Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/z4zBq1V2Ckejc-yO8hVFkZ64_To.roa
File: z4zBq1V2Ckejc-yO8hVFkZ64_To.roa (raw, json)
Hash identifier: X3JS+M3xQXmsU4z3pBZg7c7BN7G1k8BQEtZiAhm5XSM=
Subject key identifier: CF:8C:C1:AB:55:76:0A:47:A3:73:EC:8E:F2:15:45:91:9E:B8:FD:3A
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 01A10344EC7CD76E09D699EF5795B06D0532
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/z4zBq1V2Ckejc-yO8hVFkZ64_To.roa
Signing time: Sat 03 Oct 2026 19:36:50 +0000
ROA not before: Sat 03 Oct 2026 19:36:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213796
IP address blocks: 2a06:9801:1a00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 05:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:44:ec:7c:d7:6e:09:d6:99:ef:57:95:b0:6d:05:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Oct 3 19:36:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf8cc1ab55760a47a373ec8ef21545919eb8fd3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f5:65:d9:53:80:57:48:68:5f:f5:6a:da:37:
e8:82:e9:ea:90:d8:62:f3:13:ef:97:ac:49:e7:6c:
45:f7:a1:32:32:d0:1f:e8:93:fa:10:1d:bc:66:9b:
3c:7d:f9:12:34:a9:1b:35:65:23:6a:fe:f5:02:c1:
c8:98:78:b3:6a:9d:fb:f9:5c:e7:c9:c6:d7:44:20:
4b:cf:29:20:e5:24:3c:ee:db:0c:92:a1:93:bc:c0:
c6:0c:3c:0c:62:ab:18:88:dc:56:89:3f:0c:01:64:
d5:60:d0:dc:0a:4e:da:ec:fd:77:66:92:ea:fa:f7:
57:4a:70:c3:c0:ee:d7:dc:5e:dc:2c:b5:42:04:c4:
38:7f:23:15:3f:ee:e4:cc:c7:ee:70:2e:ed:a5:f8:
8f:d5:df:89:7f:9e:17:ec:d2:9b:2c:b0:c0:8b:27:
53:5a:7d:fb:ef:f7:bf:12:d9:73:e0:fa:99:bc:69:
88:77:bc:17:4b:83:6c:3a:b7:c3:ff:9e:16:b2:3a:
88:2c:fd:8d:4e:31:76:bd:ef:44:f1:7f:20:53:68:
60:01:be:d5:c5:62:4f:e3:6b:de:35:87:a7:49:32:
33:91:66:f4:3a:1f:c0:7e:e4:e1:5a:38:12:85:31:
d2:44:a2:f4:68:47:57:76:0c:7b:c9:5c:6c:0f:0a:
9c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:8C:C1:AB:55:76:0A:47:A3:73:EC:8E:F2:15:45:91:9E:B8:FD:3A
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/z4zBq1V2Ckejc-yO8hVFkZ64_To.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:1a00::/40
Signature Algorithm: sha256WithRSAEncryption
6b:49:e3:d1:ed:bd:e8:6e:11:f2:b7:48:49:2c:f6:0f:f3:ee:
77:fc:15:65:9a:17:69:7e:c0:fc:50:61:2a:a1:f5:bb:9d:60:
15:5b:9b:bb:4b:f9:2f:c7:7f:42:dc:ed:2a:a2:79:13:ab:32:
64:a8:5e:9b:82:d5:3d:a6:e5:19:92:41:bf:1d:90:2b:8b:ff:
9e:ef:de:51:c3:70:ef:67:96:aa:91:b4:a9:3e:bc:30:41:1d:
cd:dd:b2:76:fb:ca:32:d1:d2:7e:f1:ef:d5:14:22:e0:f8:05:
05:66:e0:cd:12:16:63:40:d9:7b:2b:32:71:cb:f2:1d:bd:63:
3b:e6:dc:4e:c7:e0:77:98:fb:af:c0:68:b7:e6:c2:31:85:0f:
9f:25:f2:6c:16:ed:f4:4f:1f:82:30:4e:ff:a5:c9:6f:31:44:
d8:db:2d:10:13:8d:46:16:5e:ab:51:a5:e4:fd:da:3f:24:77:
a6:f4:4b:ec:bd:e1:6c:43:fe:ba:c5:f1:f0:d8:19:8b:65:3a:
9c:8e:d8:7d:3f:b1:b5:9a:4f:3d:29:e3:95:00:5f:89:3a:9f:
f7:ee:05:1c:24:92:d1:4b:02:38:83:fe:f6:a6:72:a8:2c:66:
32:b2:43:1a:04:83:79:58:a7:e2:b1:49:6b:8c:d6:e1:d0:0d:
b2:85:20:13
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAaEDROx8124J1pnvV5WwbQUyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZDI0MjQxMjNlZDA3NzI1MzMwYmY4MTc5NDRmZDI3NmI3
Y2EzNmIwHhcNMjYxMDAzMTkzNjUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjhjYzFhYjU1NzYwYTQ3YTM3M2VjOGVmMjE1NDU5MTllYjhmZDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/Vl2VOAV0hoX/Vq2jfogunqkNhi
8xPvl6xJ52xF96EyMtAf6JP6EB28Zps8ffkSNKkbNWUjav71AsHImHizap37+Vzn
ycbXRCBLzykg5SQ87tsMkqGTvMDGDDwMYqsYiNxWiT8MAWTVYNDcCk7a7P13ZpLq
+vdXSnDDwO7X3F7cLLVCBMQ4fyMVP+7kzMfucC7tpfiP1d+Jf54X7NKbLLDAiydT
Wn377/e/Etlz4PqZvGmId7wXS4NsOrfD/54WsjqILP2NTjF2ve9E8X8gU2hgAb7V
xWJP42veNYenSTIzkWb0Oh/AfuThWjgShTHSRKL0aEdXdgx7yVxsDwqcPwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFM+MwatVdgpHo3PsjvIVRZGeuP06MB8GA1UdIwQY
MBaAFDHSQkEj7QdyUzC/gXlE/SdrfKNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEt
ZWQ4Y2ZhZjFiODFmLzEvejR6QnExVjJDa2VqYy15TzhoVkZrWjY0X1RvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xYTZiMTctZTNmZS00YzZkLWI4YzEtZWQ4Y2ZhZjFiODFm
LzEvTWRKQ1FTUHRCM0pUTUwtQmVVVDlKMnQ4bzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgaYARow
DQYJKoZIhvcNAQELBQADggEBAGtJ49HtvehuEfK3SEks9g/z7nf8FWWaF2l+wPxQ
YSqh9budYBVbm7tL+S/Hf0Lc7SqieROrMmSoXpuC1T2m5RmSQb8dkCuL/57v3lHD
cO9nlqqRtKk+vDBBHc3dsnb7yjLR0n7x79UUIuD4BQVm4M0SFmNA2XsrMnHL8h29
Yzvm3E7H4HeY+6/AaLfmwjGFD58l8mwW7fRPH4IwTv+lyW8xRNjbLRATjUYWXqtR
peT92j8kd6b0S+y94WxD/rrF8fDYGYtlOpyO2H0/sbWaTz0p45UAX4k6n/fuBRwk
ktFLAjiD/vamcqgsZjKyQxoEg3lYp+KxSWuM1uHQDbKFIBM=
-----END CERTIFICATE-----
Generated at Sun Oct 18 15:19:46 2026 by rpki-client