Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/SnlWaeT08u3R8XaY2jKXb2FDMqE.roa
File: SnlWaeT08u3R8XaY2jKXb2FDMqE.roa (raw, json)
Hash identifier: mb+xNoR2xO053C1RHjZJwZimTpNCjZI10VVJbSkSJPg=
Subject key identifier: 4A:79:56:69:E4:F4:F2:ED:D1:F1:76:98:DA:32:97:6F:61:43:32:A1
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 0199BB0181F0F1662FD4EFAB392D68EC38C2
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/SnlWaeT08u3R8XaY2jKXb2FDMqE.roa
Signing time: Mon 06 Oct 2025 19:31:02 +0000
ROA not before: Mon 06 Oct 2025 19:31:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208915
IP address blocks: 2a0f:b240:5900::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:bb:01:81:f0:f1:66:2f:d4:ef:ab:39:2d:68:ec:38:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Oct 6 19:31:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a795669e4f4f2edd1f17698da32976f614332a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7e:29:26:b5:14:2b:5c:c3:4b:dd:f9:7f:97:
19:54:98:20:a2:21:8f:7d:a6:21:df:fe:0f:ff:21:
92:07:a3:84:4c:03:9f:d7:9f:83:5e:89:93:53:7a:
60:7c:da:ca:35:a0:f9:ab:a6:5c:14:9a:1d:93:ff:
15:3f:71:d6:ff:da:f8:6a:71:a6:fe:17:95:f5:df:
95:92:55:9d:02:6c:b6:09:0a:c1:3b:3d:60:04:f7:
1d:a5:2d:83:2e:15:c0:98:e2:c8:20:bc:5e:1a:ce:
ad:79:24:75:30:29:63:f5:95:45:81:a3:e3:36:4a:
91:0e:b8:5e:77:0b:bb:c9:17:e9:c3:f0:a2:d4:87:
b6:91:cf:35:84:13:6a:99:38:ab:f3:67:70:38:df:
d5:06:7c:9f:ec:08:cc:ef:05:b5:e5:08:c3:d7:44:
03:9f:97:49:45:77:6c:c8:6a:cb:3b:60:15:a6:ce:
f0:cb:39:b5:d0:3f:35:90:78:d8:44:70:b6:3d:5b:
ef:e9:b2:e2:5b:86:b0:4a:c0:e9:a4:6e:67:fa:d4:
98:65:8b:fa:0b:bb:30:f1:50:8d:45:5e:48:8d:91:
bd:d3:54:dc:ee:d9:00:fe:bc:4e:6d:39:22:fe:05:
87:4d:89:17:85:87:b7:30:8e:67:f4:ab:31:7a:17:
63:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:79:56:69:E4:F4:F2:ED:D1:F1:76:98:DA:32:97:6F:61:43:32:A1
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/SnlWaeT08u3R8XaY2jKXb2FDMqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:5900::/40
Signature Algorithm: sha256WithRSAEncryption
39:50:02:85:b1:f2:4b:f6:9a:3b:52:d9:bb:f6:81:9e:20:a3:
d2:0f:03:2e:34:9b:67:05:eb:29:01:de:c2:50:3c:2f:fd:ca:
42:21:69:30:af:60:30:a3:e5:91:58:6d:28:f4:95:9f:45:ff:
18:37:3e:2b:a9:32:66:29:fe:99:2a:9a:2b:49:0e:ed:e2:27:
91:1f:22:91:10:0b:98:f4:d4:18:cb:b0:25:7c:a7:51:bd:4e:
76:b4:4e:e8:83:97:55:54:f4:a3:8a:0d:f8:4c:1d:f7:00:0c:
e9:f4:fd:0e:0e:91:9f:38:b4:72:ba:5a:6a:08:28:30:5c:1c:
55:39:a8:8b:69:1a:60:ae:ba:f1:3e:67:60:2a:be:54:b4:a0:
ab:dc:e8:41:6e:98:3c:bd:85:73:4e:b4:ad:79:d2:90:62:ab:
71:31:33:12:c1:32:a5:75:d4:59:4c:a2:16:2f:1d:88:d4:74:
d3:a2:c5:7e:6b:cc:18:cc:32:6b:a0:7b:53:5c:d4:0d:79:fb:
ac:ff:fb:e5:6e:3b:91:57:02:c6:f3:fb:5a:c1:0c:b8:9f:51:
26:9b:12:c1:d6:36:f3:a0:78:eb:1d:e7:bf:40:29:50:24:36:
df:ce:b4:ec:e6:1f:e9:eb:6d:20:d4:79:1f:bd:92:88:ae:5c:
d7:a6:d9:2d
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZm7AYHw8WYv1O+rOS1o7DjCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjUxMDA2MTkzMTAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTc5NTY2OWU0ZjRmMmVkZDFmMTc2OThkYTMyOTc2ZjYxNDMzMmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs34pJrUUK1zDS935f5cZVJggoiGP
faYh3/4P/yGSB6OETAOf15+DXomTU3pgfNrKNaD5q6ZcFJodk/8VP3HW/9r4anGm
/heV9d+VklWdAmy2CQrBOz1gBPcdpS2DLhXAmOLIILxeGs6teSR1MClj9ZVFgaPj
NkqRDrhedwu7yRfpw/Ci1Ie2kc81hBNqmTir82dwON/VBnyf7AjM7wW15QjD10QD
n5dJRXdsyGrLO2AVps7wyzm10D81kHjYRHC2PVvv6bLiW4awSsDppG5n+tSYZYv6
C7sw8VCNRV5IjZG901Tc7tkA/rxObTki/gWHTYkXhYe3MI5n9KsxehdjRwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFEp5Vmnk9PLt0fF2mNoyl29hQzKhMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvU25sV2FlVDA4dTNSOFhhWTJqS1hiMkZETXFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg+yQFkw
DQYJKoZIhvcNAQELBQADggEBADlQAoWx8kv2mjtS2bv2gZ4go9IPAy40m2cF6ykB
3sJQPC/9ykIhaTCvYDCj5ZFYbSj0lZ9F/xg3PiupMmYp/pkqmitJDu3iJ5EfIpEQ
C5j01BjLsCV8p1G9Tna0TuiDl1VU9KOKDfhMHfcADOn0/Q4OkZ84tHK6WmoIKDBc
HFU5qItpGmCuuvE+Z2AqvlS0oKvc6EFumDy9hXNOtK150pBiq3ExMxLBMqV11FlM
ohYvHYjUdNOixX5rzBjMMmuge1Nc1A15+6z/++VuO5FXAsbz+1rBDLifUSabEsHW
NvOgeOsd579AKVAkNt/OtOzmH+nrbSDUeR+9koiuXNem2S0=
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:43:25 2025 by rpki-client