Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/5_tT-q3OyWNkO1FiUzERl-WVkZA.roa
File: 5_tT-q3OyWNkO1FiUzERl-WVkZA.roa (raw, json)
Hash identifier: yNBNxGAre7L8c/z/cFIGiskzcPpij5TqQs4wdoXYWlo=
Subject key identifier: E7:FB:53:FA:AD:CE:C9:63:64:3B:51:62:53:31:11:97:E5:95:91:90
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 0199A291B90C7D55F46A04623241D2E8E0FE
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/5_tT-q3OyWNkO1FiUzERl-WVkZA.roa
Signing time: Thu 02 Oct 2025 01:38:02 +0000
ROA not before: Thu 02 Oct 2025 01:38:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54148
IP address blocks: 2a0f:b240:500::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a2:91:b9:0c:7d:55:f4:6a:04:62:32:41:d2:e8:e0:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Oct 2 01:38:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7fb53faadcec963643b516253311197e5959190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d1:1d:e0:a2:ad:d7:f1:64:0a:4b:31:d1:dc:
c5:66:54:98:9e:31:34:51:44:e6:32:38:7d:d0:c5:
d9:6a:ed:47:4f:5b:b7:31:4f:c7:0e:b6:bd:1f:29:
94:94:98:f2:03:b3:62:cc:41:55:e3:11:af:64:26:
67:20:81:cf:c6:57:a3:b0:25:bc:63:d6:8e:5a:07:
ad:aa:58:e5:fe:68:cd:0b:21:87:91:09:ab:70:97:
88:97:73:81:1b:01:86:ce:0b:24:88:f2:87:72:93:
12:f4:8e:d1:1f:f9:cb:27:fe:b7:be:9d:af:c8:2b:
4e:37:cd:51:3c:73:f0:6b:13:b1:c8:58:18:69:f3:
1d:f2:6c:f1:22:ba:9e:1e:84:b5:90:e6:12:04:8b:
21:e2:d2:81:bd:55:a9:87:7c:b5:9b:da:ac:37:b7:
6b:b5:c5:27:a8:b0:3a:9b:2e:ed:6a:e2:cd:e4:13:
d5:f0:cf:2f:b7:42:f6:1d:62:d2:3c:fe:0c:b3:61:
7f:37:6e:35:d9:76:47:e4:1d:3d:1c:d5:e1:8e:c2:
d2:00:7f:a4:67:d4:bf:c8:13:b6:ca:95:1a:4d:8d:
c1:37:8e:6d:0b:1b:ac:32:62:53:95:11:91:e3:97:
b2:ff:2a:e7:ba:06:8e:ab:25:4e:4f:74:0e:27:37:
52:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:FB:53:FA:AD:CE:C9:63:64:3B:51:62:53:31:11:97:E5:95:91:90
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/5_tT-q3OyWNkO1FiUzERl-WVkZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:500::/40
Signature Algorithm: sha256WithRSAEncryption
8e:a9:a9:ba:a9:eb:30:ee:a5:21:6e:0c:dd:f8:e5:fe:b1:82:
c0:a4:ff:ab:4d:d3:6d:49:90:7e:fd:e0:f0:ff:26:d8:cb:48:
6a:0b:e2:6c:58:0e:bb:23:13:2b:b6:de:10:9a:88:9b:0f:3e:
e6:56:77:1b:43:af:7c:32:10:a4:00:8c:8e:b7:d7:e2:ff:08:
ca:a0:09:cf:77:df:8b:6b:e2:fe:52:ac:6a:91:89:eb:cb:ec:
ff:ec:cc:0f:4f:2b:af:c5:67:57:0d:03:aa:db:cb:d6:de:b9:
bb:8b:26:c8:e9:02:f6:fd:fd:19:08:84:9c:d7:fc:28:63:01:
31:b5:5c:22:b2:9b:e6:17:48:e7:e5:9f:94:4b:ac:36:5b:86:
34:d3:88:af:2a:f3:26:a8:fb:9b:3e:54:51:cb:29:d5:4b:40:
a6:da:2c:68:11:51:41:73:37:44:b9:37:cc:8f:da:c4:7c:90:
49:4d:72:7b:0e:a9:68:e0:15:1f:5b:1a:da:16:e4:0b:bf:49:
de:b5:c4:c1:2c:26:ec:83:79:60:14:d3:81:76:24:da:a1:ca:
67:57:34:7f:ef:c6:14:49:13:eb:18:5e:96:e6:0f:1e:67:ea:
be:5e:d8:20:ed:01:d9:0a:e3:7c:ce:a8:0e:23:fb:2c:78:3a:
5d:89:99:cb
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZmikbkMfVX0agRiMkHS6OD+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjUxMDAyMDEzODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlN2ZiNTNmYWFkY2VjOTYzNjQzYjUxNjI1MzMxMTE5N2U1OTU5MTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29Ed4KKt1/FkCksx0dzFZlSYnjE0
UUTmMjh90MXZau1HT1u3MU/HDra9HymUlJjyA7NizEFV4xGvZCZnIIHPxlejsCW8
Y9aOWgetqljl/mjNCyGHkQmrcJeIl3OBGwGGzgskiPKHcpMS9I7RH/nLJ/63vp2v
yCtON81RPHPwaxOxyFgYafMd8mzxIrqeHoS1kOYSBIsh4tKBvVWph3y1m9qsN7dr
tcUnqLA6my7tauLN5BPV8M8vt0L2HWLSPP4Ms2F/N2412XZH5B09HNXhjsLSAH+k
Z9S/yBO2ypUaTY3BN45tCxusMmJTlRGR45ey/yrnugaOqyVOT3QOJzdS+wIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFOf7U/qtzsljZDtRYlMxEZfllZGQMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvNV90VC1xM095V05rTzFGaVV6RVJsLVdWa1pBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg+yQAUw
DQYJKoZIhvcNAQELBQADggEBAI6pqbqp6zDupSFuDN345f6xgsCk/6tN021JkH79
4PD/JtjLSGoL4mxYDrsjEyu23hCaiJsPPuZWdxtDr3wyEKQAjI631+L/CMqgCc93
34tr4v5SrGqRievL7P/szA9PK6/FZ1cNA6rby9beubuLJsjpAvb9/RkIhJzX/Chj
ATG1XCKym+YXSOfln5RLrDZbhjTTiK8q8yao+5s+VFHLKdVLQKbaLGgRUUFzN0S5
N8yP2sR8kElNcnsOqWjgFR9bGtoW5Au/Sd61xMEsJuyDeWAU04F2JNqhymdXNH/v
xhRJE+sYXpbmDx5n6r5e2CDtAdkK43zOqA4j+yx4Ol2Jmcs=
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:53:12 2025 by rpki-client