Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/cCj87e869xFxifTftOqfvb6-2mo.roa
File: cCj87e869xFxifTftOqfvb6-2mo.roa (raw, json)
Hash identifier: bTsfeRR2v5VlvWqbaZbJaCthKlgXU0XAN9dl2IiSZuE=
Subject key identifier: 70:28:FC:ED:EF:3A:F7:11:71:89:F4:DF:B4:EA:9F:BD:BE:BE:DA:6A
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 01989895B466820BD489E3EED89F1DE7BAC0
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/cCj87e869xFxifTftOqfvb6-2mo.roa
Signing time: Mon 11 Aug 2025 10:03:24 +0000
ROA not before: Mon 11 Aug 2025 10:03:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207272
IP address blocks: 2a0f:b240:d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:98:95:b4:66:82:0b:d4:89:e3:ee:d8:9f:1d:e7:ba:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Aug 11 10:03:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7028fcedef3af7117189f4dfb4ea9fbdbebeda6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c7:bc:de:5e:8d:8e:e3:bd:1a:78:c2:ed:5d:
db:29:55:08:04:5d:3c:2a:98:4d:e6:b5:99:cf:a0:
b0:17:f9:fd:90:0a:dc:e3:60:f0:13:f8:ae:ad:c5:
a0:40:f7:cc:f7:a2:61:d0:45:2b:68:23:2c:b1:70:
b3:86:31:0e:21:dc:b8:94:1b:ea:1a:a4:a9:25:f2:
1f:a7:4b:1c:5b:6c:6e:ed:14:07:1d:32:78:d6:b4:
a8:06:25:8a:06:4e:fd:ed:93:1b:7b:6a:75:90:40:
e3:25:3b:3b:ae:27:8b:43:91:00:0d:8f:d9:e9:c2:
fb:7b:95:00:0e:29:c5:25:65:0a:91:d3:93:0b:54:
cf:c7:0e:74:5f:af:fe:e4:eb:e2:84:6e:b0:82:06:
19:46:3f:0b:e4:b4:81:6f:05:c1:fa:b3:5b:f7:6f:
38:24:49:ac:39:10:b7:0e:e7:5d:fe:e8:f8:c1:f4:
40:9e:59:6d:30:0f:0a:df:c6:66:c9:df:62:dd:64:
bc:53:30:ce:57:70:bd:96:98:82:30:9e:06:d1:3b:
98:db:08:0f:f2:cd:46:46:d6:39:42:30:fe:13:02:
05:cd:92:0b:85:50:e0:67:72:26:56:dc:b7:80:e2:
93:69:12:70:a9:c8:ed:9e:36:6f:da:76:ba:09:52:
c4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:28:FC:ED:EF:3A:F7:11:71:89:F4:DF:B4:EA:9F:BD:BE:BE:DA:6A
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/cCj87e869xFxifTftOqfvb6-2mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:d::/48
Signature Algorithm: sha256WithRSAEncryption
69:1b:79:4d:e8:65:fb:94:76:40:fc:8e:1a:98:54:16:1b:c4:
0e:59:2b:55:0f:ad:20:84:3b:1a:74:d9:80:41:76:2e:a9:ac:
a8:ef:f6:dd:ac:bb:ab:5c:9b:f9:53:57:fc:b1:d3:54:e3:72:
c3:74:a0:36:f1:25:14:1a:c3:30:43:20:71:fc:b6:f6:51:88:
ba:8f:b0:e2:4d:1d:bf:d6:06:63:f3:30:3d:1a:11:68:b8:6c:
fd:90:ee:3c:29:be:ea:30:de:71:5b:a3:6a:9c:97:7c:98:0c:
b9:c1:38:47:b9:e4:dd:c6:b7:47:52:54:d6:bc:3b:78:db:08:
c5:ff:75:76:70:bf:7d:31:d5:07:18:89:e7:a3:94:dc:0e:85:
e9:83:88:61:c1:66:b5:a0:da:3f:c3:32:94:17:15:5e:cc:da:
65:94:2f:e3:36:3a:90:f4:7e:86:5c:2f:d6:4e:6c:c9:ad:aa:
47:5c:5d:36:69:e1:9d:71:0e:25:46:13:56:4b:8e:52:50:47:
0e:9b:4b:1c:6d:e1:2b:89:a0:d0:76:a2:9f:88:da:ab:f9:ba:
b3:bc:75:86:a7:09:6d:ae:94:e2:57:07:d1:ef:44:96:cd:45:
1d:a9:22:8f:ad:cb:90:51:fc:35:d5:95:85:ea:36:89:94:dd:
1d:9a:9c:67
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZiYlbRmggvUiePu2J8d57rAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjUwODExMTAwMzI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDI4ZmNlZGVmM2FmNzExNzE4OWY0ZGZiNGVhOWZiZGJlYmVkYTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsce83l6NjuO9GnjC7V3bKVUIBF08
KphN5rWZz6CwF/n9kArc42DwE/iurcWgQPfM96Jh0EUraCMssXCzhjEOIdy4lBvq
GqSpJfIfp0scW2xu7RQHHTJ41rSoBiWKBk797ZMbe2p1kEDjJTs7rieLQ5EADY/Z
6cL7e5UADinFJWUKkdOTC1TPxw50X6/+5OvihG6wggYZRj8L5LSBbwXB+rNb9284
JEmsORC3Dudd/uj4wfRAnlltMA8K38Zmyd9i3WS8UzDOV3C9lpiCMJ4G0TuY2wgP
8s1GRtY5QjD+EwIFzZILhVDgZ3ImVty3gOKTaRJwqcjtnjZv2na6CVLEjwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFHAo/O3vOvcRcYn037Tqn72+vtpqMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvY0NqODdlODY5eEZ4aWZUZnRPcWZ2YjYtMm1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg+yQAAN
MA0GCSqGSIb3DQEBCwUAA4IBAQBpG3lN6GX7lHZA/I4amFQWG8QOWStVD60ghDsa
dNmAQXYuqayo7/bdrLurXJv5U1f8sdNU43LDdKA28SUUGsMwQyBx/Lb2UYi6j7Di
TR2/1gZj8zA9GhFouGz9kO48Kb7qMN5xW6NqnJd8mAy5wThHueTdxrdHUlTWvDt4
2wjF/3V2cL99MdUHGInno5TcDoXpg4hhwWa1oNo/wzKUFxVezNpllC/jNjqQ9H6G
XC/WTmzJrapHXF02aeGdcQ4lRhNWS45SUEcOm0scbeEriaDQdqKfiNqr+bqzvHWG
pwltrpTiVwfR70SWzUUdqSKPrcuQUfw11ZWF6jaJlN0dmpxn
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:25:46 2025 by rpki-client