Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/1-Uii71juSNqNOw9LWopbg6xlDg8.roa
File: 1-Uii71juSNqNOw9LWopbg6xlDg8.roa (raw, json)
Hash identifier: /8O82AWLyIM3xtL32Ysuj6q69OyIy85/JbOlYOALLFU=
Subject key identifier: F9:48:A2:EF:58:EE:48:DA:8D:3B:0F:4B:5A:8A:5B:83:AC:65:0E:0F
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 019A31C36FDB9A610C4B5B648A375954B1E6
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/1-Uii71juSNqNOw9LWopbg6xlDg8.roa
Signing time: Wed 29 Oct 2025 20:58:03 +0000
ROA not before: Wed 29 Oct 2025 20:58:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198804
IP address blocks: 2a0f:b240:7a00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:31:c3:6f:db:9a:61:0c:4b:5b:64:8a:37:59:54:b1:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Oct 29 20:58:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f948a2ef58ee48da8d3b0f4b5a8a5b83ac650e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b0:de:40:f3:6d:23:6a:89:87:af:2b:9e:8f:
d4:2c:55:df:80:df:b5:88:80:dc:ab:f7:47:0c:df:
4b:4b:f1:3d:6e:fd:cf:ff:cb:2d:0f:27:ba:ef:fd:
1d:64:16:95:cd:f5:03:fc:43:3d:b1:e1:4d:59:f9:
59:ab:db:23:67:78:98:67:71:81:88:fb:5a:1e:6e:
20:42:d4:df:4c:f7:45:7c:df:c1:e6:9b:3c:6e:e1:
e8:a3:da:f7:06:4e:7e:dc:1d:cf:2f:64:e1:7c:9e:
e3:ee:26:84:22:3f:e5:24:06:45:c0:34:7a:1b:57:
d6:9d:02:fc:1a:f0:98:54:90:fd:bf:66:63:17:5d:
09:84:b7:f9:eb:93:bd:fb:4b:51:58:66:0a:e3:94:
8b:60:96:0a:bb:54:19:44:1e:fa:88:de:fa:c8:98:
b6:7e:1a:f8:44:36:05:56:b1:2b:8a:10:ac:05:76:
f0:c3:e1:23:87:20:76:59:74:73:8b:fd:2d:8e:b7:
49:25:94:0c:ee:a0:c7:53:7b:7a:b2:e2:26:38:c8:
33:90:22:45:17:66:42:af:b4:3f:12:5c:92:30:d5:
5b:42:a0:b6:8a:f2:1f:74:18:c0:14:5b:aa:2c:11:
7a:d0:36:58:ba:8c:c0:c3:71:c0:6d:fc:96:52:29:
b1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:48:A2:EF:58:EE:48:DA:8D:3B:0F:4B:5A:8A:5B:83:AC:65:0E:0F
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/1-Uii71juSNqNOw9LWopbg6xlDg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:7a00::/40
Signature Algorithm: sha256WithRSAEncryption
2f:e0:9a:4a:eb:d3:0f:95:70:7d:46:1a:6f:5e:81:e8:92:65:
a4:3c:94:12:86:fe:25:89:a9:de:20:07:54:25:6f:8b:8f:bd:
36:8c:dd:1d:12:4e:55:b8:51:c2:d5:75:d3:2a:53:29:3f:8a:
66:b7:6b:c1:b3:57:d5:2f:da:a2:0b:0e:7e:ae:63:23:bb:74:
d0:4f:d9:94:f9:81:66:a6:57:31:41:62:d9:0b:bb:13:ec:9d:
6d:da:b9:aa:38:83:37:4e:dc:d8:7d:7c:11:5b:76:b2:43:36:
52:f6:94:0f:29:0f:4a:41:59:2c:cc:f6:27:2a:b9:16:63:eb:
2f:b7:fe:ff:c2:1b:08:0d:eb:62:8b:fe:24:44:0f:1a:b6:ae:
e4:0f:d5:d2:f4:fe:11:26:38:93:74:8e:4d:cf:5f:ab:93:c0:
bc:3d:05:9f:9f:ea:3e:b6:86:3a:b0:1e:27:85:ce:64:ad:ec:
47:5d:c7:9a:98:a7:2e:a6:32:d1:80:14:4c:6a:4f:ba:ce:f5:
5d:a8:31:d8:0e:21:b8:02:53:01:2d:4a:cc:46:c0:e7:70:f8:
cf:51:1c:b1:aa:28:b5:8e:26:86:c8:9a:65:d7:a4:30:a7:ca:
b8:bc:e9:a1:61:62:62:66:23:a2:49:dc:fa:cc:08:47:69:4c:
31:76:e4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:41:28 2025 by rpki-client