Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/PWzmA8Xxhn8216q7a3C4IW529H0.roa
File: PWzmA8Xxhn8216q7a3C4IW529H0.roa (raw, json)
Hash identifier: l/QvhywJqC2wTAvoNgxkDF/Qalv+VRKIGzFRDCgKwUA=
Subject key identifier: 3D:6C:E6:03:C5:F1:86:7F:36:D7:AA:BB:6B:70:B8:21:6E:76:F4:7D
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 0199FBFAC36DE5BE8BC47A97C154A498007B
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/PWzmA8Xxhn8216q7a3C4IW529H0.roa
Signing time: Sun 19 Oct 2025 10:18:59 +0000
ROA not before: Sun 19 Oct 2025 10:18:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31898
IP address blocks: 2a0f:b240:5d00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:fa:c3:6d:e5:be:8b:c4:7a:97:c1:54:a4:98:00:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Oct 19 10:18:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d6ce603c5f1867f36d7aabb6b70b8216e76f47d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:19:b4:a3:71:d9:83:81:7f:20:a7:95:7e:b4:
23:54:e7:26:75:21:e5:84:a5:f0:be:1c:e1:93:cc:
86:0b:3b:3f:e0:a5:33:77:de:ce:87:8e:58:55:b3:
8c:45:e2:ab:f2:e4:f2:05:3e:a9:00:2f:d5:19:82:
42:54:04:e9:35:ed:0a:dd:a2:2b:86:8a:71:6f:5f:
cb:dd:a4:c6:0f:26:5c:1e:b3:95:75:12:b8:b6:86:
76:31:01:6b:53:2d:25:30:35:34:9d:2b:75:dd:1c:
e5:a6:81:9a:ab:cd:1b:6f:3d:11:6d:95:41:97:76:
dc:b9:ef:e5:f8:83:33:b9:d4:d3:c9:64:cf:74:cb:
aa:cb:1f:1e:f6:38:ab:67:12:60:c1:6a:4a:d0:58:
d8:5b:75:da:a8:a5:83:50:72:6d:44:73:b9:e4:7f:
6f:17:95:b0:d4:54:98:cf:54:02:3b:67:09:e1:3c:
29:83:fc:d8:15:29:2e:64:32:74:b2:fc:3f:f8:4a:
f2:84:d1:c3:76:b1:5e:99:9f:e5:5e:b9:78:a1:b8:
f7:c4:60:9a:cd:19:50:6d:53:30:4a:7f:c9:14:de:
fd:1d:98:98:13:5e:d7:f8:69:27:dd:44:97:11:d5:
39:3b:31:7a:e5:ec:cb:f9:16:a1:30:ec:fa:1a:d1:
19:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:6C:E6:03:C5:F1:86:7F:36:D7:AA:BB:6B:70:B8:21:6E:76:F4:7D
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/PWzmA8Xxhn8216q7a3C4IW529H0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:5d00::/40
Signature Algorithm: sha256WithRSAEncryption
0e:2d:f5:f5:c9:00:ee:e8:14:e1:68:bc:2c:c9:fd:f0:10:e2:
37:d3:d5:47:75:fe:a3:5f:03:0a:cb:d1:9c:c5:99:91:27:eb:
5a:64:8e:4a:c6:73:8d:e6:c5:0f:af:47:a7:a5:51:b3:ef:32:
d3:0a:7a:0b:17:06:43:9a:71:a8:eb:a2:c9:7d:0b:7a:d1:74:
d2:f2:a5:4b:e8:57:c7:1c:ce:12:19:af:0e:54:ed:b4:a4:da:
07:4d:65:41:25:a4:67:9a:14:ce:1e:5d:ad:fe:ae:46:49:47:
5a:64:b6:46:77:e1:71:7e:be:d3:79:f0:79:05:5f:02:39:1e:
d4:69:84:f1:bc:a3:f1:f2:f1:da:05:f2:b3:ef:92:b0:62:20:
5d:fa:d1:e1:55:a0:d1:c7:b3:02:88:13:e4:d8:99:3a:5c:ac:
21:27:f5:51:0b:4f:35:a0:d1:74:de:c1:74:0a:0d:28:47:3e:
ef:16:d4:dc:b4:98:b1:34:69:1a:82:23:33:d2:5a:85:4a:50:
2c:ef:e6:c6:fe:7d:bf:70:05:cf:c8:d0:15:3e:a0:3d:6d:62:
00:2e:ed:54:94:f4:49:f0:fe:42:e0:b3:8b:82:6f:e3:c9:b0:
36:a1:09:2a:be:e1:43:20:96:72:12:49:89:9d:f5:67:88:4f:
bc:2a:6f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:43:01 2025 by rpki-client