Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/a2UlY23Ubhd6FTJRUyCydp8LdA4.roa
File: a2UlY23Ubhd6FTJRUyCydp8LdA4.roa (raw, json)
Hash identifier: TF+FrNHtdz81mfB4agFtteB8Im8kMQauPzMlqSSaxE8=
Subject key identifier: 6B:65:25:63:6D:D4:6E:17:7A:15:32:51:53:20:B2:76:9F:0B:74:0E
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 0199ED8549CC881A18803CD6714B1C98F0C6
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/a2UlY23Ubhd6FTJRUyCydp8LdA4.roa
Signing time: Thu 16 Oct 2025 14:55:59 +0000
ROA not before: Thu 16 Oct 2025 14:55:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214079
IP address blocks: 2a0f:b240:6900::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ed:85:49:cc:88:1a:18:80:3c:d6:71:4b:1c:98:f0:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Oct 16 14:55:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b6525636dd46e177a1532515320b2769f0b740e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8b:bf:07:ed:9b:a7:0f:05:01:79:45:25:0a:
bf:68:c2:03:e0:7f:47:6f:7f:95:34:0f:1e:ae:8a:
94:36:f4:09:88:04:68:26:15:ac:1e:34:b8:72:47:
23:e3:b2:11:05:55:02:f3:19:f7:a0:fc:df:0f:4d:
3d:88:bc:f8:18:f3:90:5a:17:a5:0d:ba:cb:57:46:
dd:b5:ca:69:a3:e5:50:d1:bd:65:10:1a:b4:2b:7a:
ee:0c:17:2a:65:5a:34:f4:f8:a6:ff:65:eb:8a:48:
34:64:35:ad:87:96:01:c7:ff:39:9b:10:b8:92:49:
e6:56:34:59:21:8f:c4:71:f6:fc:34:e7:31:24:19:
45:1c:d3:2a:ae:50:4a:42:df:5d:04:cf:51:a9:21:
46:93:45:6e:e3:c1:d7:c4:b2:87:e5:dd:ca:23:25:
69:11:36:c0:eb:03:19:a2:df:61:cc:34:63:3f:42:
62:af:61:82:6f:fb:60:ad:22:31:d9:5e:07:8b:aa:
ac:63:df:d2:78:88:95:22:4b:76:0d:76:43:45:fc:
79:2b:97:96:69:74:64:b9:c4:23:60:16:42:99:f3:
96:fa:0f:14:8c:89:9b:ca:c7:c5:82:be:1c:8c:0a:
60:b5:9b:43:8c:01:5a:35:61:21:a5:ea:c3:bf:62:
28:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:65:25:63:6D:D4:6E:17:7A:15:32:51:53:20:B2:76:9F:0B:74:0E
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/a2UlY23Ubhd6FTJRUyCydp8LdA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:6900::/40
Signature Algorithm: sha256WithRSAEncryption
8c:f1:f9:63:85:34:18:58:29:63:56:97:48:30:0e:f4:c6:25:
13:97:ff:7d:f7:9f:13:cb:8a:da:d1:03:a4:c4:3c:21:07:97:
73:4d:f7:00:96:ea:9c:06:6e:a5:11:03:5d:08:df:57:89:b9:
04:23:52:c2:11:1d:94:1f:ba:67:83:f1:ac:12:85:bd:9a:62:
c4:db:27:0b:3d:30:7f:c1:86:59:d4:c2:18:b0:a8:5c:14:33:
26:72:bf:99:6a:d0:1e:95:09:47:2b:27:28:ea:18:44:a7:19:
4f:b5:c4:37:2e:db:10:99:af:fb:5b:98:55:6d:e8:d0:63:e6:
9c:88:3e:cf:d3:4a:16:7d:79:4c:82:32:e4:62:d8:d3:9b:b4:
ba:eb:f5:8c:d7:ce:20:68:ee:6d:98:df:9e:10:91:93:d0:72:
48:89:e9:88:72:09:13:43:ba:9a:16:01:f5:09:c4:f0:24:de:
ac:ac:07:88:98:85:c7:bb:b5:e7:b9:e4:82:05:d5:02:9c:2c:
e4:b3:88:75:62:cd:70:2b:24:fc:16:b7:d1:19:4d:32:0c:cd:
14:dd:33:fe:25:6c:80:c0:1a:46:fd:91:f0:b9:85:d1:aa:47:
b5:b8:eb:5b:7b:9a:43:b1:8b:c0:14:38:fb:7e:e0:ec:2c:b1:
1e:8a:5e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:30:32 2025 by rpki-client