Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/oSvjv1EgNJSN4Kxzg0novBqludw.roa
File: oSvjv1EgNJSN4Kxzg0novBqludw.roa (raw, json)
Hash identifier: oAFK/CnPQ3s1120iycYnlzjnfPBqYmdTyRj6+RgkaCM=
Subject key identifier: A1:2B:E3:BF:51:20:34:94:8D:E0:AC:73:83:49:E8:BC:1A:A5:B9:DC
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019FCD71354B5605C8F01459353D8E4C388C
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/oSvjv1EgNJSN4Kxzg0novBqludw.roa
Signing time: Tue 04 Aug 2026 15:42:56 +0000
ROA not before: Tue 04 Aug 2026 15:42:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219066
IP address blocks: 2a06:9801:f1e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cd:71:35:4b:56:05:c8:f0:14:59:35:3d:8e:4c:38:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Aug 4 15:42:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a12be3bf512034948de0ac738349e8bc1aa5b9dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b4:81:de:6e:1f:ac:d7:8d:95:9b:e9:14:2f:
44:68:69:d5:20:78:3e:25:e8:ed:16:d3:be:bb:d6:
29:69:66:3b:69:ff:63:81:e1:65:36:02:8e:18:a7:
9b:2a:e0:15:b0:27:93:2c:85:25:29:ee:c4:3c:b2:
f2:7d:41:5b:e0:6f:a4:ef:97:c5:ac:51:96:a8:20:
c9:fb:4c:0a:fa:7b:43:58:14:a1:04:f5:88:9e:27:
e6:3e:f0:6c:ac:51:45:6d:7f:1d:54:51:35:92:a8:
d0:f0:e0:8e:4d:01:95:04:89:b2:4e:18:94:f6:4b:
80:52:58:85:e0:3d:ee:2e:3c:f5:13:03:f9:0f:20:
a0:95:d7:e1:d7:d5:48:ab:e6:b2:ed:3d:a7:49:fd:
39:16:41:b6:d4:5b:64:5e:49:f7:71:3d:38:08:41:
1d:29:5e:10:2b:1c:da:54:f5:e4:7b:bc:4d:6c:f3:
27:c8:be:09:d3:48:42:99:47:17:b6:0b:db:ea:81:
d2:d9:27:d2:ae:a4:73:58:06:4e:83:6c:11:ca:7e:
39:e7:bd:a6:6e:91:84:ec:f2:47:bd:16:37:0f:1e:
e8:4f:1c:9a:40:01:2f:c7:c3:3d:2f:26:2f:36:dd:
11:2b:42:55:41:57:21:5e:ce:7e:92:1e:ca:38:06:
e0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:2B:E3:BF:51:20:34:94:8D:E0:AC:73:83:49:E8:BC:1A:A5:B9:DC
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/oSvjv1EgNJSN4Kxzg0novBqludw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:f1e::/48
Signature Algorithm: sha256WithRSAEncryption
ba:11:54:29:a2:fb:52:85:18:19:ff:cb:2f:e8:88:3a:67:3e:
76:c9:3e:ab:18:43:f9:00:be:88:48:09:f6:b9:d4:3e:09:42:
49:11:0b:67:e0:0b:48:bd:fc:fe:d1:c6:98:ed:3a:f0:40:00:
77:86:1d:fb:4e:de:15:ea:d9:f2:e6:42:eb:7b:ff:7b:1f:09:
45:c2:f3:83:f2:98:93:57:64:46:f6:3f:f0:52:08:c5:5e:da:
f1:27:ce:20:63:4d:bf:04:9c:89:67:d5:2d:ea:7d:2a:8b:82:
43:c5:2b:bc:8f:cc:05:2d:71:27:57:1e:38:cd:53:d1:d9:7f:
f7:b3:a9:1e:e8:65:83:8e:9f:d8:97:83:b5:29:4d:1c:30:8e:
d9:71:cb:d2:7d:6a:6c:01:9a:65:02:be:a1:b0:bf:93:6d:a3:
e9:0b:bc:62:c1:3e:76:67:26:fa:0a:41:5c:09:d2:fb:42:70:
b5:ac:e2:81:c0:23:1c:40:5d:e0:89:2b:27:30:92:6d:31:19:
6b:7a:da:a0:9d:ed:e0:1e:98:07:16:aa:d3:39:66:f0:3a:f1:
63:a7:e9:e1:55:db:2a:9e:47:23:48:d0:f6:43:ed:4a:21:97:
f3:23:c1:c1:c5:a8:07:d1:ef:29:e2:4f:4f:3d:31:c6:8a:bf:
ce:dc:62:66
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ/NcTVLVgXI8BRZNT2OTDiMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYwODA0MTU0MjU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMTJiZTNiZjUxMjAzNDk0OGRlMGFjNzM4MzQ5ZThiYzFhYTViOWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7SB3m4frNeNlZvpFC9EaGnVIHg+
JejtFtO+u9YpaWY7af9jgeFlNgKOGKebKuAVsCeTLIUlKe7EPLLyfUFb4G+k75fF
rFGWqCDJ+0wK+ntDWBShBPWInifmPvBsrFFFbX8dVFE1kqjQ8OCOTQGVBImyThiU
9kuAUliF4D3uLjz1EwP5DyCgldfh19VIq+ay7T2nSf05FkG21FtkXkn3cT04CEEd
KV4QKxzaVPXke7xNbPMnyL4J00hCmUcXtgvb6oHS2SfSrqRzWAZOg2wRyn45572m
bpGE7PJHvRY3Dx7oTxyaQAEvx8M9LyYvNt0RK0JVQVchXs5+kh7KOAbgYwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFKEr479RIDSUjeCsc4NJ6LwapbncMB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvb1N2anYxRWdOSlNONEt4emcwbm92QnFsdWR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgaYAQ8e
MA0GCSqGSIb3DQEBCwUAA4IBAQC6EVQpovtShRgZ/8sv6Ig6Zz52yT6rGEP5AL6I
SAn2udQ+CUJJEQtn4AtIvfz+0caY7TrwQAB3hh37Tt4V6tny5kLre/97HwlFwvOD
8piTV2RG9j/wUgjFXtrxJ84gY02/BJyJZ9Ut6n0qi4JDxSu8j8wFLXEnVx44zVPR
2X/3s6ke6GWDjp/Yl4O1KU0cMI7ZccvSfWpsAZplAr6hsL+TbaPpC7xiwT52Zyb6
CkFcCdL7QnC1rOKBwCMcQF3giSsnMJJtMRlretqgne3gHpgHFqrTOWbwOvFjp+nh
VdsqnkcjSND2Q+1KIZfzI8HBxagH0e8p4k9PPTHGir/O3GJm
-----END CERTIFICATE-----
Generated at Wed Aug 12 17:13:34 2026 by rpki-client