Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/kVEdinypYErym39hUEVNc5wL-mI.roa
File: kVEdinypYErym39hUEVNc5wL-mI.roa (raw, json)
Hash identifier: R3HSiJXXtzMZXdzjGsJ9wNisA1fMZTCcK8mQyaUMY0Y=
Subject key identifier: 91:51:1D:8A:7C:A9:60:4A:F2:9B:7F:61:50:45:4D:73:9C:0B:FA:62
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 0199D00FC3E6B94BBF2A61931CD59DE53140
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/kVEdinypYErym39hUEVNc5wL-mI.roa
Signing time: Fri 10 Oct 2025 21:38:38 +0000
ROA not before: Fri 10 Oct 2025 21:38:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205163
IP address blocks: 2a0f:b240:5f00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d0:0f:c3:e6:b9:4b:bf:2a:61:93:1c:d5:9d:e5:31:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Oct 10 21:38:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91511d8a7ca9604af29b7f6150454d739c0bfa62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7f:29:de:c8:1e:ad:1f:4e:9c:85:98:8f:a7:
58:82:b4:e1:33:82:57:59:cc:99:9a:52:61:55:48:
5f:11:06:c5:57:fb:75:b7:40:66:b3:15:2b:d3:a1:
4c:e3:7f:e8:7e:7c:ff:a0:ff:78:d7:8c:b9:4b:b4:
aa:1f:7a:07:6e:4f:c3:ae:76:5f:ea:d8:e5:fb:e2:
9b:f9:93:a9:b2:41:67:b8:5a:64:2f:77:84:ac:d3:
12:a7:5e:a0:91:59:6a:ea:2a:a4:ef:fd:0d:bd:76:
df:82:06:e1:09:a7:dc:c7:80:02:69:77:fe:48:e9:
7f:66:3b:36:56:5f:48:9b:ab:bb:f1:b6:00:59:4f:
47:30:e0:42:75:d4:f0:0b:0f:83:5f:e0:f1:4a:9a:
6b:4e:fa:2a:38:e0:e0:71:64:a8:16:de:35:bb:f7:
6c:57:10:24:08:43:00:fc:81:d9:c3:65:72:cb:9e:
96:30:c2:02:95:17:72:50:48:ff:6f:45:fd:85:24:
4b:56:0c:b1:2b:07:46:7d:26:f8:93:54:70:60:fb:
d6:9b:cc:ae:a7:dc:f9:55:53:92:7c:b6:fe:ed:19:
3b:18:71:e0:d3:13:6e:83:68:a5:a7:a5:64:56:8c:
ee:06:8b:29:67:08:f1:3e:3c:4f:ed:1e:3a:12:fc:
96:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:51:1D:8A:7C:A9:60:4A:F2:9B:7F:61:50:45:4D:73:9C:0B:FA:62
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/kVEdinypYErym39hUEVNc5wL-mI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:5f00::/40
Signature Algorithm: sha256WithRSAEncryption
8e:97:72:08:08:a8:df:75:c5:7b:b6:f4:99:2f:82:1a:f2:b5:
02:f5:8c:6a:5e:90:43:6c:63:44:f6:9c:6f:38:79:40:89:6d:
fd:48:19:43:61:2a:63:90:a7:3d:da:c4:a9:81:db:87:a3:73:
b4:2a:7c:4b:36:ae:d2:76:71:0c:06:3c:63:eb:1f:69:c2:e6:
03:97:d5:2e:f7:ea:21:0c:de:c3:3e:c1:30:19:74:a5:18:94:
ee:91:25:58:f9:66:b5:33:ce:86:c7:f7:8e:34:cf:d3:5f:1d:
64:f4:fd:de:34:3d:f1:0f:f1:e0:87:d9:1a:f5:ab:a1:ca:ae:
30:a7:25:8a:67:df:51:5b:f2:1b:14:0e:3c:57:ab:b6:4a:85:
4a:4e:96:b9:a5:a1:dc:4a:09:4d:36:26:2a:52:9b:d2:c7:c4:
d4:84:b8:58:98:41:45:bf:c0:19:a6:1d:7e:a5:64:ba:9e:25:
92:27:3a:2e:9a:09:d7:a8:79:b2:a6:ee:c1:f6:a9:f2:f1:25:
fc:75:5e:1e:34:ad:47:68:63:ab:5e:40:fa:a3:6f:ef:f2:35:
2a:f4:24:60:56:4d:d3:63:0c:16:c7:bb:dc:bc:1d:d6:f8:db:
0e:54:a5:f0:2c:54:33:ee:97:eb:cf:67:20:80:82:96:ba:dc:
53:78:80:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:25:23 2025 by rpki-client