Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/kU_IjukU6D8Dux85ys49o290N5k.roa
File: kU_IjukU6D8Dux85ys49o290N5k.roa (raw, json)
Hash identifier: xfuq2ZsC5zIvcMJ3n02zUfuBoPX2+a4uat+4hB+MvkU=
Subject key identifier: 91:4F:C8:8E:E9:14:E8:3F:03:BB:1F:39:CA:CE:3D:A3:6F:74:37:99
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 0199F5520DB89F31C064D9EB3E9CE6F73322
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/kU_IjukU6D8Dux85ys49o290N5k.roa
Signing time: Sat 18 Oct 2025 03:16:59 +0000
ROA not before: Sat 18 Oct 2025 03:16:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214675
IP address blocks: 2a0f:b240:6e00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f5:52:0d:b8:9f:31:c0:64:d9:eb:3e:9c:e6:f7:33:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Oct 18 03:16:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=914fc88ee914e83f03bb1f39cace3da36f743799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:76:71:87:4d:24:81:e5:d5:f9:e4:50:7d:8e:
ee:7a:e3:19:72:da:04:40:a2:43:f7:95:aa:aa:a4:
02:51:76:c5:68:4e:7e:20:da:35:1c:b5:86:b8:ca:
97:87:80:f9:ed:0a:ae:7c:36:56:dd:15:ab:d2:5d:
f7:c9:1b:53:a0:39:90:d9:76:22:da:b2:d5:74:11:
6f:cb:1a:c7:e7:0c:3d:85:21:d3:f4:55:ea:40:91:
da:6e:4a:1f:41:ba:79:b0:81:bf:10:8e:1f:23:31:
2c:a9:89:f8:f0:98:dd:5f:63:b3:89:7b:c1:c2:e6:
0b:10:a9:20:d4:ac:58:ae:71:ec:33:55:02:84:a2:
b9:41:69:84:7c:a7:8f:5f:ce:c7:b9:96:90:af:13:
0e:d5:ba:e3:6f:e2:ff:63:7b:68:05:5b:8f:87:d9:
92:41:c8:2c:dd:d7:c8:29:bc:61:c0:4a:0b:23:9f:
0a:95:bd:b5:79:9d:70:2c:e7:cf:92:05:d4:c6:3a:
6f:3a:b2:06:9e:0a:fc:68:a8:67:00:06:4b:02:5e:
99:cb:84:ac:7c:f2:01:de:1e:5c:e8:8f:8e:0b:e7:
db:10:9d:f7:68:1c:6d:e4:df:37:b0:61:09:c9:b4:
89:4f:83:97:af:10:d8:5e:c6:b8:b8:48:10:3c:44:
8e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:4F:C8:8E:E9:14:E8:3F:03:BB:1F:39:CA:CE:3D:A3:6F:74:37:99
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/kU_IjukU6D8Dux85ys49o290N5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:6e00::/40
Signature Algorithm: sha256WithRSAEncryption
8d:13:50:eb:06:a7:c7:75:69:ed:10:ce:6b:bd:4b:4f:55:c9:
80:5f:48:e1:74:4a:3d:d4:eb:06:78:4d:ea:c4:aa:f1:d0:cd:
d0:0e:b2:4e:9b:ff:ce:fb:e7:c7:24:4b:e0:02:a9:99:ee:a9:
d9:80:03:73:58:40:4c:1e:1a:f8:da:f1:b7:7b:1b:d7:57:e2:
ea:3b:ca:56:a6:29:fc:2d:76:f1:46:66:19:1e:63:19:8e:02:
c0:70:f7:a0:ff:f7:6b:c3:53:40:c2:ad:f4:93:07:85:d5:0e:
c5:99:80:8c:ec:77:cf:89:42:0b:43:b5:a0:03:fa:b6:d4:46:
ed:67:e7:43:8f:a7:9d:ca:fa:43:02:bb:49:b6:d2:8f:aa:70:
10:40:10:ac:bf:cb:ca:7b:d3:c3:ae:50:d6:fb:6e:d1:34:80:
f4:e4:36:ec:4a:57:f8:80:01:3d:6e:03:6e:51:ca:78:8e:2a:
3f:42:74:88:8d:75:fd:b3:c2:7b:83:92:15:00:1b:e2:1c:cf:
36:18:5c:57:57:1c:bd:01:ef:7d:85:a8:b3:e6:82:92:bf:db:
57:04:95:8f:22:0a:11:e2:39:ae:7c:f7:92:3b:af:85:cb:4e:
20:2a:36:e4:fc:21:f9:01:99:67:b2:05:a6:dd:31:2c:59:6b:
1f:ce:8b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:23 2025 by rpki-client