Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/eTfYYoZoBmUf2ten__zaZgTXExQ.roa
File: eTfYYoZoBmUf2ten__zaZgTXExQ.roa (raw, json)
Hash identifier: OZgVw4fle7h2cMm0T24JZzpjepe3CygqYDEbFb1iufk=
Subject key identifier: 79:37:D8:62:86:68:06:65:1F:DA:D7:A7:FF:FC:DA:66:04:D7:13:14
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 0199C49D29281F6A5ACA94A8954AD8A45872
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/eTfYYoZoBmUf2ten__zaZgTXExQ.roa
Signing time: Wed 08 Oct 2025 16:17:38 +0000
ROA not before: Wed 08 Oct 2025 16:17:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213641
IP address blocks: 2a0f:b240:5700::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:9d:29:28:1f:6a:5a:ca:94:a8:95:4a:d8:a4:58:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Oct 8 16:17:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7937d862866806651fdad7a7fffcda6604d71314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3f:68:c2:a3:4d:d5:f0:53:0e:11:71:d8:f6:
28:20:b7:cf:e2:3d:79:9f:a5:4d:f0:c7:83:00:5e:
33:dc:b1:c5:b2:fd:22:96:0a:45:1e:bb:b3:c4:9b:
81:42:59:11:5b:6e:61:f5:cc:f5:c3:36:9b:f9:83:
77:92:5b:db:f3:bb:4f:c1:c3:f9:18:64:b6:2b:91:
24:e1:5c:7b:4b:c9:96:d7:d8:c6:f0:3c:ab:cc:3d:
fd:a3:2a:f8:8e:e8:07:b8:af:b0:0e:ab:11:d8:d5:
61:2f:e4:be:20:33:62:2b:39:f6:ef:09:06:cc:ec:
aa:e2:4a:f2:67:6b:59:d8:2a:6c:6b:ed:83:f0:e2:
c4:68:27:38:7a:d2:14:60:1b:a4:7e:5e:4b:bc:bd:
3b:88:58:92:5b:d6:62:60:94:89:34:3c:14:5a:11:
3e:75:8a:2f:b4:58:4f:b8:03:ff:42:9c:c4:63:36:
39:a0:8f:97:e4:43:91:60:05:42:40:43:1b:6a:83:
06:a7:8c:47:94:9c:50:9d:4b:29:1c:9c:9a:90:73:
02:66:c3:d4:f0:a8:10:82:25:28:21:af:0c:dc:15:
29:10:26:14:5c:55:a1:c4:c0:1e:b3:db:26:34:42:
eb:06:e1:f1:0b:e0:1f:cb:bc:f7:d4:80:e0:01:cc:
22:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:37:D8:62:86:68:06:65:1F:DA:D7:A7:FF:FC:DA:66:04:D7:13:14
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/eTfYYoZoBmUf2ten__zaZgTXExQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:5700::/40
Signature Algorithm: sha256WithRSAEncryption
12:dd:ed:d3:c0:e5:b8:d6:00:48:cf:eb:25:23:33:c4:ca:e5:
84:f1:99:ae:60:43:ab:b1:a1:21:0a:37:ed:e8:16:ba:6c:03:
2a:b1:1d:4a:2a:bd:40:4b:8a:99:37:20:59:47:66:ab:a1:35:
73:02:12:eb:0d:92:9b:ec:f2:27:f7:1c:5f:07:5e:54:c6:a8:
71:02:3c:65:de:45:1a:ec:cb:e5:66:e2:d0:12:be:3d:50:fa:
b1:42:28:af:c3:6a:44:b6:2a:0a:11:b1:4d:e1:7c:3f:95:97:
ba:80:08:2e:f1:4f:9f:ef:af:22:79:bc:f4:98:1e:6a:f9:10:
f6:9c:81:71:af:64:36:c8:06:df:db:69:b3:04:83:6c:67:c4:
11:f5:97:66:67:3b:3f:57:f6:9f:cf:09:ce:b8:d9:4a:9a:5e:
62:b3:d6:ea:1a:89:6c:2f:57:07:6a:fd:a2:bb:dc:cd:a2:92:
70:1b:08:62:91:86:6e:9a:99:de:b4:8c:4f:42:43:fb:96:0d:
2e:19:b1:9e:56:56:2f:9b:82:66:24:08:1b:64:8a:e5:54:ac:
83:3f:b5:10:f6:8d:44:13:01:7d:bd:14:52:de:25:8d:a1:24:
16:ee:90:be:3a:c1:87:29:25:0c:af:78:95:1a:33:ac:b6:6f:
88:82:82:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:31:10 2025 by rpki-client