Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/cDZTBmZaFLagLw8HZBMkDmnHS3E.roa
File: cDZTBmZaFLagLw8HZBMkDmnHS3E.roa (raw, json)
Hash identifier: ymt87P+DveawanIKPhl0MAj4H0PhGa4o6OctyEF4gRg=
Subject key identifier: 70:36:53:06:66:5A:14:B6:A0:2F:0F:07:64:13:24:0E:69:C7:4B:71
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 0199A2CD3B363E8D15B4F5FF14D3FC4D3499
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/cDZTBmZaFLagLw8HZBMkDmnHS3E.roa
Signing time: Thu 02 Oct 2025 02:43:02 +0000
ROA not before: Thu 02 Oct 2025 02:43:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 40776
IP address blocks: 2a0f:b240:400::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a2:cd:3b:36:3e:8d:15:b4:f5:ff:14:d3:fc:4d:34:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Oct 2 02:43:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70365306665a14b6a02f0f076413240e69c74b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7b:49:26:70:9c:71:3d:11:f6:cd:ca:6a:6f:
b3:0a:7e:0a:a5:27:67:5b:86:be:6d:81:45:34:5a:
ca:ca:72:b8:a4:19:78:15:f6:13:7e:e1:7d:07:97:
54:9f:f2:b5:c9:99:85:09:c8:1b:31:88:82:93:17:
4a:df:c4:88:d1:dc:b7:8a:79:35:94:27:7d:b4:e0:
2e:b1:73:d3:e0:83:9e:55:50:26:7e:16:b6:6d:41:
d0:16:e7:75:b7:3a:64:b3:14:bc:66:2e:66:da:5b:
91:a5:97:eb:c2:79:5f:b3:3c:88:46:bf:48:8e:fb:
4b:86:88:7d:ba:a5:e5:0c:0e:f4:40:50:22:35:e1:
ac:22:12:86:20:f2:5a:c1:94:2d:52:29:9f:24:7b:
9b:07:56:53:a3:99:5f:cd:2c:12:fa:13:c4:11:17:
a6:08:f8:73:80:4e:d1:56:f2:3a:47:03:34:e3:46:
d2:d2:27:c1:1e:0e:7f:0a:33:2b:2d:6f:ec:a6:17:
9f:8f:36:26:39:bc:d9:0d:ea:6a:4f:e8:11:6e:52:
43:1b:f3:1a:c5:19:95:d5:b2:80:4a:20:da:1a:f3:
83:d6:05:f8:33:e5:e2:38:14:1d:b6:87:69:9a:e7:
a6:44:7d:2a:39:d3:55:c1:ec:16:1d:54:d3:93:b5:
5f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:36:53:06:66:5A:14:B6:A0:2F:0F:07:64:13:24:0E:69:C7:4B:71
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/cDZTBmZaFLagLw8HZBMkDmnHS3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:400::/40
Signature Algorithm: sha256WithRSAEncryption
63:6e:61:a0:b3:e1:26:e9:4d:2d:9f:29:a3:06:77:c3:2e:c5:
61:01:f6:d6:c3:2a:72:19:21:78:ff:dd:67:4b:d1:ce:c7:f9:
7b:16:6f:b6:56:60:5e:82:70:4e:c0:e9:3d:64:28:c4:81:11:
2b:13:0c:ac:17:25:98:47:67:77:84:7b:c7:56:8d:7b:ed:f3:
9d:bd:70:cd:6d:e1:3e:f3:ed:80:df:dd:7d:85:7f:8f:58:4f:
4a:f5:42:67:04:6d:7b:31:64:7b:66:bd:bb:45:68:7b:f9:10:
4f:92:d7:26:47:f7:32:40:6f:08:dd:20:17:71:0e:bd:9e:a1:
a2:6f:f4:59:6d:5d:52:8c:74:09:53:4e:30:0e:6d:5b:43:5e:
70:d1:2c:2f:11:1f:60:92:d2:80:9e:89:a9:b9:c6:64:ab:2e:
9f:a0:b3:72:13:de:d3:3a:57:2b:02:de:1e:11:cd:7b:f1:fa:
a9:e8:d1:25:b4:88:3f:c0:a9:4c:68:28:ec:76:ff:3c:24:18:
8e:7d:3d:1a:7c:ca:37:46:9e:d3:05:b5:57:95:14:c5:56:a2:
bd:0f:2b:e8:d9:f4:38:c8:38:ad:87:19:73:ec:11:c5:66:f2:
78:4d:30:84:1f:4f:a6:0c:e6:84:e8:3d:3c:d5:03:5c:7a:aa:
be:0f:68:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:25:18 2025 by rpki-client