Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/Bor0ZcK_4prq-g5lSB4Az7Vz3yc.roa
File: Bor0ZcK_4prq-g5lSB4Az7Vz3yc.roa (raw, json)
Hash identifier: GRK3reDKNN18ejebcmFWPGgeyNkWWUKXMnQ80x44KQU=
Subject key identifier: 06:8A:F4:65:C2:BF:E2:9A:EA:FA:0E:65:48:1E:00:CF:B5:73:DF:27
Certificate issuer: /CN=ebed98121a04d5aebcfbec2f238ba2d37dc8c5b3
Certificate serial: 019F6B4C3E63227D23588E3F7824263BFBA9
Authority key identifier: EB:ED:98:12:1A:04:D5:AE:BC:FB:EC:2F:23:8B:A2:D3:7D:C8:C5:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-2YEhoE1a68--wvI4ui033IxbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/Bor0ZcK_4prq-g5lSB4Az7Vz3yc.roa
Signing time: Thu 16 Jul 2026 14:19:46 +0000
ROA not before: Thu 16 Jul 2026 14:19:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205794
IP address blocks: 2001:678:12c4::/48 maxlen: 48
2001:678:12c8::/48 maxlen: 48
2001:678:12cc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/6-2YEhoE1a68--wvI4ui033IxbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/6-2YEhoE1a68--wvI4ui033IxbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6-2YEhoE1a68--wvI4ui033IxbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6b:4c:3e:63:22:7d:23:58:8e:3f:78:24:26:3b:fb:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebed98121a04d5aebcfbec2f238ba2d37dc8c5b3
Validity
Not Before: Jul 16 14:19:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=068af465c2bfe29aeafa0e65481e00cfb573df27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:03:2c:31:f4:37:e1:8d:69:fc:49:e7:0a:5f:
37:d8:6d:8a:4f:c7:fc:23:2b:1a:e3:2a:2b:b4:6f:
3b:37:66:fe:64:c8:75:06:ec:9d:a5:9b:cf:6d:6d:
bb:f8:19:41:64:2a:09:0e:2e:6d:c3:20:21:ae:04:
de:ba:24:77:a7:08:1e:6d:a6:b6:8f:4e:29:7d:10:
47:d8:80:72:17:3c:81:9d:ad:e0:f9:2a:c9:52:33:
af:89:12:f6:30:6a:a5:f1:32:f0:ba:d2:10:55:01:
cb:03:1f:af:48:ef:3c:43:9d:48:ac:f1:a8:7d:45:
79:57:62:c6:86:93:f3:95:85:98:2a:06:2a:9d:a6:
6d:b7:90:9d:7e:b8:09:12:4f:ac:31:a6:b1:d4:bb:
cd:62:e6:ee:37:e0:57:b5:b1:53:f6:d2:9f:b2:fa:
6d:8d:42:9a:68:c2:d2:5a:f9:64:66:f8:ae:88:21:
eb:61:bb:fc:08:e4:16:0c:13:de:25:aa:cb:56:b9:
9c:e8:27:11:fe:18:a1:f2:62:55:18:84:f0:b4:9b:
d0:26:e2:2c:7b:a6:e0:03:6a:19:3a:bc:b1:97:a8:
5f:29:da:39:8d:c6:78:11:b5:de:98:1a:80:51:d6:
9e:41:3c:4a:a3:28:d9:28:68:f2:29:03:cc:fd:fd:
b1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:8A:F4:65:C2:BF:E2:9A:EA:FA:0E:65:48:1E:00:CF:B5:73:DF:27
X509v3 Authority Key Identifier:
keyid:EB:ED:98:12:1A:04:D5:AE:BC:FB:EC:2F:23:8B:A2:D3:7D:C8:C5:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-2YEhoE1a68--wvI4ui033IxbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/Bor0ZcK_4prq-g5lSB4Az7Vz3yc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/6-2YEhoE1a68--wvI4ui033IxbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:12c4::/48
2001:678:12c8::/48
2001:678:12cc::/48
Signature Algorithm: sha256WithRSAEncryption
4c:9f:9b:19:29:60:b0:00:9d:1e:60:39:42:e6:5f:6d:49:84:
39:25:3b:af:e1:da:97:78:90:05:a9:82:ce:eb:23:c8:14:b8:
e3:1b:cb:19:df:7a:8d:cf:1d:6b:a0:ee:f5:af:98:27:0d:a7:
78:0a:7b:c5:0d:98:d9:6f:81:f5:6c:68:52:be:c3:86:0f:3e:
e8:65:09:e8:4d:9a:ef:da:3e:94:08:a4:ba:5b:a0:07:b7:54:
9f:be:99:b2:d4:0d:c7:8c:b9:37:d5:cf:e2:ba:02:78:8e:b7:
15:27:4a:bb:f9:d2:05:4f:f6:88:4f:50:5e:8c:bc:fe:b3:33:
66:36:09:de:6d:80:fb:9e:ab:17:f8:2b:9b:a6:ee:a5:d6:09:
fd:ef:21:48:95:3c:b0:16:e3:b3:d3:93:32:fb:33:bd:05:6f:
66:fa:66:be:d7:aa:7a:53:f2:7d:b8:12:f7:e9:50:4e:bd:7b:
8e:13:ba:9a:a4:b0:ed:8a:5a:ba:9d:93:b0:b2:9a:68:95:08:
09:c1:0a:57:23:b2:60:82:c7:ea:e7:86:5b:d5:b8:f6:69:dd:
9d:90:29:e9:1c:0c:5e:30:83:69:45:d3:32:07:aa:79:1d:36:
11:dd:8a:67:7c:38:93:0b:ca:c6:c6:17:9f:fb:9c:95:5f:68:
7e:bf:b4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:05:10 2026 by rpki-client