Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/MKTxk5QBJsrCpNjI9CWg6jZa9wM.roa
File: MKTxk5QBJsrCpNjI9CWg6jZa9wM.roa (raw, json)
Hash identifier: oOxBEC7jf6nWhzsK9YXjGp2exiJ47VDtjYams/pFCM0=
Subject key identifier: 30:A4:F1:93:94:01:26:CA:C2:A4:D8:C8:F4:25:A0:EA:36:5A:F7:03
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 0199BC3D5C486191FDDEE7B07F573BE0A541
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/MKTxk5QBJsrCpNjI9CWg6jZa9wM.roa
Signing time: Tue 07 Oct 2025 01:16:01 +0000
ROA not before: Tue 07 Oct 2025 01:16:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213798
IP address blocks: 2a0f:b240:300::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:bc:3d:5c:48:61:91:fd:de:e7:b0:7f:57:3b:e0:a5:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Oct 7 01:16:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30a4f193940126cac2a4d8c8f425a0ea365af703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5d:e5:46:cc:a1:e0:58:11:73:76:13:0b:61:
70:be:d4:a0:c7:e1:b8:7b:40:8b:30:fc:b1:05:c2:
c9:58:5d:ce:8b:77:e1:9f:ea:47:38:31:2b:8d:48:
cf:b2:17:b5:69:e9:f7:f1:9c:23:ed:56:60:ba:93:
f9:39:3f:af:6c:48:5b:b3:aa:84:5b:ae:b5:3e:0c:
61:4c:55:2a:7a:c1:a4:7d:5f:eb:6f:1d:67:f0:9c:
ec:46:c8:a5:4c:81:9c:45:d5:82:35:a6:e9:92:d6:
9d:ae:90:ea:e8:97:c3:05:39:e1:5f:f9:17:f8:3d:
01:21:f1:b2:06:2e:13:e0:23:7b:7c:66:25:d8:f6:
49:b6:84:c6:69:e3:e6:2d:e4:1f:52:6a:a0:5a:0f:
5b:62:60:57:fe:b0:f9:40:01:21:0e:0d:ed:b1:69:
c5:f8:13:4d:2d:af:66:1d:d6:62:c9:c1:89:3a:70:
e0:ad:10:85:f0:82:8d:f1:0e:e8:25:58:4d:3b:7f:
51:32:57:cc:9c:5c:a4:48:5a:f3:ab:06:3d:ff:61:
49:f9:ea:fd:70:2c:52:f4:22:6f:84:c8:de:91:8a:
4b:42:23:d0:b3:91:45:3e:98:3e:ee:27:b4:29:3b:
93:b7:67:37:c9:91:10:ce:7a:cc:df:92:5c:2b:5a:
04:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A4:F1:93:94:01:26:CA:C2:A4:D8:C8:F4:25:A0:EA:36:5A:F7:03
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/MKTxk5QBJsrCpNjI9CWg6jZa9wM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:300::/40
Signature Algorithm: sha256WithRSAEncryption
33:b0:ab:98:a0:01:55:32:a3:83:2c:7f:29:c8:9e:ba:f3:83:
92:e6:d2:ba:be:80:dc:bc:1d:26:60:bd:a8:91:15:ef:6b:22:
02:9a:5e:ee:59:01:4f:92:12:d6:12:b9:78:db:c8:8e:a8:79:
ed:3c:35:cd:49:4d:63:6b:0f:21:e4:aa:7f:5c:d8:64:b7:e8:
21:15:04:bc:14:1f:a1:ba:51:46:63:f7:ab:35:90:35:1c:dd:
d1:9f:f7:59:2b:c8:9d:04:48:2a:ba:b8:8f:71:2a:3d:bc:32:
0e:b4:42:1f:27:73:26:9c:4f:93:83:95:be:18:3f:58:f9:c6:
12:db:13:6c:b2:b8:6c:88:61:37:55:17:04:5c:40:d9:70:99:
9f:da:e2:05:22:f1:0f:2a:56:3f:71:10:99:13:38:e8:d0:f9:
e3:20:97:be:c7:35:5d:d0:0c:91:f4:54:a2:f6:3c:a4:2d:cf:
04:d8:d3:18:8a:af:69:19:93:10:fb:04:bb:9d:3e:09:39:9e:
70:63:a0:fa:03:a4:6b:4a:a4:2a:d8:94:09:0d:2c:b3:7c:3a:
99:20:37:c3:7d:49:3d:63:09:b6:66:1f:82:8f:20:18:94:61:
e0:fc:02:70:52:82:c7:a9:49:a7:62:47:27:24:bb:ff:4f:ec:
be:aa:0c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:31:02 2025 by rpki-client