Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/6b6575-e662-49cd-9d33-2dc46cf19a90/1/boRhZVyNzTtQrhq6J1aYSk2GjKM.roa
File: boRhZVyNzTtQrhq6J1aYSk2GjKM.roa (raw, json)
Hash identifier: LIseartS47lRMk+dEHbSSZoRBqTh2IA2PDPDZVtqNv4=
Subject key identifier: 6E:84:61:65:5C:8D:CD:3B:50:AE:1A:BA:27:56:98:4A:4D:86:8C:A3
Certificate issuer: /CN=5e168932e992a5c7304e80f5f82907989ad8c0d7
Certificate serial: 01A0C0B5600BD7025EBD4856D94CC1433257
Authority key identifier: 5E:16:89:32:E9:92:A5:C7:30:4E:80:F5:F8:29:07:98:9A:D8:C0:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XhaJMumSpccwToD1-CkHmJrYwNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/6b6575-e662-49cd-9d33-2dc46cf19a90/1/boRhZVyNzTtQrhq6J1aYSk2GjKM.roa
Signing time: Sun 20 Sep 2026 21:25:07 +0000
ROA not before: Sun 20 Sep 2026 21:25:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218836
IP address blocks: 157.173.71.0/24 maxlen: 24
2001:678:1308::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/6b6575-e662-49cd-9d33-2dc46cf19a90/1/XhaJMumSpccwToD1-CkHmJrYwNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/6b6575-e662-49cd-9d33-2dc46cf19a90/1/XhaJMumSpccwToD1-CkHmJrYwNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XhaJMumSpccwToD1-CkHmJrYwNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:b5:60:0b:d7:02:5e:bd:48:56:d9:4c:c1:43:32:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e168932e992a5c7304e80f5f82907989ad8c0d7
Validity
Not Before: Sep 20 21:25:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e8461655c8dcd3b50ae1aba2756984a4d868ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e5:3a:b9:b9:b9:9f:47:08:fd:1d:5a:5a:36:
16:45:0c:67:f0:df:1c:3b:c0:96:9d:04:d1:8d:ae:
d1:41:ce:ef:48:8b:8a:95:57:52:9f:3d:47:d8:7f:
d2:83:00:a4:60:73:f5:3f:8d:28:b4:93:6c:01:02:
37:18:3a:ac:f8:21:1c:6f:5d:40:ff:dc:1c:aa:dd:
6f:20:f2:6c:fd:3c:52:9b:e0:84:5c:8a:27:96:6f:
0d:ee:23:5e:ec:64:f8:33:90:53:b4:18:e4:2c:89:
1a:a0:14:5e:a2:5f:de:51:c8:ec:f2:63:38:84:6f:
01:ec:d5:b4:80:ae:02:38:40:d5:60:d3:ba:46:01:
ea:c3:65:70:93:cc:de:5d:62:0f:cc:57:48:89:9e:
d1:61:ed:22:a0:a7:26:ed:3f:45:83:f8:c9:cb:8e:
33:b7:c5:87:d7:44:a5:23:aa:c2:29:c6:44:4f:68:
ef:fb:0f:e9:fe:0b:33:dd:39:81:24:49:89:7a:03:
36:d1:7a:cc:5b:e8:06:a2:d4:7f:de:d4:7a:33:c4:
77:d2:9f:bf:7a:0f:75:5d:99:d6:26:3f:91:73:9f:
25:c1:1b:77:d6:2d:5b:d2:51:e0:3b:e8:70:f9:66:
09:e6:99:6f:8c:24:44:39:d9:8e:b3:ff:28:a8:ba:
aa:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:84:61:65:5C:8D:CD:3B:50:AE:1A:BA:27:56:98:4A:4D:86:8C:A3
X509v3 Authority Key Identifier:
keyid:5E:16:89:32:E9:92:A5:C7:30:4E:80:F5:F8:29:07:98:9A:D8:C0:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XhaJMumSpccwToD1-CkHmJrYwNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6b6575-e662-49cd-9d33-2dc46cf19a90/1/boRhZVyNzTtQrhq6J1aYSk2GjKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6b6575-e662-49cd-9d33-2dc46cf19a90/1/XhaJMumSpccwToD1-CkHmJrYwNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.173.71.0/24
IPv6:
2001:678:1308::/48
Signature Algorithm: sha256WithRSAEncryption
46:5a:c8:30:f3:3b:3f:25:e2:ca:9e:ed:6b:4c:28:5b:bc:7c:
13:e5:e2:51:ca:4c:d4:4d:db:2b:d4:ca:0a:51:69:59:ce:79:
75:af:9d:b7:9b:21:0c:6f:56:37:66:20:3a:b3:0d:7e:a7:ba:
4f:a9:df:40:c4:ad:dc:d9:32:ea:f4:3f:89:bd:d5:8f:ee:7e:
54:88:0f:cd:0c:55:7f:bd:33:63:c6:0f:3d:c3:42:eb:00:35:
da:98:99:c9:e9:f5:34:f1:ba:5f:6b:6f:ba:7b:bc:d5:bc:3d:
38:16:84:fd:ed:e1:c9:73:d4:71:4b:2a:2e:d0:5a:c4:34:da:
bf:11:8c:74:4e:0e:2a:80:72:9e:bf:d6:5f:e3:aa:9e:be:c1:
cf:7e:d2:54:82:9d:aa:11:98:52:9b:26:29:c8:2a:49:9d:f7:
f2:66:e9:40:0e:f4:2e:3b:4b:df:14:6d:33:cc:1a:9f:3a:9c:
1e:f8:7a:a6:4e:25:62:6d:e7:ce:a7:55:68:e1:41:54:67:8c:
34:32:54:a7:b7:9d:a4:e2:59:4c:25:3e:f9:e9:80:94:f2:5a:
b6:cf:42:ad:a1:7a:c4:1e:7c:23:41:a3:77:75:12:e5:d5:00:
d8:f9:bd:bf:46:f4:fc:ab:fd:df:5c:cd:6c:f0:00:c7:09:5c:
bf:0e:22:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:19:32 2026 by rpki-client