Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/6u8Vh0e2BGJbgpMSnk8CeNakbYQ.roa
File: 6u8Vh0e2BGJbgpMSnk8CeNakbYQ.roa (raw, json)
Hash identifier: CxKdEuDbPNiGBYMdAcWcGSwLDteHFs/U9Ke9hYOntk8=
Subject key identifier: EA:EF:15:87:47:B6:04:62:5B:82:93:12:9E:4F:02:78:D6:A4:6D:84
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 0199EDAE7B790191B26171AE8339E6B5605B
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/6u8Vh0e2BGJbgpMSnk8CeNakbYQ.roa
Signing time: Thu 16 Oct 2025 15:40:59 +0000
ROA not before: Thu 16 Oct 2025 15:40:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204768
IP address blocks: 2a0f:b240:6a00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ed:ae:7b:79:01:91:b2:61:71:ae:83:39:e6:b5:60:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Oct 16 15:40:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eaef158747b604625b8293129e4f0278d6a46d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:04:04:dd:18:4f:c8:70:d7:86:9e:94:77:7b:
fe:c5:cd:f9:4d:1d:46:94:2a:07:fe:68:23:b5:4b:
46:60:af:04:62:d9:a5:d2:a2:7b:9d:bd:6f:20:ec:
29:d0:62:55:12:c8:f6:0b:8b:b5:15:e0:82:a1:ad:
b4:4e:a9:73:ee:22:cf:e4:ad:93:4f:e3:9b:ba:b1:
43:97:f2:9b:40:cb:98:39:3c:e5:91:53:54:bc:0c:
36:bc:70:b7:20:0f:5e:c9:08:fd:ba:8f:c9:70:26:
b5:3f:f4:43:13:14:62:9e:96:19:0e:2e:84:72:55:
46:14:73:8d:be:35:50:6c:10:cb:02:50:54:da:16:
bf:c9:e8:ea:e8:4b:2e:52:f1:4a:76:9a:59:88:d5:
5a:b2:49:da:b1:59:62:c8:1b:a5:8c:ee:fb:ca:aa:
a8:81:7f:b9:20:43:1d:58:d7:49:eb:4e:f7:cb:a7:
e1:a3:ef:b5:9c:80:3d:35:60:a2:83:ef:c0:41:23:
bc:5f:d2:85:b9:2e:4f:4d:3b:59:c4:0f:66:4d:56:
80:61:c0:35:5a:2e:0c:f5:14:35:63:99:b3:78:a5:
a9:0b:2f:2e:e8:6b:f3:f4:17:6e:11:74:e0:61:53:
8d:fc:53:0e:01:ad:b0:9d:7f:bf:cc:10:c5:b2:38:
6b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:EF:15:87:47:B6:04:62:5B:82:93:12:9E:4F:02:78:D6:A4:6D:84
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/6u8Vh0e2BGJbgpMSnk8CeNakbYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:6a00::/40
Signature Algorithm: sha256WithRSAEncryption
68:be:59:b1:3a:6a:2e:06:e4:d3:2f:1d:1d:7a:2b:ec:f9:95:
2c:00:6f:4a:ff:5d:93:c1:59:eb:64:96:56:88:2b:42:af:92:
f7:6f:8a:af:c9:00:76:1a:1b:d1:27:e8:cf:fb:58:a5:1e:73:
86:49:0e:b1:8f:f4:df:cf:42:7b:a1:29:99:55:fc:39:7e:e4:
79:1a:ec:78:e9:6b:26:41:3a:b9:a8:b0:66:76:a4:a9:b0:63:
eb:a3:ab:cc:4f:3e:97:49:96:3f:1e:b1:6a:a0:4b:29:f4:29:
4f:7c:b4:8a:b1:a2:46:1d:30:1a:33:85:ba:29:f9:c9:e4:79:
08:2e:20:83:5c:8a:8e:b8:d2:7a:f9:4c:39:ba:e3:29:64:2b:
ca:fd:68:d3:d3:d9:49:03:19:d3:b8:90:19:2f:8f:31:b9:25:
20:c9:98:26:74:57:4c:bf:49:b8:bc:b6:9d:8b:97:49:97:82:
0f:4c:1c:41:10:d5:8d:3d:a5:33:a2:a1:51:78:e7:aa:f3:08:
c4:76:94:fb:4c:a2:8b:a6:7f:e5:94:9d:31:8b:a3:97:24:46:
96:f3:c3:9e:46:0a:1f:cc:2e:35:29:a4:26:38:22:1d:20:91:
3a:a5:2d:84:62:fe:48:98:46:d9:16:e2:3a:e0:7e:63:b4:2e:
47:63:f6:d8
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZntrnt5AZGyYXGugznmtWBbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjUxMDE2MTU0MDU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYWVmMTU4NzQ3YjYwNDYyNWI4MjkzMTI5ZTRmMDI3OGQ2YTQ2ZDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gQE3RhPyHDXhp6Ud3v+xc35TR1G
lCoH/mgjtUtGYK8EYtml0qJ7nb1vIOwp0GJVEsj2C4u1FeCCoa20Tqlz7iLP5K2T
T+OburFDl/KbQMuYOTzlkVNUvAw2vHC3IA9eyQj9uo/JcCa1P/RDExRinpYZDi6E
clVGFHONvjVQbBDLAlBU2ha/yejq6EsuUvFKdppZiNVasknasVliyBuljO77yqqo
gX+5IEMdWNdJ6073y6fho++1nIA9NWCig+/AQSO8X9KFuS5PTTtZxA9mTVaAYcA1
Wi4M9RQ1Y5mzeKWpCy8u6Gvz9BduEXTgYVON/FMOAa2wnX+/zBDFsjhr8wIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFOrvFYdHtgRiW4KTEp5PAnjWpG2EMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvNnU4VmgwZTJCR0piZ3BNU25rOENlTmFrYllRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg+yQGow
DQYJKoZIhvcNAQELBQADggEBAGi+WbE6ai4G5NMvHR16K+z5lSwAb0r/XZPBWetk
llaIK0Kvkvdviq/JAHYaG9En6M/7WKUec4ZJDrGP9N/PQnuhKZlV/Dl+5Hka7Hjp
ayZBOrmosGZ2pKmwY+ujq8xPPpdJlj8esWqgSyn0KU98tIqxokYdMBozhbop+cnk
eQguIINcio640nr5TDm64ylkK8r9aNPT2UkDGdO4kBkvjzG5JSDJmCZ0V0y/Sbi8
tp2Ll0mXgg9MHEEQ1Y09pTOioVF456rzCMR2lPtMooumf+WUnTGLo5ckRpbzw55G
Ch/MLjUppCY4Ih0gkTqlLYRi/kiYRtkW4jrgfmO0Lkdj9tg=
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:58:15 2025 by rpki-client