Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/NChU7XAv3Hf55j2DfYZsyQc8G3c.roa
File: NChU7XAv3Hf55j2DfYZsyQc8G3c.roa (raw, json)
Hash identifier: WKiXdp0/ajngEv+VvqJrbUmjq6kPbM16Q9ctKB4v9dY=
Subject key identifier: 34:28:54:ED:70:2F:DC:77:F9:E6:3D:83:7D:86:6C:C9:07:3C:1B:77
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 019978CF6C7C6FD7A50FF33AA1E7FA9E6408
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/NChU7XAv3Hf55j2DfYZsyQc8G3c.roa
Signing time: Tue 23 Sep 2025 23:01:23 +0000
ROA not before: Tue 23 Sep 2025 23:01:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212001
IP address blocks: 2a0f:b240:f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:78:cf:6c:7c:6f:d7:a5:0f:f3:3a:a1:e7:fa:9e:64:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Sep 23 23:01:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=342854ed702fdc77f9e63d837d866cc9073c1b77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5e:c6:0c:e2:26:5d:9a:53:f1:0e:5a:fa:31:
a2:09:91:06:2d:46:35:aa:21:f5:1a:d1:d9:46:99:
2d:a8:fa:dd:46:de:cf:29:2c:e2:00:dd:b6:9b:b1:
ae:5a:00:7d:f6:b5:53:8f:3e:3c:36:38:0e:04:eb:
1f:e8:82:55:14:c2:da:7c:10:64:78:1d:3c:74:83:
2e:a7:06:0b:da:bd:51:85:98:fa:5e:37:4c:29:81:
4d:e7:b8:f8:77:73:6b:1a:61:b2:27:8c:f0:5a:f3:
5d:b1:6c:55:56:a2:57:c2:a8:94:d5:ae:0d:6d:3f:
35:2f:2f:af:cb:a2:b2:c6:95:a7:aa:1c:d7:e9:8c:
b5:0b:f5:03:ed:ec:8a:0c:7f:84:d7:76:40:66:91:
81:cd:1e:f9:ab:6a:89:ed:0f:ec:e0:02:5b:6e:f7:
92:b9:69:5e:08:05:30:49:ff:19:d3:9d:45:fe:37:
37:a6:7f:71:62:9f:66:0d:9d:28:69:00:55:65:50:
ea:40:e8:2b:77:3f:16:8a:9f:df:5a:4d:0f:68:ac:
ae:cf:73:15:10:46:aa:30:5c:f1:4f:22:87:e1:51:
3c:31:cb:b0:30:5f:c0:4b:40:c4:e2:58:74:b6:89:
e8:56:02:6d:5e:7d:0f:2f:66:ce:1b:3c:a4:c9:40:
c1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:28:54:ED:70:2F:DC:77:F9:E6:3D:83:7D:86:6C:C9:07:3C:1B:77
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/NChU7XAv3Hf55j2DfYZsyQc8G3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:f::/48
Signature Algorithm: sha256WithRSAEncryption
01:fc:e5:0c:d7:1d:df:0d:96:ab:fc:c8:4e:93:9e:0e:5e:ea:
35:85:08:a8:c0:ab:bf:df:d4:b7:6f:3a:ae:39:d5:46:82:e4:
37:0a:61:73:46:26:c9:f8:8a:f2:58:af:d4:f4:ed:ba:f2:57:
2d:8f:db:4a:05:6a:06:02:9e:3c:64:be:0d:13:17:d5:b1:67:
cb:dd:61:9a:7f:63:6f:0f:04:10:ce:c8:cd:c1:28:7d:5f:2e:
d2:01:23:33:77:d2:e5:b9:b5:f7:de:83:7b:3d:ac:72:47:d7:
dd:36:71:b6:40:2c:a8:05:87:21:9b:44:d0:9c:7a:b7:86:fd:
4c:51:1f:72:44:89:31:ef:f8:5e:58:48:95:d4:ec:c1:cf:09:
6e:26:8a:3c:b5:85:ee:38:d5:5b:bf:a1:6f:d0:06:55:5f:ac:
46:29:5b:12:ad:8a:dc:a2:5e:90:af:69:73:20:ca:9d:52:07:
e7:47:c1:9b:08:36:72:5f:4f:de:0b:cc:44:56:01:4c:94:e6:
06:ed:2f:24:5f:a9:a8:1b:32:43:23:95:aa:00:59:f3:b6:a7:
82:0d:0f:15:bb:d3:63:89:2d:9f:76:a9:b7:02:a0:c2:61:78:
2c:5f:51:a5:c6:f5:ce:b0:9b:7a:78:d9:57:bd:ba:44:77:a4:
4a:0c:c6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:43:10 2025 by rpki-client