Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/v8qlVEGDaWxdzpuMm1yngxOh_K0.roa
File: v8qlVEGDaWxdzpuMm1yngxOh_K0.roa (raw, json)
Hash identifier: Z+lJf0Aj+eu1W4pdKxN/hGBQShH09NVmHpQgVcI/4og=
Subject key identifier: BF:CA:A5:54:41:83:69:6C:5D:CE:9B:8C:9B:5C:A7:83:13:A1:FC:AD
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019FD7D9E875D8E39A23245B6EC63A0ECCED
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/v8qlVEGDaWxdzpuMm1yngxOh_K0.roa
Signing time: Thu 06 Aug 2026 16:13:30 +0000
ROA not before: Thu 06 Aug 2026 16:13:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219040
IP address blocks: 2a06:9801:f73::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d7:d9:e8:75:d8:e3:9a:23:24:5b:6e:c6:3a:0e:cc:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Aug 6 16:13:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bfcaa5544183696c5dce9b8c9b5ca78313a1fcad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:05:5a:0b:dd:a2:d3:7c:fe:86:d9:b4:49:cc:
13:5d:5c:03:8e:cb:88:03:e3:3a:5e:ce:c8:29:9a:
bc:b9:4a:2c:66:79:65:0d:9f:bc:92:bc:08:4a:e7:
10:d1:6b:c7:53:f2:20:bb:ee:57:c0:d6:b8:d8:de:
22:2d:70:29:43:ed:a7:18:39:21:fd:85:ea:71:4c:
6e:48:3e:fd:a1:92:38:e1:50:14:e8:2e:c3:24:71:
db:cf:8f:0d:bf:fb:97:37:ac:44:26:bd:50:d8:2d:
37:17:aa:fa:36:8d:c8:a5:a8:76:99:ec:a9:ca:a2:
aa:b7:3a:87:c5:90:a4:16:fd:d6:d8:13:ce:59:2b:
4d:3d:a8:92:48:28:3f:ff:21:10:08:a2:80:87:9e:
5a:d7:de:b9:c1:ac:b5:40:ed:79:6d:b8:d9:96:8e:
8a:5f:fb:73:38:24:ed:ec:84:ce:06:5a:ca:64:44:
c8:ed:da:67:55:14:c6:e7:42:60:e7:17:69:95:88:
e5:cf:d5:c9:53:87:2a:33:2d:f7:fd:e8:9f:5b:29:
78:3d:b2:fb:ad:47:10:56:44:8e:85:f1:ef:d9:ed:
d3:8e:b0:39:ee:d4:e7:8f:19:ec:ce:2f:0f:f5:dc:
57:f4:65:00:c2:c9:3e:ba:af:72:28:f5:82:ee:30:
6d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:CA:A5:54:41:83:69:6C:5D:CE:9B:8C:9B:5C:A7:83:13:A1:FC:AD
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/v8qlVEGDaWxdzpuMm1yngxOh_K0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:f73::/48
Signature Algorithm: sha256WithRSAEncryption
67:02:67:26:c8:69:55:3d:31:4f:e1:a3:b8:08:20:1a:d9:dd:
71:f4:fe:98:ad:ce:96:64:d1:ba:25:d9:53:3f:61:62:15:13:
9a:13:ac:4d:e4:db:d0:31:ba:c8:38:70:22:f8:57:dd:3b:ed:
ee:a9:bb:c9:6f:f0:18:ab:87:d6:0a:92:1b:57:9e:f6:75:e4:
45:89:d1:6c:51:89:ce:78:1d:2f:d3:d2:03:97:f1:c0:18:7a:
81:c5:24:37:b7:c1:1a:82:ae:d8:fc:aa:61:71:61:4b:10:73:
e8:d3:58:92:0f:f1:e3:8a:26:96:70:7b:3b:e9:6c:04:6b:aa:
c4:94:6f:42:2f:0a:71:0f:37:13:ee:9d:30:f2:1f:8a:cb:82:
7f:7f:be:22:44:dd:9a:cd:00:45:ea:04:37:8c:83:8f:73:fa:
ed:d1:53:1a:55:39:6e:82:e3:68:be:17:23:7f:37:e4:49:f9:
fa:3f:af:08:9c:4b:be:8d:1b:9b:06:ce:87:3c:79:27:43:aa:
db:56:87:e1:18:86:e6:5c:45:c3:f7:a7:0e:09:4f:51:9a:ef:
8b:0c:74:9c:63:b9:43:18:aa:e5:73:eb:38:c0:ad:af:f7:d1:
fe:07:70:4d:1d:c3:51:22:ee:a9:2c:4e:0f:6a:f5:b8:5c:b8:
21:cb:e2:c3
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ/X2eh12OOaIyRbbsY6DsztMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYwODA2MTYxMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZmNhYTU1NDQxODM2OTZjNWRjZTliOGM5YjVjYTc4MzEzYTFmY2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4AVaC92i03z+htm0ScwTXVwDjsuI
A+M6Xs7IKZq8uUosZnllDZ+8krwISucQ0WvHU/Igu+5XwNa42N4iLXApQ+2nGDkh
/YXqcUxuSD79oZI44VAU6C7DJHHbz48Nv/uXN6xEJr1Q2C03F6r6No3Ipah2meyp
yqKqtzqHxZCkFv3W2BPOWStNPaiSSCg//yEQCKKAh55a1965way1QO15bbjZlo6K
X/tzOCTt7ITOBlrKZETI7dpnVRTG50Jg5xdplYjlz9XJU4cqMy33/eifWyl4PbL7
rUcQVkSOhfHv2e3TjrA57tTnjxnszi8P9dxX9GUAwsk+uq9yKPWC7jBtMwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFL/KpVRBg2lsXc6bjJtcp4MTofytMB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvdjhxbFZFR0RhV3hkenB1TW0xeW5neE9oX0swLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgaYAQ9z
MA0GCSqGSIb3DQEBCwUAA4IBAQBnAmcmyGlVPTFP4aO4CCAa2d1x9P6Yrc6WZNG6
JdlTP2FiFROaE6xN5NvQMbrIOHAi+FfdO+3uqbvJb/AYq4fWCpIbV572deRFidFs
UYnOeB0v09IDl/HAGHqBxSQ3t8Eagq7Y/KphcWFLEHPo01iSD/HjiiaWcHs76WwE
a6rElG9CLwpxDzcT7p0w8h+Ky4J/f74iRN2azQBF6gQ3jIOPc/rt0VMaVTluguNo
vhcjfzfkSfn6P68InEu+jRubBs6HPHknQ6rbVofhGIbmXEXD96cOCU9Rmu+LDHSc
Y7lDGKrlc+s4wK2v99H+B3BNHcNRIu6pLE4PavW4XLghy+LD
-----END CERTIFICATE-----
Generated at Wed Aug 12 17:11:47 2026 by rpki-client