Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/sqMe6s4256fuZkeh2rbZDjo1UB0.roa
File: sqMe6s4256fuZkeh2rbZDjo1UB0.roa (raw, json)
Hash identifier: SEqzMiTIpsUMOY2HIooXM63LgUfCyoCyKeP8HB2sytk=
Subject key identifier: B2:A3:1E:EA:CE:36:E7:A7:EE:66:47:A1:DA:B6:D9:0E:3A:35:50:1D
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 0199E3DC201A692C5C60DA795B0DF4DA234D
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/sqMe6s4256fuZkeh2rbZDjo1UB0.roa
Signing time: Tue 14 Oct 2025 17:54:38 +0000
ROA not before: Tue 14 Oct 2025 17:54:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207258
IP address blocks: 2a0f:b240:6800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:e3:dc:20:1a:69:2c:5c:60:da:79:5b:0d:f4:da:23:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Oct 14 17:54:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2a31eeace36e7a7ee6647a1dab6d90e3a35501d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:47:e0:05:7d:59:80:d7:7b:02:cd:7c:bb:9d:
40:27:53:e3:c4:39:08:0f:f3:1e:19:04:90:78:15:
a1:ec:45:ef:54:b8:16:5f:3d:ea:d3:32:f5:f0:ce:
a8:81:f5:9e:1e:c9:76:2c:6b:6b:2c:8d:f1:94:a1:
0e:c1:db:f4:3a:fe:4c:24:63:dc:7d:74:05:3f:35:
cf:32:0b:35:a3:aa:8f:e3:c5:b7:a5:d2:f7:bb:e4:
77:c2:c5:7c:53:30:a6:ed:25:bd:00:9b:38:9a:0d:
27:ba:17:61:c5:79:3a:c7:c6:9c:5b:d9:10:6d:f3:
db:3b:d0:37:80:ed:e7:b7:09:4e:6e:3f:b5:85:06:
95:f2:e7:13:49:5c:67:f5:a7:0f:30:f4:42:c4:7f:
66:8b:3b:3d:18:e7:d6:2a:a2:dd:44:27:a2:15:58:
ed:97:7a:49:ac:fa:21:06:84:64:76:c0:e5:04:58:
40:33:52:68:a1:9d:0a:b6:0e:0f:59:18:9f:31:51:
9c:dc:4d:b3:43:d4:3b:ec:38:f7:23:08:a8:4f:ba:
34:be:8b:e4:28:2d:8f:9e:27:ee:78:a7:7c:0b:0d:
3f:e6:8f:0b:56:ec:9c:4e:e0:1f:50:eb:eb:ca:50:
8e:c8:5a:af:39:a1:3d:1b:96:15:e1:13:6d:ea:ed:
a4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A3:1E:EA:CE:36:E7:A7:EE:66:47:A1:DA:B6:D9:0E:3A:35:50:1D
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/sqMe6s4256fuZkeh2rbZDjo1UB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:6800::/40
Signature Algorithm: sha256WithRSAEncryption
67:38:bc:5f:8a:19:37:f9:7f:f7:70:39:e3:00:60:7f:0e:07:
8d:94:bc:59:2a:fc:f7:6d:66:06:22:87:a6:6a:0c:6d:20:42:
92:af:ad:ca:92:b7:26:ff:0e:76:bb:49:81:3e:e0:61:e3:62:
1e:d9:86:50:2e:78:02:15:b1:d1:20:2b:ad:08:d0:99:d3:1c:
cd:ac:4d:08:c6:be:dd:53:54:49:05:8f:24:b6:99:1f:57:35:
20:2a:94:8d:39:d4:3d:7d:f8:e2:c8:8e:e3:96:0b:2f:96:68:
e2:a1:d0:75:1c:64:79:30:90:e9:de:59:e4:d7:b8:65:60:59:
71:82:cc:88:0f:c8:b9:05:4f:b0:1e:ef:76:6e:10:21:a4:7a:
c5:b6:78:69:7e:3e:ad:c7:8b:87:d3:cc:9a:22:1d:13:f2:59:
fa:b4:59:9f:f8:6b:53:a8:7e:b5:59:a1:2d:72:2d:39:47:b7:
b3:26:ca:9a:09:16:85:ec:ea:cd:93:e9:6d:42:36:f2:1c:7d:
8d:56:f2:ca:09:24:d3:e4:dc:ed:d5:7c:bb:56:e4:fe:0a:c7:
a2:46:78:d4:12:e2:e3:f0:01:f1:6d:49:ae:e2:ee:71:46:1a:
41:24:7f:25:14:86:64:0a:05:8c:6a:e2:3f:76:e2:0d:ca:31:
3f:69:99:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:56:03 2025 by rpki-client