Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/n0vZE3GZZmeQ6oGnm0IGgRUbBek.roa
File: n0vZE3GZZmeQ6oGnm0IGgRUbBek.roa (raw, json)
Hash identifier: 3IWhHPdkcGgvhj25xkdLkp/k68ZiMoHYDuMnLxtqAd8=
Subject key identifier: 9F:4B:D9:13:71:99:66:67:90:EA:81:A7:9B:42:06:81:15:1B:05:E9
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 0199FBBF423648723DC38B1C4479786A9D45
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/n0vZE3GZZmeQ6oGnm0IGgRUbBek.roa
Signing time: Sun 19 Oct 2025 09:13:59 +0000
ROA not before: Sun 19 Oct 2025 09:13:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206042
IP address blocks: 2a0f:b240:7200::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:bf:42:36:48:72:3d:c3:8b:1c:44:79:78:6a:9d:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Oct 19 09:13:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f4bd9137199666790ea81a79b420681151b05e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9f:b2:d3:af:ed:c2:cc:b8:7f:f4:0d:a1:43:
a8:90:b0:86:97:b6:a0:91:ea:ca:5a:91:6c:37:50:
59:14:08:66:11:69:ff:ba:39:c8:aa:2c:7b:cf:f9:
4e:79:e3:12:3f:df:b3:41:39:84:08:55:a4:69:a6:
b9:f0:f7:51:38:e7:42:cb:64:1b:99:da:a2:7e:2b:
70:9f:b4:b9:ad:b2:4a:e8:8c:f8:ce:04:99:b4:f8:
71:48:e0:ee:78:78:b2:dd:ea:c1:c8:fb:47:b8:1e:
5f:6b:44:9f:0c:6d:e1:c9:7c:72:c1:7a:6c:d1:e4:
06:6d:8a:26:5a:3c:a6:f2:1d:9b:d6:ca:06:37:36:
ba:b6:42:67:3d:08:e6:b2:95:35:26:c3:7f:1d:c7:
c5:f3:55:2f:8c:18:da:1b:7c:5c:0f:99:f0:39:73:
15:fe:a7:43:19:24:4c:b6:27:7e:f3:ca:9d:0d:68:
00:ab:17:76:77:4f:fe:6a:57:76:54:da:17:1d:a1:
44:c1:69:b6:e8:84:40:8d:ed:be:41:e4:7b:49:c2:
03:82:e8:ba:21:3c:ab:e0:a3:6f:b8:74:49:fd:6e:
ea:05:a9:4e:80:ef:27:7b:d9:41:66:89:a4:20:c0:
94:cc:0a:76:e6:88:6b:59:2b:1a:1d:c2:4d:4d:c3:
76:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:4B:D9:13:71:99:66:67:90:EA:81:A7:9B:42:06:81:15:1B:05:E9
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/n0vZE3GZZmeQ6oGnm0IGgRUbBek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:7200::/40
Signature Algorithm: sha256WithRSAEncryption
81:33:e8:8b:68:99:6f:ef:80:78:9c:d2:6f:c1:3a:4f:fa:82:
14:2d:66:7a:ce:73:19:9b:d9:81:c3:b5:6c:5e:9d:2b:09:36:
38:de:f0:b4:75:a7:7b:7a:9c:9d:9b:81:5a:40:5b:98:b8:a6:
04:e5:e8:b7:ae:0d:f4:d1:ca:46:fd:c8:0c:60:c8:ee:90:a9:
87:9b:1c:29:da:c5:c1:3d:8b:9b:ec:88:01:ad:71:c9:9f:2d:
c6:24:84:26:b8:62:47:ab:bb:41:d9:0d:f7:8b:53:7a:56:47:
65:52:7a:4c:e5:06:a1:5b:03:cc:3e:ab:74:ba:b7:7e:7e:2e:
e5:e9:78:ef:86:40:41:40:6d:d6:b0:b2:bb:5c:c6:ef:16:bf:
dd:58:ce:a5:8d:2a:27:8e:16:1b:f6:b2:5b:72:2e:4e:3d:19:
5d:34:b5:8a:ab:30:25:b9:9b:8c:6e:c7:aa:6c:0e:44:45:ba:
04:95:1a:58:d8:bc:85:a5:f4:bb:b8:cb:a2:8e:d0:54:12:cd:
30:71:90:e2:2d:bf:1c:f1:98:eb:ed:fb:8a:ac:05:df:c3:4f:
12:86:4c:f2:ef:3e:04:45:aa:20:96:38:9d:87:93:fc:ab:87:
e0:5c:74:90:80:a4:18:7e:bb:2c:f4:7b:86:0c:4f:c8:92:54:
b1:44:d1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:58:48 2025 by rpki-client