Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/k8jqpix47NQLrt57K2-_UvgS7H8.roa
File: k8jqpix47NQLrt57K2-_UvgS7H8.roa (raw, json)
Hash identifier: L+tLir5wVW1MXqfFSXB54zZ0zsXsQ+VM3t+JPYLwZkM=
Subject key identifier: 93:C8:EA:A6:2C:78:EC:D4:0B:AE:DE:7B:2B:6F:BF:52:F8:12:EC:7F
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A0CF09D91F1D7D4523CE22D0DD47072039
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/k8jqpix47NQLrt57K2-_UvgS7H8.roa
Signing time: Wed 23 Sep 2026 16:12:04 +0000
ROA not before: Wed 23 Sep 2026 16:12:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218593
IP address blocks: 2a06:9801:156b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:09:d9:1f:1d:7d:45:23:ce:22:d0:dd:47:07:20:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Sep 23 16:12:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=93c8eaa62c78ecd40baede7b2b6fbf52f812ec7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:58:8b:97:a3:d5:b7:ef:c6:f7:92:45:7e:be:
5a:c0:24:23:17:ef:29:01:b4:00:56:b3:7d:92:9e:
ac:83:5a:2e:63:76:a6:09:33:85:8e:06:39:00:cd:
60:ba:f6:21:5e:81:de:26:c3:73:09:3f:51:3f:2e:
31:af:5c:f0:1a:9f:89:31:ec:d7:3f:25:ff:ec:da:
b0:04:51:5d:d3:f4:13:c3:e0:00:b5:6e:37:09:ba:
3d:df:ce:9f:37:c2:a3:e9:65:20:7a:4e:ee:d8:71:
25:ba:59:4b:2f:35:63:b8:b1:31:91:f1:07:61:22:
f1:b4:ea:35:56:b5:1f:fc:5d:66:6e:a8:5d:ce:e9:
ad:21:73:78:34:8d:4f:17:b7:bd:01:87:e2:ce:4e:
fe:fc:0d:17:fd:21:4e:68:81:ec:1a:fb:ed:b9:c1:
0e:3f:f3:1c:15:e5:9e:65:20:17:2a:4e:98:81:44:
5b:f9:17:57:ae:b8:c8:0b:a0:42:df:af:57:7c:28:
a6:0b:e2:39:d3:de:dd:cb:21:af:64:82:ef:b8:88:
b4:65:cc:53:b4:56:47:68:1f:10:70:3e:36:f4:2c:
95:b0:4c:77:88:01:0e:b1:d8:9c:40:c5:5c:58:d5:
63:c9:62:a3:2e:0f:0e:d1:9e:be:45:a7:7a:90:85:
17:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C8:EA:A6:2C:78:EC:D4:0B:AE:DE:7B:2B:6F:BF:52:F8:12:EC:7F
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/k8jqpix47NQLrt57K2-_UvgS7H8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:156b::/48
Signature Algorithm: sha256WithRSAEncryption
66:fb:8d:51:d4:56:b0:2e:eb:21:51:6e:a1:ba:a0:83:06:63:
db:e2:7a:09:05:4e:ac:1e:b9:fc:e0:44:6c:50:ec:57:49:85:
50:72:ca:03:fd:5c:f2:d7:9f:18:9d:66:ea:aa:24:10:e9:e4:
0c:fe:5d:47:65:77:16:85:b8:f0:d6:7a:8b:07:7d:cf:db:ab:
e7:c4:ed:07:cd:9c:67:85:5f:28:0d:ee:8c:4d:31:44:8b:c3:
44:79:02:6c:ce:2e:ed:05:63:f6:13:5c:fc:6b:93:35:e7:65:
48:c3:47:e6:1f:0c:aa:9d:e4:d5:d0:eb:3c:e1:5e:cc:2e:7e:
9a:43:ce:9c:33:9f:21:e2:10:7c:a5:32:11:49:e9:73:2d:98:
b4:69:40:5c:7b:14:f6:e5:c1:0c:f5:b0:cb:77:cb:32:c3:2d:
f6:bf:4a:8e:de:79:99:5d:73:16:30:c0:15:77:57:f8:1b:65:
29:fd:e0:7d:8f:da:86:30:98:78:66:3b:ad:37:9e:18:e9:f8:
07:f7:3d:bd:f3:59:a0:14:72:58:40:85:94:4c:5b:3b:88:4c:
bc:01:b6:6e:3a:b2:22:2d:9f:f1:28:7d:60:8e:e7:ef:b9:6b:
0f:5f:ee:ff:5a:c9:d9:d0:d8:d9:98:08:36:10:bf:94:59:27:
67:5c:79:91
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaDPCdkfHX1FI84i0N1HByA5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYwOTIzMTYxMjA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5M2M4ZWFhNjJjNzhlY2Q0MGJhZWRlN2IyYjZmYmY1MmY4MTJlYzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFiLl6PVt+/G95JFfr5awCQjF+8p
AbQAVrN9kp6sg1ouY3amCTOFjgY5AM1guvYhXoHeJsNzCT9RPy4xr1zwGp+JMezX
PyX/7NqwBFFd0/QTw+AAtW43Cbo9386fN8Kj6WUgek7u2HElullLLzVjuLExkfEH
YSLxtOo1VrUf/F1mbqhdzumtIXN4NI1PF7e9AYfizk7+/A0X/SFOaIHsGvvtucEO
P/McFeWeZSAXKk6YgURb+RdXrrjIC6BC369XfCimC+I5097dyyGvZILvuIi0ZcxT
tFZHaB8QcD429CyVsEx3iAEOsdicQMVcWNVjyWKjLg8O0Z6+Rad6kIUX1QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJPI6qYseOzUC67eeytvv1L4Eux/MB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvazhqcXBpeDQ3TlFMcnQ1N0syLV9VdmdTN0g4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgaYARVr
MA0GCSqGSIb3DQEBCwUAA4IBAQBm+41R1FawLushUW6huqCDBmPb4noJBU6sHrn8
4ERsUOxXSYVQcsoD/Vzy158YnWbqqiQQ6eQM/l1HZXcWhbjw1nqLB33P26vnxO0H
zZxnhV8oDe6MTTFEi8NEeQJszi7tBWP2E1z8a5M152VIw0fmHwyqneTV0Os84V7M
Ln6aQ86cM58h4hB8pTIRSelzLZi0aUBcexT25cEM9bDLd8sywy32v0qO3nmZXXMW
MMAVd1f4G2Up/eB9j9qGMJh4ZjutN54Y6fgH9z2981mgFHJYQIWUTFs7iEy8AbZu
OrIiLZ/xKH1gjufvuWsPX+7/WsnZ0NjZmAg2EL+UWSdnXHmR
-----END CERTIFICATE-----
Generated at Tue Sep 29 00:55:33 2026 by rpki-client