Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/XoBEm2pAJK3YcJthc5U1_WEWyUU.roa
File: XoBEm2pAJK3YcJthc5U1_WEWyUU.roa (raw, json)
Hash identifier: s/XeoteqFRHEyZOqAHqBWdsWcoNaTjuM1xVV6H/+eJk=
Subject key identifier: 5E:80:44:9B:6A:40:24:AD:D8:70:9B:61:73:95:35:FD:61:16:C9:45
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 019E04BF28DD0B918101EEB23542AB206399
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/XoBEm2pAJK3YcJthc5U1_WEWyUU.roa
Signing time: Thu 07 May 2026 23:21:36 +0000
ROA not before: Thu 07 May 2026 23:21:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39975
IP address blocks: 2a0f:b240:14::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:51:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:04:bf:28:dd:0b:91:81:01:ee:b2:35:42:ab:20:63:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: May 7 23:21:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5e80449b6a4024add8709b61739535fd6116c945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:83:3b:52:de:34:8e:c5:fe:aa:0b:d7:d6:cb:
41:40:65:4a:87:b2:d9:c3:e9:29:c5:ee:02:7a:ed:
3c:82:39:aa:34:89:18:a4:4f:ff:6d:de:29:87:b5:
3a:32:be:aa:1f:d9:40:7f:c9:bf:87:43:a1:84:3e:
60:c3:16:af:2b:c3:14:96:a1:24:4c:f5:be:3f:03:
58:86:dd:25:86:fd:fb:4a:d7:6f:eb:12:43:6e:aa:
fb:dc:04:6c:5f:6c:af:f0:b0:44:73:19:71:98:26:
39:ca:c9:c1:66:ed:64:8a:83:c9:49:3d:b9:3b:c2:
9c:f2:e9:bb:43:df:b3:44:f9:ec:07:94:fd:75:67:
b6:c5:0f:a6:d9:d1:00:e8:56:b5:26:b8:2d:f2:fa:
0b:38:f4:e2:5f:38:bf:ad:48:d0:24:f1:cd:d5:c6:
9e:18:cc:9f:1c:70:4f:1a:b8:fc:45:23:14:0c:c8:
b3:d3:6d:1d:c4:89:ad:81:50:51:c0:ed:86:8b:95:
92:77:fe:0d:2e:2a:1c:cd:49:e2:d7:01:58:f1:5b:
7b:8a:a4:5a:49:9e:c0:b5:36:f1:d6:0e:9f:a7:c1:
22:d7:1c:16:9d:8b:df:d5:89:20:4e:24:5d:e5:0c:
45:ea:fa:20:4a:5c:de:d1:bd:0b:d5:fd:a8:66:2f:
d3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:80:44:9B:6A:40:24:AD:D8:70:9B:61:73:95:35:FD:61:16:C9:45
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/XoBEm2pAJK3YcJthc5U1_WEWyUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:14::/46
Signature Algorithm: sha256WithRSAEncryption
06:07:f1:8e:62:cc:55:a0:46:32:1e:3a:0f:2c:bd:a7:ac:71:
71:b8:f3:7a:2c:76:80:a5:74:0f:fb:78:5f:8b:1a:4e:62:a8:
c6:cc:04:49:93:b9:45:de:18:90:60:44:39:58:e0:fe:52:94:
c6:07:d5:31:92:ee:0c:44:18:33:cb:d0:c2:ea:c8:e3:03:50:
fe:c4:ca:2b:4a:69:a2:87:00:97:ff:ef:18:82:c1:74:af:b0:
39:1a:67:3c:5b:d4:fc:e4:6a:8d:0a:1c:76:28:6f:72:0a:d6:
2c:3f:57:11:98:03:d0:a8:b8:13:39:b3:59:d1:84:fc:f2:d2:
ed:f1:07:5e:84:c1:2c:a1:ae:6c:35:16:cc:e8:e4:d4:1d:ea:
ed:e3:ec:64:64:7e:68:7f:34:94:3a:ec:ca:7d:92:34:db:23:
29:8b:e1:f5:be:32:8f:b6:2a:55:c3:de:77:98:0f:01:93:c1:
66:77:ce:8d:3d:b8:85:58:8c:f8:08:15:9c:1a:87:e8:40:3d:
e1:79:a5:ce:53:b3:08:03:e0:d5:34:e6:1c:d6:9c:b0:68:17:
22:90:9b:00:e8:af:e5:1e:98:7d:90:a7:54:18:93:02:0a:72:
db:e0:15:d2:0b:06:aa:68:97:c7:a6:66:d2:d6:ff:c7:7c:1e:
86:56:46:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:58:47 2026 by rpki-client