Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/ZxB871DqFibvTFKUl_p0vq2DCdc.roa
File: ZxB871DqFibvTFKUl_p0vq2DCdc.roa (raw, json)
Hash identifier: 7MYMR38Vok3X6QSTgN5xJhAl4eqFsPRyPFPIYbJn0zQ=
Subject key identifier: 67:10:7C:EF:50:EA:16:26:EF:4C:52:94:97:FA:74:BE:AD:83:09:D7
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 0199C4A9FB05AB8401DA02948FDF97F3F404
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/ZxB871DqFibvTFKUl_p0vq2DCdc.roa
Signing time: Wed 08 Oct 2025 16:31:38 +0000
ROA not before: Wed 08 Oct 2025 16:31:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210812
IP address blocks: 2a0f:b240:5d00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:a9:fb:05:ab:84:01:da:02:94:8f:df:97:f3:f4:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Oct 8 16:31:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67107cef50ea1626ef4c529497fa74bead8309d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1e:ee:fb:d2:a5:83:d9:0c:24:b7:8a:e8:40:
0a:aa:f3:fa:a3:aa:16:25:c0:b1:1a:ad:7e:d2:db:
a1:25:13:62:7f:7f:32:8d:33:54:d1:7c:6d:33:cb:
4f:08:c5:f3:07:fe:20:b8:15:07:18:fa:6d:e8:1d:
ba:98:c6:c2:89:4e:f2:12:3e:d8:c7:92:d9:8d:d4:
06:e4:ae:b3:cc:3e:6a:e9:2a:f1:b4:5a:25:33:14:
ca:a7:f2:7c:cd:6a:8b:15:6e:3d:fa:75:d1:4f:30:
c5:90:64:ea:ea:ac:7e:de:64:6c:e1:1a:2d:7a:b5:
70:7c:8f:43:ec:9d:1b:79:7c:0e:69:31:c2:aa:c3:
88:ed:c6:83:a4:a3:d0:93:e9:4c:fc:ec:45:96:b4:
71:7e:c6:5f:9e:ed:c9:f2:b2:97:2c:ba:51:de:21:
ec:de:a6:4d:93:3b:36:c5:75:59:2f:3b:47:97:ec:
ef:0b:3d:c4:06:db:aa:0d:36:ca:ff:9a:1b:93:21:
24:45:f0:a7:cc:b7:3a:45:e3:e7:92:33:11:3f:3e:
37:22:7f:7f:9e:f4:38:73:4d:13:a8:47:5b:5d:fd:
ee:94:75:f5:c0:68:cd:e2:8c:7e:5b:c2:b2:fb:7b:
1f:dc:ca:a8:54:7d:16:93:d6:8d:3b:dc:c1:85:ed:
d0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:10:7C:EF:50:EA:16:26:EF:4C:52:94:97:FA:74:BE:AD:83:09:D7
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/ZxB871DqFibvTFKUl_p0vq2DCdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:5d00::/40
Signature Algorithm: sha256WithRSAEncryption
72:0c:02:2e:85:ef:e7:9b:05:c5:74:21:72:92:bb:61:2d:6e:
eb:0b:a7:c9:c0:a9:36:49:16:7f:61:d8:72:1a:86:b3:6f:40:
5e:55:9b:03:56:41:c7:66:b6:96:ee:e3:55:31:ae:d2:9e:d0:
6b:4a:75:1c:21:01:61:40:f1:2c:06:fb:d0:00:bc:eb:7b:66:
e9:98:86:14:75:1c:0e:31:4e:51:5b:20:b3:96:9e:af:e6:9e:
57:b8:00:92:15:b9:a1:9e:0c:6e:db:95:06:21:38:18:f6:0c:
7e:43:6a:94:14:31:f5:b9:d1:89:09:c5:ff:67:1f:36:b7:0e:
75:f6:65:d9:ae:58:50:36:01:3d:c4:9c:08:ff:e8:3d:c9:d3:
ab:d8:47:d0:23:10:70:28:ef:d3:20:6c:23:68:23:30:34:75:
88:c4:9f:43:04:33:49:84:64:b0:4c:37:23:2f:cc:26:16:a5:
57:73:14:b9:8d:f7:52:4c:9a:20:ef:1c:40:7a:84:3d:6a:83:
d6:f8:23:d6:94:86:99:55:93:d0:74:86:8b:0d:fa:0b:d1:c9:
a4:41:82:07:f7:87:50:71:24:46:0f:3f:ca:2d:5d:63:cb:2b:
98:8c:9d:75:ad:32:e5:eb:e2:79:ab:52:e1:a6:41:5c:09:9c:
b0:00:40:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:43:08 2025 by rpki-client