Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/qvHirpXCxsoB9eIC0WbLWRwo008.roa
File: qvHirpXCxsoB9eIC0WbLWRwo008.roa (raw, json)
Hash identifier: bAn0TzuwMfYziMfK1yGmXcbUytulJ/smZQUTGFXB5Eg=
Subject key identifier: AA:F1:E2:AE:95:C2:C6:CA:01:F5:E2:02:D1:66:CB:59:1C:28:D3:4F
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 0199B1456B6F39CF622657717122CB61329A
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/qvHirpXCxsoB9eIC0WbLWRwo008.roa
Signing time: Sat 04 Oct 2025 22:09:00 +0000
ROA not before: Sat 04 Oct 2025 22:09:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213576
IP address blocks: 2a0f:b240:f00::/40 maxlen: 48
2a0f:b244:120::/44 maxlen: 48
2a0f:b244:140::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:b1:45:6b:6f:39:cf:62:26:57:71:71:22:cb:61:32:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Oct 4 22:09:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aaf1e2ae95c2c6ca01f5e202d166cb591c28d34f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a3:46:4a:5d:2e:f1:f3:1f:44:82:f6:97:19:
aa:ed:8a:5a:14:46:51:1b:db:1b:3b:f9:a0:61:b6:
ee:9c:cf:1d:86:f8:76:b0:96:5b:9b:1c:e4:98:85:
30:70:45:bc:e7:9a:65:81:f0:38:b5:ef:38:95:2b:
81:f1:bb:27:2c:dc:62:03:aa:70:5f:0e:29:2c:c0:
8a:1e:b3:12:72:38:84:5f:47:70:c4:58:50:06:3d:
db:20:5f:78:94:ec:31:78:5b:93:06:69:50:70:ca:
7a:e1:fa:6e:0c:fa:a8:ed:bc:c9:92:df:a4:99:dd:
94:c3:62:c8:45:49:71:0b:72:54:e1:c5:38:33:bb:
c5:fe:98:b7:85:9f:3c:6a:b5:c0:98:ac:78:aa:3b:
f2:4b:30:1f:2e:9d:e7:7f:83:d8:19:37:a6:d6:8e:
85:fe:f3:4a:76:c1:f1:81:08:7d:19:7f:a3:01:cf:
42:ce:a8:2d:f3:02:e1:ab:de:ca:c2:36:42:10:3b:
c5:e8:7e:fa:9e:a8:2a:d2:b4:a0:4c:6a:7f:75:44:
27:ec:70:c0:57:e0:57:8a:a7:e8:a6:6b:9f:1c:7c:
cf:15:68:31:a0:63:05:12:39:de:b8:26:86:7c:d9:
bd:76:c3:33:3c:d8:58:33:1f:c0:36:6b:03:b8:a3:
d9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F1:E2:AE:95:C2:C6:CA:01:F5:E2:02:D1:66:CB:59:1C:28:D3:4F
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/qvHirpXCxsoB9eIC0WbLWRwo008.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:f00::/40
2a0f:b244:120::/44
2a0f:b244:140::/44
Signature Algorithm: sha256WithRSAEncryption
51:e1:d5:40:33:1f:71:3a:a8:f6:34:94:8c:13:10:c5:cc:6f:
9b:6f:6f:f0:a7:b8:dc:96:f3:4d:f7:c4:17:60:76:97:ca:c0:
d1:fd:b7:0a:5d:e3:bf:51:29:25:ae:01:27:8d:2a:9d:3d:9b:
17:3f:44:ae:a9:43:ee:b9:78:e7:bb:9e:cf:b1:d8:40:47:93:
a9:65:e8:a9:65:c5:b9:8d:04:60:8d:24:94:73:b9:76:f4:19:
05:b8:25:e3:07:c9:84:98:03:b3:16:0a:b5:cc:8a:e1:4b:ad:
8b:0b:9f:fc:95:84:e8:32:81:5b:09:a4:36:3a:9c:4d:cc:ed:
73:c3:47:25:83:de:e0:4d:21:3c:fb:4b:49:7b:1e:cc:af:e7:
7f:46:31:ac:fb:24:c3:bd:7d:61:e9:f9:ac:5d:63:5d:6c:6e:
ac:97:b2:d4:78:5d:59:88:20:0f:1f:67:d2:ab:ce:09:cc:bd:
9b:84:ae:f4:4e:a9:f2:f3:5e:d4:d2:b4:44:a5:b9:17:8c:82:
23:2e:d0:f4:59:f8:e1:fc:19:74:2f:5c:c4:a7:fa:59:e0:ff:
3b:d4:4f:18:01:83:30:01:65:08:5a:c6:6c:1e:dc:b6:9c:bd:
d2:b0:ec:af:8a:e6:45:ca:f5:13:66:12:f4:ca:b1:71:15:a7:
94:4e:c7:b9
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZmxRWtvOc9iJldxcSLLYTKaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjUxMDA0MjIwOTAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYWYxZTJhZTk1YzJjNmNhMDFmNWUyMDJkMTY2Y2I1OTFjMjhkMzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaNGSl0u8fMfRIL2lxmq7YpaFEZR
G9sbO/mgYbbunM8dhvh2sJZbmxzkmIUwcEW855plgfA4te84lSuB8bsnLNxiA6pw
Xw4pLMCKHrMScjiEX0dwxFhQBj3bIF94lOwxeFuTBmlQcMp64fpuDPqo7bzJkt+k
md2Uw2LIRUlxC3JU4cU4M7vF/pi3hZ88arXAmKx4qjvySzAfLp3nf4PYGTem1o6F
/vNKdsHxgQh9GX+jAc9Czqgt8wLhq97KwjZCEDvF6H76nqgq0rSgTGp/dUQn7HDA
V+BXiqfopmufHHzPFWgxoGMFEjneuCaGfNm9dsMzPNhYMx/ANmsDuKPZsQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFKrx4q6VwsbKAfXiAtFmy1kcKNNPMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvcXZIaXJwWEN4c29COWVJQzBXYkxXUndvMDA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAAjAaAwYAKg+yQA8D
BwQqD7JEASADBwQqD7JEAUAwDQYJKoZIhvcNAQELBQADggEBAFHh1UAzH3E6qPY0
lIwTEMXMb5tvb/CnuNyW8033xBdgdpfKwNH9twpd479RKSWuASeNKp09mxc/RK6p
Q+65eOe7ns+x2EBHk6ll6KllxbmNBGCNJJRzuXb0GQW4JeMHyYSYA7MWCrXMiuFL
rYsLn/yVhOgygVsJpDY6nE3M7XPDRyWD3uBNITz7S0l7Hsyv539GMaz7JMO9fWHp
+axdY11sbqyXstR4XVmIIA8fZ9KrzgnMvZuErvROqfLzXtTStESluReMgiMu0PRZ
+OH8GXQvXMSn+lng/zvUTxgBgzABZQhaxmwe3LacvdKw7K+K5kXK9RNmEvTKsXEV
p5ROx7k=
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:43:02 2025 by rpki-client