Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/rBBWLVQaTyLDgRObWF7Apzd0JME.roa
File: rBBWLVQaTyLDgRObWF7Apzd0JME.roa (raw, json)
Hash identifier: irLbAV9KmOevV0rUQ0UCuT3SL+pg9PUajISygsVNPr4=
Subject key identifier: AC:10:56:2D:54:1A:4F:22:C3:81:13:9B:58:5E:C0:A7:37:74:24:C1
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019EFC4DC225A8BA3B7CF7756379C6D94804
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/rBBWLVQaTyLDgRObWF7Apzd0JME.roa
Signing time: Thu 25 Jun 2026 01:03:34 +0000
ROA not before: Thu 25 Jun 2026 01:03:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214340
IP address blocks: 2a06:9801:7d7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 13:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fc:4d:c2:25:a8:ba:3b:7c:f7:75:63:79:c6:d9:48:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Jun 25 01:03:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ac10562d541a4f22c381139b585ec0a7377424c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d5:45:6a:62:ec:c2:18:02:10:8d:0e:b5:dd:
50:6f:fe:46:69:4b:c1:3b:de:9b:38:d9:0c:fa:ef:
d1:39:1a:d6:bc:79:96:43:52:50:71:95:ca:03:c3:
de:11:bc:f7:a8:4f:0a:e3:07:e6:dc:a6:53:e3:f2:
62:b7:0a:e5:4f:4a:25:6d:f4:c0:d3:a9:2f:e1:3a:
5b:57:93:67:28:03:65:95:8c:25:52:68:ff:99:10:
01:c8:a9:e2:c9:27:9c:34:94:2f:7a:cc:ef:d6:59:
38:be:71:da:31:bc:44:5e:59:53:87:bb:6e:e5:8a:
e2:7c:4c:2e:8d:13:92:75:75:ad:01:18:22:ff:a7:
de:db:35:03:ec:f7:da:be:53:e7:c6:e5:9c:3a:e6:
a1:33:34:65:5d:f8:3d:69:10:f4:39:48:77:2a:46:
5b:3c:b7:2c:7f:bf:26:77:0a:53:03:d9:61:f2:75:
81:59:b6:95:b4:0f:a3:dc:7a:05:28:87:dd:71:5c:
0f:c3:40:c9:d8:49:39:ab:31:3b:ef:98:07:94:87:
17:72:54:75:de:d4:63:a1:1c:1b:89:10:f4:b9:ef:
17:b0:e1:82:89:a9:11:db:d3:71:d6:a7:07:5f:11:
a1:54:ac:aa:60:7c:c5:53:e6:26:ee:f8:a1:c8:4d:
72:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:10:56:2D:54:1A:4F:22:C3:81:13:9B:58:5E:C0:A7:37:74:24:C1
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/rBBWLVQaTyLDgRObWF7Apzd0JME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:7d7::/48
Signature Algorithm: sha256WithRSAEncryption
44:5b:9a:9d:57:a9:5f:49:e3:51:5d:53:80:07:24:06:61:b5:
50:14:d8:78:a3:30:30:da:b3:dc:ff:ad:1c:c6:67:69:15:33:
77:66:1c:58:67:d1:65:30:6f:f9:f8:b1:21:f5:65:c8:67:37:
c9:23:16:11:15:a0:bd:fa:60:2e:57:cc:05:b9:62:ef:66:bf:
61:36:c8:5b:86:ab:e6:de:0b:d7:e4:65:e0:f3:ef:aa:74:5e:
c5:ef:b8:ec:96:c0:30:25:0b:7f:7a:4c:9b:af:56:80:e3:18:
7f:22:ec:c0:a0:29:4e:bd:fd:79:d2:04:86:58:0b:3f:32:f2:
c0:de:02:82:05:d1:72:4c:4c:32:40:d4:d7:1f:97:7b:66:48:
9c:aa:9f:f5:19:f9:67:0a:24:aa:fb:a8:48:08:65:be:8b:dc:
cd:39:ee:d0:fc:34:94:54:db:7c:0b:2f:59:1f:4f:58:56:a0:
0c:12:88:ef:e5:bc:d2:da:a9:66:c0:94:f6:f4:ec:59:fc:67:
cb:c3:88:42:de:6c:40:80:e0:fa:58:3f:73:bd:2d:a0:cc:91:
8f:1a:2f:04:96:7a:a0:a5:8e:17:42:86:3e:b0:19:49:31:06:
48:38:f4:43:50:f9:8a:4b:30:71:c4:43:e2:07:3f:c7:18:4f:
b8:9c:a3:77
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ78TcIlqLo7fPd1Y3nG2UgEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYwNjI1MDEwMzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzEwNTYyZDU0MWE0ZjIyYzM4MTEzOWI1ODVlYzBhNzM3NzQyNGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dVFamLswhgCEI0Otd1Qb/5GaUvB
O96bONkM+u/RORrWvHmWQ1JQcZXKA8PeEbz3qE8K4wfm3KZT4/JitwrlT0olbfTA
06kv4TpbV5NnKANllYwlUmj/mRAByKniySecNJQveszv1lk4vnHaMbxEXllTh7tu
5YrifEwujROSdXWtARgi/6fe2zUD7PfavlPnxuWcOuahMzRlXfg9aRD0OUh3KkZb
PLcsf78mdwpTA9lh8nWBWbaVtA+j3HoFKIfdcVwPw0DJ2Ek5qzE775gHlIcXclR1
3tRjoRwbiRD0ue8XsOGCiakR29Nx1qcHXxGhVKyqYHzFU+Ym7vihyE1ymQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFKwQVi1UGk8iw4ETm1hewKc3dCTBMB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvckJCV0xWUWFUeUxEZ1JPYldGN0FwemQwSk1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgaYAQfX
MA0GCSqGSIb3DQEBCwUAA4IBAQBEW5qdV6lfSeNRXVOAByQGYbVQFNh4ozAw2rPc
/60cxmdpFTN3ZhxYZ9FlMG/5+LEh9WXIZzfJIxYRFaC9+mAuV8wFuWLvZr9hNshb
hqvm3gvX5GXg8++qdF7F77jslsAwJQt/ekybr1aA4xh/IuzAoClOvf150gSGWAs/
MvLA3gKCBdFyTEwyQNTXH5d7Zkicqp/1GflnCiSq+6hICGW+i9zNOe7Q/DSUVNt8
Cy9ZH09YVqAMEojv5bzS2qlmwJT29OxZ/GfLw4hC3mxAgOD6WD9zvS2gzJGPGi8E
lnqgpY4XQoY+sBlJMQZIOPRDUPmKSzBxxEPiBz/HGE+4nKN3
-----END CERTIFICATE-----
Generated at Sat Jun 27 21:31:13 2026 by rpki-client