Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/8uaa0uy1g4NSNT94S7ezRV2zj4A.roa
File: 8uaa0uy1g4NSNT94S7ezRV2zj4A.roa (raw, json)
Hash identifier: DiyFzM98oKsJppijFtTd9rZ6VF0NazUUztnzU2DbjhI=
Subject key identifier: F2:E6:9A:D2:EC:B5:83:83:52:35:3F:78:4B:B7:B3:45:5D:B3:8F:80
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 0199AD4FEE28718D6C03070039E96155BD98
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/8uaa0uy1g4NSNT94S7ezRV2zj4A.roa
Signing time: Sat 04 Oct 2025 03:42:00 +0000
ROA not before: Sat 04 Oct 2025 03:42:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 135103
IP address blocks: 2a0f:b240:5500::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ad:4f:ee:28:71:8d:6c:03:07:00:39:e9:61:55:bd:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Oct 4 03:42:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2e69ad2ecb5838352353f784bb7b3455db38f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:41:b2:b6:dd:ec:5c:53:1b:75:32:bf:d7:02:
cd:66:5f:07:67:12:20:0c:9a:fa:f3:a1:88:03:2c:
bf:ba:ee:e7:d9:f3:cf:17:38:83:18:03:0c:66:d2:
40:d3:99:55:7a:fa:f0:58:85:13:f8:40:ad:07:8b:
36:71:79:5a:10:23:fd:60:12:0b:33:56:09:f0:77:
f1:70:51:7b:8e:b6:ac:c2:c9:19:57:de:27:5b:2a:
f3:cd:b5:c2:87:6e:84:b9:96:7f:f9:58:5a:af:b1:
db:14:1d:73:4f:d9:46:8b:21:f5:87:22:aa:2c:c6:
b3:07:2e:6a:cc:4b:79:8c:24:70:68:4b:3f:3d:7c:
00:dd:f0:fc:6f:c4:a1:5b:45:16:ec:c8:04:cc:c5:
7b:a9:77:69:74:76:b9:a4:d0:46:81:63:cf:da:cd:
6e:af:39:d2:b5:0f:4c:18:4e:1c:56:a0:2b:a6:c1:
63:73:e3:e5:cb:b0:79:61:ef:bd:aa:e7:5c:e8:86:
51:81:3e:9e:3a:43:7a:b0:e2:41:bc:b4:08:d6:b0:
c0:c9:df:7c:f7:87:55:3e:e8:87:12:65:09:61:88:
42:31:ce:db:ec:70:58:40:ab:41:93:49:a2:8f:93:
21:71:b1:7b:c8:19:1b:52:b0:48:df:e8:db:d4:74:
c9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E6:9A:D2:EC:B5:83:83:52:35:3F:78:4B:B7:B3:45:5D:B3:8F:80
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/8uaa0uy1g4NSNT94S7ezRV2zj4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:5500::/40
Signature Algorithm: sha256WithRSAEncryption
87:96:d2:ac:0b:67:f4:f1:47:e1:cb:57:26:9d:49:89:3b:99:
70:25:2d:de:53:e1:e2:cd:ef:5d:42:10:84:e8:20:3a:3f:8d:
b9:7e:b5:6d:00:c9:96:d4:1e:21:56:a8:8a:3a:14:fd:af:22:
56:eb:76:2d:86:87:ea:84:80:79:c2:d4:79:da:1a:8f:e6:a8:
64:c9:97:b1:de:a7:a8:27:4b:5d:74:3c:37:bf:d6:d3:94:2d:
03:f6:bc:16:30:b9:f3:0a:65:8b:22:dc:d4:fd:84:5b:b2:97:
90:c3:2a:79:25:94:65:0e:90:8a:84:1e:49:81:c0:bf:20:e8:
fa:7a:12:f4:70:13:2e:39:7a:bb:ae:a2:c2:7b:75:b9:be:22:
18:e6:65:2b:32:0e:03:e7:3f:79:37:c6:03:81:2c:25:67:48:
53:3a:89:7f:9f:72:b0:a5:11:cb:4e:2c:01:70:cc:59:05:8c:
8b:6d:69:76:a2:17:9f:8b:d8:df:95:50:79:ff:34:8b:0d:09:
f1:20:bc:b2:ef:12:d4:a3:aa:a9:4c:56:dc:4e:00:5c:9c:bf:
80:4c:02:cc:40:01:0c:32:ff:a3:c8:15:ed:c1:93:86:4d:8d:
92:54:5a:f8:71:95:31:46:90:a0:cf:3b:ee:c7:47:52:f9:0e:
43:b1:e2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:30:50 2025 by rpki-client