Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/7xT-V2AfJ7cOEF-PLphwU7XPcF8.roa
File: 7xT-V2AfJ7cOEF-PLphwU7XPcF8.roa (raw, json)
Hash identifier: GxKtYKMpCX488B9i4qJSbSRlCLZBdKpoVEcbLS88GPw=
Subject key identifier: EF:14:FE:57:60:1F:27:B7:0E:10:5F:8F:2E:98:70:53:B5:CF:70:5F
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 0198D39A58599B360DB5AC9916E21FA55FB2
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/7xT-V2AfJ7cOEF-PLphwU7XPcF8.roa
Signing time: Fri 22 Aug 2025 21:06:04 +0000
ROA not before: Fri 22 Aug 2025 21:06:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214716
IP address blocks: 2a0f:b240:e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d3:9a:58:59:9b:36:0d:b5:ac:99:16:e2:1f:a5:5f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Aug 22 21:06:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef14fe57601f27b70e105f8f2e987053b5cf705f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:44:0d:c7:4b:fc:ec:c2:2e:05:11:14:a1:87:
e3:c0:f5:9e:a9:3c:ea:93:fd:c2:bd:c6:97:c3:4f:
ec:31:5b:92:98:10:4a:54:16:ef:e1:0d:1c:99:eb:
67:02:e5:8b:c8:cd:84:67:11:83:36:e7:5a:85:4e:
b3:cc:da:62:da:9a:68:bb:6c:8d:0d:63:94:30:fe:
26:1c:56:d6:d8:91:b0:2e:2a:bf:83:dd:40:8c:79:
f0:81:f1:07:0e:5a:73:fb:73:d9:7a:f2:e5:0f:f0:
78:b8:e5:84:24:82:5f:1a:ff:07:84:ca:60:6d:20:
69:bc:27:5d:86:f0:5c:f4:21:03:28:d1:4e:37:3b:
b3:7a:98:32:78:f2:0e:a7:50:48:f7:23:c8:3b:e3:
53:34:6c:04:49:ed:74:2d:3d:bb:d8:33:64:c5:ad:
d8:82:51:f2:79:f3:00:8d:a6:b2:99:c5:01:00:2b:
a6:ae:89:cb:15:ce:3d:17:4a:bc:83:6f:b5:43:3b:
f0:31:a0:52:61:12:f3:cc:1e:5c:25:5c:a2:61:fc:
31:32:9c:e6:00:60:a3:2b:d6:2d:b2:0e:f3:ce:8a:
a7:66:f3:7e:93:5a:80:bb:3c:2e:43:66:a9:f4:b3:
c7:7f:82:9b:9d:58:d6:ce:20:22:82:8a:8d:1c:b8:
47:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:14:FE:57:60:1F:27:B7:0E:10:5F:8F:2E:98:70:53:B5:CF:70:5F
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/7xT-V2AfJ7cOEF-PLphwU7XPcF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:e::/48
Signature Algorithm: sha256WithRSAEncryption
2e:d9:08:26:31:d6:56:cd:27:51:cd:66:3e:99:6e:b3:d8:38:
fd:00:43:e6:79:04:74:85:be:07:ad:97:d8:e2:45:7f:1f:ae:
97:2e:4d:a0:8f:61:f5:19:0f:80:13:8e:b6:a6:9c:1d:bd:28:
e3:f0:3d:a4:55:6b:bf:7e:9e:bd:6b:b0:31:35:7c:7c:62:c8:
d1:db:80:a6:22:75:77:7c:6d:32:75:d0:0c:31:4f:fd:02:aa:
4c:58:86:ff:da:07:8d:26:56:12:be:36:50:b5:d0:5e:34:fa:
cb:9a:c6:e1:7f:a6:56:9e:d9:21:48:ad:75:30:6c:ef:bd:e1:
76:f0:c3:37:88:02:f6:b4:da:40:a2:d4:fa:44:b4:4d:1c:7d:
b0:1c:63:1f:ab:ba:50:d8:05:31:47:2e:ce:da:07:f3:50:f0:
ab:f3:17:26:5d:92:dd:e0:b9:62:53:02:aa:4d:05:4d:af:8c:
44:bf:65:3f:88:07:b9:38:35:35:38:1b:05:3b:80:4f:40:70:
64:37:06:93:dd:14:be:30:79:da:4b:41:b7:54:a7:ec:23:8d:
31:e9:cf:45:62:5f:ed:c0:01:34:40:1f:29:5d:53:6d:04:4b:
a4:ad:a3:12:6c:8a:e6:cc:66:05:2a:69:17:b3:77:03:62:49:
22:78:94:54
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZjTmlhZmzYNtayZFuIfpV+yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjUwODIyMjEwNjA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjE0ZmU1NzYwMWYyN2I3MGUxMDVmOGYyZTk4NzA1M2I1Y2Y3MDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4UQNx0v87MIuBREUoYfjwPWeqTzq
k/3CvcaXw0/sMVuSmBBKVBbv4Q0cmetnAuWLyM2EZxGDNudahU6zzNpi2ppou2yN
DWOUMP4mHFbW2JGwLiq/g91AjHnwgfEHDlpz+3PZevLlD/B4uOWEJIJfGv8HhMpg
bSBpvCddhvBc9CEDKNFONzuzepgyePIOp1BI9yPIO+NTNGwESe10LT272DNkxa3Y
glHyefMAjaaymcUBACumronLFc49F0q8g2+1QzvwMaBSYRLzzB5cJVyiYfwxMpzm
AGCjK9Ytsg7zzoqnZvN+k1qAuzwuQ2ap9LPHf4KbnVjWziAigoqNHLhHVwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFO8U/ldgHye3DhBfjy6YcFO1z3BfMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvN3hULVYyQWZKN2NPRUYtUExwaHdVN1hQY0Y4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQAAO
MA0GCSqGSIb3DQEBCwUAA4IBAQAu2QgmMdZWzSdRzWY+mW6z2Dj9AEPmeQR0hb4H
rZfY4kV/H66XLk2gj2H1GQ+AE462ppwdvSjj8D2kVWu/fp69a7AxNXx8YsjR24Cm
InV3fG0yddAMMU/9AqpMWIb/2geNJlYSvjZQtdBeNPrLmsbhf6ZWntkhSK11MGzv
veF28MM3iAL2tNpAotT6RLRNHH2wHGMfq7pQ2AUxRy7O2gfzUPCr8xcmXZLd4Lli
UwKqTQVNr4xEv2U/iAe5ODU1OBsFO4BPQHBkNwaT3RS+MHnaS0G3VKfsI40x6c9F
Yl/twAE0QB8pXVNtBEukraMSbIrmzGYFKmkXs3cDYkkieJRU
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:26:44 2025 by rpki-client