Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/ljL3EgkXucog0rtw-Mhhmr0caI8.roa
File: ljL3EgkXucog0rtw-Mhhmr0caI8.roa (raw, json)
Hash identifier: oWTvCc+48e5P8k1m7ViGrKrbrePeA2B9wX8aBZWSqls=
Subject key identifier: 96:32:F7:12:09:17:B9:CA:20:D2:BB:70:F8:C8:61:9A:BD:1C:68:8F
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 0199CA6DCF44748791B68D81C0AF0B37F49A
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/ljL3EgkXucog0rtw-Mhhmr0caI8.roa
Signing time: Thu 09 Oct 2025 19:23:38 +0000
ROA not before: Thu 09 Oct 2025 19:23:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207196
IP address blocks: 2a0f:b240:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ca:6d:cf:44:74:87:91:b6:8d:81:c0:af:0b:37:f4:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Oct 9 19:23:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9632f7120917b9ca20d2bb70f8c8619abd1c688f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:72:78:07:b5:8e:01:73:a6:7a:21:55:3e:63:
5f:16:19:36:67:bc:79:9f:12:e5:c0:73:1e:d6:be:
f7:76:6e:ee:53:5e:4d:bc:dd:eb:82:dc:73:97:38:
ca:9e:9e:ef:49:bc:f9:f8:bc:2a:a1:a6:29:e2:28:
6f:a6:b6:cc:03:e1:38:6b:b9:34:53:34:c9:04:df:
75:ac:45:7c:9f:fd:c6:91:72:3f:56:7a:1e:57:8e:
20:6b:bf:63:ff:ec:af:c7:73:52:12:2b:ec:60:01:
08:e4:c9:97:a0:44:bb:5f:72:e4:52:ef:74:53:40:
03:a2:a9:64:40:b2:41:b3:ce:7b:a0:5b:e5:65:05:
c5:57:9a:4d:35:d7:8a:1f:e9:f1:00:a7:1c:7d:a0:
95:34:c7:39:c9:34:de:18:91:8b:d1:1d:8e:aa:ac:
6d:5c:1c:c6:c4:0d:86:2c:f1:93:90:f9:f0:f7:17:
a3:a2:0e:75:6c:29:64:93:42:88:25:5b:91:22:ac:
e8:be:51:e5:06:4c:ff:16:53:41:1a:be:19:1e:7e:
8f:a9:4b:3b:2f:b0:22:39:cb:70:d9:cd:67:1f:07:
6f:04:0d:11:73:a3:d1:83:5b:a7:0f:b8:10:5b:33:
d9:ef:af:50:e9:fb:5a:1c:3e:02:f6:16:79:69:83:
69:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:32:F7:12:09:17:B9:CA:20:D2:BB:70:F8:C8:61:9A:BD:1C:68:8F
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/ljL3EgkXucog0rtw-Mhhmr0caI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:6000::/40
Signature Algorithm: sha256WithRSAEncryption
09:59:17:eb:dd:e8:84:50:21:63:94:97:ae:f5:23:d7:e3:7a:
4b:b6:7d:d2:d5:53:db:a1:95:dd:2c:09:a7:2f:58:2d:1a:70:
90:eb:df:1f:55:c0:4f:f0:30:1f:44:4b:20:a5:74:86:2f:e3:
d3:2e:dc:a7:ae:ab:f4:36:4e:b4:34:48:1a:51:4d:4a:4b:d7:
f6:02:31:f7:62:c4:49:c5:81:78:b3:3b:a6:71:96:1d:fa:af:
73:0b:3c:88:7c:0f:3c:a0:9d:53:41:61:0f:6c:20:10:30:36:
3c:79:d9:be:3d:61:c0:92:99:cf:ea:0d:bb:60:af:66:20:96:
7b:d3:8a:45:1c:7c:0f:9b:32:2b:15:30:ad:2c:a6:4d:b1:5a:
0c:21:9a:68:a7:ef:03:0c:67:e2:ce:ef:5c:09:29:83:f3:65:
bc:a2:f0:15:e7:24:2a:6b:a1:51:a5:30:12:0a:b7:2b:b2:ce:
f5:b3:c7:e8:3d:7d:98:82:38:a6:d3:e5:da:02:74:75:ec:34:
34:b7:fc:cb:68:0c:6a:67:c8:dd:cb:dc:b3:56:15:c2:42:07:
d9:36:26:24:32:14:5b:f6:13:98:d7:8a:c6:27:4f:53:78:21:
ee:ea:a6:94:b5:34:8d:e1:80:04:6e:de:3b:96:2f:b5:fd:96:
d5:5e:ac:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:30:30 2025 by rpki-client