Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/pMcAPHTbOul5K3qR6raXDMl2LXE.roa
File: pMcAPHTbOul5K3qR6raXDMl2LXE.roa (raw, json)
Hash identifier: 5iU4ulip+mQloVLSruvDbv4LXogNRtKouQ1FGOhhVjY=
Subject key identifier: A4:C7:00:3C:74:DB:3A:E9:79:2B:7A:91:EA:B6:97:0C:C9:76:2D:71
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019F39A334A545BA00968A5304D82A97629D
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/pMcAPHTbOul5K3qR6raXDMl2LXE.roa
Signing time: Mon 06 Jul 2026 22:53:44 +0000
ROA not before: Mon 06 Jul 2026 22:53:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 46177
IP address blocks: 2a06:9801:2f0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:39:a3:34:a5:45:ba:00:96:8a:53:04:d8:2a:97:62:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jul 6 22:53:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a4c7003c74db3ae9792b7a91eab6970cc9762d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:20:8d:ab:93:95:0b:d3:75:3c:30:37:4f:0e:
e1:53:a2:0e:6c:4f:68:4a:d6:38:27:4b:f5:db:a1:
c5:c9:bd:e8:e7:20:a5:d1:bb:d4:1d:6a:bf:a4:00:
98:20:02:d3:37:d2:b4:73:9a:fb:06:cc:a2:26:e1:
da:ea:40:79:b4:ea:c4:c4:70:3b:75:25:cc:2b:6a:
92:32:91:88:a1:e4:14:c3:4c:45:d2:5d:7e:b0:92:
ec:ce:0a:9d:d4:f6:00:a1:8d:54:7b:db:6f:9a:d7:
88:bd:46:f4:e7:45:09:20:64:16:f0:4f:fb:eb:c6:
b8:a1:ab:78:a9:8c:04:98:77:a6:a1:ee:1c:0c:14:
33:8a:94:79:6b:4c:64:a4:ca:5e:49:43:67:70:71:
34:62:aa:a8:3a:c5:22:2c:6b:e9:86:85:8c:6a:e8:
d7:4f:b9:a1:05:be:e5:5d:e4:c9:68:0f:6a:5b:70:
a0:a5:2c:da:c1:9b:e1:56:b4:df:0d:71:c0:db:56:
9c:20:e8:50:d2:5e:f3:97:f7:fb:f5:f9:b2:70:49:
f6:40:35:c8:72:7a:81:c6:9a:74:11:a9:5a:c2:0d:
2e:0f:af:2f:09:ab:07:94:8b:05:20:fc:30:8a:4f:
81:ad:4f:67:95:ef:fd:bc:13:9e:0c:0c:bc:bc:95:
98:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C7:00:3C:74:DB:3A:E9:79:2B:7A:91:EA:B6:97:0C:C9:76:2D:71
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/pMcAPHTbOul5K3qR6raXDMl2LXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:2f0::/48
Signature Algorithm: sha256WithRSAEncryption
67:6e:53:57:c2:d5:2f:a1:06:a6:38:46:ed:6a:ed:80:aa:c4:
67:2d:58:81:65:10:22:dc:cb:b3:3c:33:85:a6:4c:b5:20:52:
7e:74:3e:38:3b:52:10:3c:a4:6b:76:57:33:69:3a:f4:21:ed:
2b:75:70:1a:69:1c:94:25:96:6c:1e:62:11:ed:84:a1:fc:52:
3e:88:ea:9f:84:92:c5:b2:5e:63:0e:ce:1f:7c:64:cc:58:15:
8a:45:c3:74:91:bf:03:59:2a:bd:e3:3f:e4:31:36:1f:2d:d8:
9b:97:54:fd:cd:1b:18:3e:d5:ff:e2:12:be:4e:08:1a:fe:75:
57:62:8f:45:7d:75:f5:84:9d:01:5b:b9:d1:cf:b0:67:ad:62:
cd:02:ab:86:44:77:94:a7:02:de:6c:47:31:e4:9c:a9:0e:09:
d2:b9:5f:27:61:ec:aa:57:10:cd:64:62:05:e7:f3:d0:e0:8a:
25:4c:5f:8d:7c:a6:5b:33:8a:b8:ec:f7:9a:3d:40:1f:c7:e4:
cc:20:8c:ff:44:04:b1:ab:35:9c:05:cf:39:85:b4:27:a1:bb:
94:cc:8b:2d:f1:72:0d:2b:bb:18:e8:1d:1e:e0:9e:73:bd:23:
1a:fb:1a:60:91:a7:15:cf:19:aa:14:25:8e:30:ca:9e:21:fb:
00:a7:88:d6
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ85ozSlRboAlopTBNgql2KdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYwNzA2MjI1MzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNGM3MDAzYzc0ZGIzYWU5NzkyYjdhOTFlYWI2OTcwY2M5NzYyZDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiCNq5OVC9N1PDA3Tw7hU6IObE9o
StY4J0v126HFyb3o5yCl0bvUHWq/pACYIALTN9K0c5r7BsyiJuHa6kB5tOrExHA7
dSXMK2qSMpGIoeQUw0xF0l1+sJLszgqd1PYAoY1Ue9tvmteIvUb050UJIGQW8E/7
68a4oat4qYwEmHemoe4cDBQzipR5a0xkpMpeSUNncHE0YqqoOsUiLGvphoWMaujX
T7mhBb7lXeTJaA9qW3CgpSzawZvhVrTfDXHA21acIOhQ0l7zl/f79fmycEn2QDXI
cnqBxpp0Ealawg0uD68vCasHlIsFIPwwik+BrU9nle/9vBOeDAy8vJWYnQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFKTHADx02zrpeSt6keq2lwzJdi1xMB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvcE1jQVBIVGJPdWw1SzNxUjZyYVhETWwyTFhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgaYAQLw
MA0GCSqGSIb3DQEBCwUAA4IBAQBnblNXwtUvoQamOEbtau2AqsRnLViBZRAi3Muz
PDOFpky1IFJ+dD44O1IQPKRrdlczaTr0Ie0rdXAaaRyUJZZsHmIR7YSh/FI+iOqf
hJLFsl5jDs4ffGTMWBWKRcN0kb8DWSq94z/kMTYfLdibl1T9zRsYPtX/4hK+Tgga
/nVXYo9FfXX1hJ0BW7nRz7BnrWLNAquGRHeUpwLebEcx5JypDgnSuV8nYeyqVxDN
ZGIF5/PQ4IolTF+NfKZbM4q47PeaPUAfx+TMIIz/RASxqzWcBc85hbQnobuUzIst
8XINK7sY6B0e4J5zvSMa+xpgkacVzxmqFCWOMMqeIfsAp4jW
-----END CERTIFICATE-----
Generated at Tue Jul 21 23:09:12 2026 by rpki-client