Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/pEg67Wl-_glmAE40EL4fi3YfnZ0.roa
File: pEg67Wl-_glmAE40EL4fi3YfnZ0.roa (raw, json)
Hash identifier: Yya2ZQA2GRIANb6vBJRTK7ivWzRB8tzFEvqfDpFKYeE=
Subject key identifier: A4:48:3A:ED:69:7E:FE:09:66:00:4E:34:10:BE:1F:8B:76:1F:9D:9D
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A0244E0765470BCEEF5886C49E712EAC36
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/pEg67Wl-_glmAE40EL4fi3YfnZ0.roa
Signing time: Fri 21 Aug 2026 12:31:28 +0000
ROA not before: Fri 21 Aug 2026 12:31:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31898
IP address blocks: 2a06:9801::/48 maxlen: 48
2a06:9801:741::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:24:4e:07:65:47:0b:ce:ef:58:86:c4:9e:71:2e:ac:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Aug 21 12:31:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a4483aed697efe0966004e3410be1f8b761f9d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:92:da:7e:63:b1:d8:a0:61:05:2f:97:d1:a7:
ff:53:02:7d:0b:60:66:eb:b0:0f:96:40:99:6d:c3:
ab:33:77:e0:57:62:ad:5d:34:fe:31:3e:62:92:09:
c3:0b:9f:b7:b9:89:50:28:64:67:b4:14:5e:eb:d0:
1e:2d:f0:08:18:85:b5:f0:1a:f9:41:53:5a:11:51:
b9:cc:16:62:7f:ee:c9:2b:8d:b0:7f:74:ef:d3:4f:
4f:00:c6:cb:23:a3:3d:9a:74:2b:6c:ba:d9:b4:2a:
e6:ec:42:5f:39:74:0b:19:eb:ed:80:80:f9:f5:d9:
62:2b:f8:c2:77:22:c2:60:8c:d3:2c:e5:d9:e6:65:
59:03:ef:e6:6c:29:a7:93:33:23:62:aa:1a:3c:e5:
70:7e:6d:ef:6f:d9:83:a3:fc:02:a5:e1:f2:47:80:
8d:4f:e4:1d:8d:76:24:9f:80:6d:a4:9b:45:1c:23:
d8:e7:3e:1f:27:be:d2:f2:df:90:a5:c8:27:f2:a5:
78:bd:9a:8f:fe:3c:f0:c4:70:2d:4a:4a:b5:bb:8d:
3a:64:88:b4:69:ee:e8:fc:7c:af:5d:d4:b4:0d:54:
0a:45:de:7b:6b:12:e8:86:27:cb:76:89:a9:4e:13:
d1:16:be:4f:04:06:df:44:18:5a:d0:86:db:c4:de:
39:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:48:3A:ED:69:7E:FE:09:66:00:4E:34:10:BE:1F:8B:76:1F:9D:9D
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/pEg67Wl-_glmAE40EL4fi3YfnZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801::/48
2a06:9801:741::/48
Signature Algorithm: sha256WithRSAEncryption
70:f4:0c:69:1c:d7:a8:c4:2f:ac:ab:3b:51:f9:a1:86:ae:75:
8b:c0:2e:6a:0c:98:a3:6e:e7:96:19:ee:68:e7:30:a9:be:ca:
3a:30:86:67:90:9b:63:b0:98:e2:12:61:b5:b6:94:c6:c5:a1:
60:c7:dd:a0:84:2e:02:5b:c6:56:0e:30:3b:c6:67:82:9e:57:
82:16:ae:6b:b7:8f:29:0d:60:99:81:1d:a0:a7:a9:98:ca:56:
f7:56:a6:97:e9:71:90:5c:b7:58:8e:1f:b7:7b:72:9d:50:6e:
ea:24:e0:c4:3b:31:92:e5:de:83:5f:91:fd:72:fb:c5:12:72:
0b:e0:ec:c1:a1:05:17:96:57:eb:43:24:1c:8c:1a:8c:d8:11:
60:fe:1a:1e:82:a0:08:75:67:75:2e:c2:40:19:ec:ea:64:b8:
a1:69:20:e1:9c:93:3c:e9:01:b0:9f:25:aa:de:40:95:33:ab:
47:24:a7:a5:b3:c9:93:35:48:ff:bf:3f:6c:69:4d:d6:dd:6c:
0f:b7:a7:02:a7:b7:ed:a9:4f:54:7a:2e:c2:70:de:7f:22:6c:
52:de:ed:d0:b7:dc:c9:3a:06:82:7b:5b:0b:0e:03:30:d0:eb:
25:3a:a5:0e:16:be:5e:71:1b:95:b9:a8:e8:a2:2f:fa:c9:ba:
72:96:2e:b1
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaAkTgdlRwvO71iGxJ5xLqw2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYwODIxMTIzMTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDQ4M2FlZDY5N2VmZTA5NjYwMDRlMzQxMGJlMWY4Yjc2MWY5ZDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJLafmOx2KBhBS+X0af/UwJ9C2Bm
67APlkCZbcOrM3fgV2KtXTT+MT5ikgnDC5+3uYlQKGRntBRe69AeLfAIGIW18Br5
QVNaEVG5zBZif+7JK42wf3Tv009PAMbLI6M9mnQrbLrZtCrm7EJfOXQLGevtgID5
9dliK/jCdyLCYIzTLOXZ5mVZA+/mbCmnkzMjYqoaPOVwfm3vb9mDo/wCpeHyR4CN
T+QdjXYkn4BtpJtFHCPY5z4fJ77S8t+Qpcgn8qV4vZqP/jzwxHAtSkq1u406ZIi0
ae7o/HyvXdS0DVQKRd57axLohifLdompThPRFr5PBAbfRBha0IbbxN45iwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFKRIOu1pfv4JZgBONBC+H4t2H52dMB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvcEVnNjdXbC1fZ2xtQUU0MEVMNGZpM1lmblowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgaYAQAA
AwcAKgaYAQdBMA0GCSqGSIb3DQEBCwUAA4IBAQBw9AxpHNeoxC+sqztR+aGGrnWL
wC5qDJijbueWGe5o5zCpvso6MIZnkJtjsJjiEmG1tpTGxaFgx92ghC4CW8ZWDjA7
xmeCnleCFq5rt48pDWCZgR2gp6mYylb3VqaX6XGQXLdYjh+3e3KdUG7qJODEOzGS
5d6DX5H9cvvFEnIL4OzBoQUXllfrQyQcjBqM2BFg/hoegqAIdWd1LsJAGezqZLih
aSDhnJM86QGwnyWq3kCVM6tHJKels8mTNUj/vz9saU3W3WwPt6cCp7ftqU9Uei7C
cN5/ImxS3u3Qt9zJOgaCe1sLDgMw0OslOqUOFr5ecRuVuajooi/6ybpyli6x
-----END CERTIFICATE-----
Generated at Thu Aug 27 08:43:24 2026 by rpki-client