Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/0hsT1FGsKz-GP59CQFar7BdxsPE.roa
File: 0hsT1FGsKz-GP59CQFar7BdxsPE.roa (raw, json)
Hash identifier: Q5lHgchXpyt4Kc/NZeIxwEMfImfeA4O/HL/kPhnXnwI=
Subject key identifier: D2:1B:13:D4:51:AC:2B:3F:86:3F:9F:42:40:56:AB:EC:17:71:B0:F1
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 019DFBF1F85B7AF07DD414B73F089DC4F591
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/0hsT1FGsKz-GP59CQFar7BdxsPE.roa
Signing time: Wed 06 May 2026 06:20:32 +0000
ROA not before: Wed 06 May 2026 06:20:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399486
IP address blocks: 2a0f:b240:c::/48 maxlen: 48
2a0f:b240:20::/44 maxlen: 48
2a0f:b240:1100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:51:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fb:f1:f8:5b:7a:f0:7d:d4:14:b7:3f:08:9d:c4:f5:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: May 6 06:20:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d21b13d451ac2b3f863f9f424056abec1771b0f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:90:5e:f2:fe:06:2d:a7:10:f4:d5:48:c1:eb:
e7:9b:9a:2e:fa:31:44:fe:a1:d0:4d:5a:1f:48:5d:
9f:ce:d1:b2:d5:99:79:a2:76:61:7b:2e:81:c0:6f:
6f:8f:55:6f:98:66:a5:86:69:64:af:e0:5e:65:56:
21:52:d3:8c:fd:3c:de:ab:07:81:43:73:43:94:a1:
27:85:53:a6:04:b3:c8:42:84:ea:df:7b:dc:c7:41:
f8:c8:f6:72:5d:f9:3c:3c:21:08:50:06:df:3d:57:
cd:11:47:bf:f8:6d:49:77:f8:80:88:cf:9c:f1:4c:
42:06:52:0a:6c:8b:5c:1f:a8:f5:51:41:e0:34:b8:
6c:b1:a1:c0:f6:fd:0d:d8:87:be:51:2e:cd:2b:c0:
50:13:76:7c:d5:f6:71:8e:19:16:18:8c:28:a0:1f:
c8:58:47:3f:96:f8:df:46:58:e5:c9:52:8e:66:48:
7e:73:fa:52:2d:96:71:cc:d4:d7:64:af:5c:3c:29:
07:0e:e6:4f:c0:30:d8:e1:38:4d:78:86:f1:fa:ec:
1c:58:aa:5e:01:64:be:53:2d:37:02:c8:8e:53:24:
d4:a6:7e:8d:0f:b5:77:c1:6e:e9:79:e8:ee:33:22:
af:30:6b:15:64:62:d8:b2:90:d0:c1:77:8a:e9:cd:
fb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:1B:13:D4:51:AC:2B:3F:86:3F:9F:42:40:56:AB:EC:17:71:B0:F1
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/0hsT1FGsKz-GP59CQFar7BdxsPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:c::/48
2a0f:b240:20::/44
2a0f:b240:1100::/40
Signature Algorithm: sha256WithRSAEncryption
88:c0:07:4b:7c:cc:6e:8d:ee:c4:1e:3a:ac:0b:90:cf:6a:d7:
19:4d:1f:cd:a9:4f:82:3a:00:db:18:b2:99:2e:3d:c8:ce:15:
0d:3d:55:0c:0e:f4:0a:a0:f8:f3:ee:4c:ef:67:49:26:04:4a:
fd:58:53:2d:2f:3f:d1:42:29:89:45:c1:a6:7b:75:18:55:1a:
bc:05:51:95:a9:6e:a4:17:e7:1f:12:3f:93:f9:c6:cd:1b:21:
a4:47:40:76:8b:4e:0e:b0:1d:58:84:f3:89:bd:f6:e7:37:9f:
1a:45:8d:04:4d:ab:9f:a3:3e:5d:41:33:b1:27:52:d2:31:af:
2b:d7:4d:19:23:28:01:2a:17:76:76:67:0c:fc:d5:dd:f7:ce:
21:60:df:ae:f2:ef:46:06:59:f1:22:dc:38:8e:dd:b4:6b:fd:
1d:2b:ab:c1:b8:3f:8f:e0:49:ed:2d:b6:3e:ae:81:1c:74:4e:
67:e8:e2:27:36:54:2a:a4:7a:88:b5:31:2d:6c:55:5b:1b:97:
40:ff:c2:e6:c2:22:f7:ca:df:db:c3:21:e6:29:1d:b3:22:61:
a4:9b:ec:11:a3:68:d8:b9:65:46:15:2e:a1:d2:9a:f2:ec:f1:
f7:d0:31:2d:8b:b2:b1:d7:f5:8b:f3:08:13:31:bd:a2:e7:b1:
3c:c8:ea:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:42:53 2026 by rpki-client