06:13:02:41:ac:f7:18:70:ec:28:81:f9:
ef:f0:35:80:35:d5:08:dd:aa:ac:c5:6c:6d:1e:2d:b6:ce:ed:
68:11:49:1b:72:1a:0e:fa:60:17:5e:92:66:3c:d1:0f:3d:5a:
f0:73:e4:c6:c1:7b:da:22:b2:73:df:d1:05:0c:5f:94:94:44:
25:a9:38:61:29:33:28:d3:e8:2d:a3:44:3b:38:60:7f:2a:5b:
53:88:b9:4e:5f:3e:85:2a:bc:d7:93:b5:75:b1:6b:56:80:36:
80:71:ef:30:93:51:28:2a:ce:65:02:30:24:4e:eb:ab:3a:6f:
d6:fc:ec:29:72:b6:27:28:43:71:7f:82:82:a1:c4:31:15:86:
96:ad:e1:6c:40:bf:db:34:53:68:1b:67:30:05:27:af:62:d6:
23:0f:f4:aa:e1:d2:97:21:ee:d7:15:5c:73:da:9d:18:cc:cd:
ec:86:de:e2:78:a5:ed:da:18:87:98:d8:8e:5f:a8:b0:90:56:
a0:c5:4d:99
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ/J86eYskXnsioiOz0AgO1xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYwODAzMjMyNjU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5M2IwNzk4NTk4ZTEzMDhhNmUyOTcwOGYzZTdiMTVhNDI1ZDIwYWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9uQVX+ZEp8ZId561EWZrGOBrLCK
VdAdFLEXaSRBJDV/UXp9/ZPtPVbVb29yFlHm0Jgt2D7cnkpXwwlXutmcBmyzEvDd
YqjrHJ/Ae638j5ppBxfWiEmIfUlnzTI8OwON5NWiJCSpu9g/QFl5k41UIhTjHdal
ctppUOexWetDawPyATVPQrT8OWj5Wdfhq/QaR9/s75UjNCELe+s98MUYk+8Wwn2M
kBBPUcWoUuQBbGMBzZF2WSqJYL4RosVllbfN2sHceTqI0Jat2tuA4EGJnOw/J18f
v5ivjGOVbA9aRnK2ZmOlcwApLcGTY6vLVmnio7uuRQN0dOlASnksOVS+XwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJOweYWY4TCKbilwjz57FaQl0grWMB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvazdCNWhaamhNSXB1S1hDUFBuc1ZwQ1hTQ3RZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgaYAQDG
MA0GCSqGSIb3DQEBCwUAA4IBAQBrpGms5jXIasdKZZeYhdqgXjLBw6FF//6w76cA
WZ+JbcNbOpbo+L2d/DdInWxAeVBRU0B9xYTFwzBYXl8GEwJBrPcYcOwogfnv8DWA
NdUI3aqsxWxtHi22zu1oEUkbchoO+mAXXpJmPNEPPVrwc+TGwXvaIrJz39EFDF+U
lEQlqThhKTMo0+gto0Q7OGB/KltTiLlOXz6FKrzXk7V1sWtWgDaAce8wk1EoKs5l
AjAkTuurOm/W/OwpcrYnKENxf4KCocQxFYaWreFsQL/bNFNoG2cwBSevYtYjD/Sq
4dKXIe7XFVxz2p0YzM3sht7ieKXt2hiHmNiOX6iwkFagxU2Z
-----END CERTIFICATE-----
Generated at Wed Aug 12 17:11:32 2026 by rpki-client