Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/2n-YNMDmEMgqlMkePpF4hDtov3Q.roa
File: 2n-YNMDmEMgqlMkePpF4hDtov3Q.roa (raw, json)
Hash identifier: i6F6DZ+YmJbH6DjeLRZAIlY70SMSdmSEREGAdhbflT4=
Subject key identifier: DA:7F:98:34:C0:E6:10:C8:2A:94:C9:1E:3E:91:78:84:3B:68:BF:74
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 01A0A0B76243E05016D4238E4B30E7535615
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/2n-YNMDmEMgqlMkePpF4hDtov3Q.roa
Signing time: Mon 14 Sep 2026 16:19:27 +0000
ROA not before: Mon 14 Sep 2026 16:19:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219331
IP address blocks: 2a0f:b240:1600::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 20:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a0:b7:62:43:e0:50:16:d4:23:8e:4b:30:e7:53:56:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Sep 14 16:19:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da7f9834c0e610c82a94c91e3e9178843b68bf74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:35:9c:ee:0c:5b:a7:eb:5d:48:3c:6a:bc:ef:
c2:f5:10:a4:7c:56:ed:41:b1:43:65:fb:5d:f7:15:
d3:4f:99:91:51:5b:21:96:c5:7f:56:64:ab:eb:01:
e4:96:c3:37:ff:f8:ea:b5:42:81:c0:e9:e0:a6:0a:
54:94:bf:9d:ac:ae:9a:26:2d:4c:66:be:13:1a:a9:
2e:25:d5:e7:68:30:3b:b3:d6:87:94:89:09:f4:6b:
57:9b:fd:bb:42:a2:f7:d7:63:73:0e:1f:4f:7a:f2:
15:38:71:89:81:c6:aa:c8:08:88:a0:d0:7d:7f:c4:
ee:7c:e3:6d:38:23:dc:56:42:e1:c8:99:5d:41:86:
50:b2:ac:45:51:c4:a1:26:83:b8:d8:d2:b4:ee:80:
5a:84:59:df:e9:7e:c3:97:89:35:a7:7f:93:66:d4:
df:41:82:13:e2:99:60:97:06:0d:fb:75:1b:60:bd:
c9:f9:2d:3c:bc:8d:db:a1:ff:85:02:4d:d9:0a:e7:
26:1c:12:b1:78:87:3f:63:eb:c5:a9:32:c6:e7:b1:
e6:56:a6:81:e2:df:37:dd:45:1d:b8:b4:a2:4a:49:
30:41:96:f8:a9:80:11:9d:76:0f:cd:45:d3:87:a7:
f5:ec:03:ba:9f:35:ca:cb:c2:ed:fa:2c:90:65:db:
22:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:7F:98:34:C0:E6:10:C8:2A:94:C9:1E:3E:91:78:84:3B:68:BF:74
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/2n-YNMDmEMgqlMkePpF4hDtov3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:1600::/40
Signature Algorithm: sha256WithRSAEncryption
66:f5:f4:dc:82:92:85:83:c1:dd:f8:c8:66:ea:33:29:b4:91:
78:75:6f:95:60:11:77:5a:79:1f:45:b7:65:0b:4e:f6:fc:1f:
2e:d2:87:18:d0:01:d8:c6:22:74:df:1d:56:00:e2:86:5a:78:
33:8c:71:b9:c2:14:22:6d:62:7d:8e:2c:29:ff:6c:65:6a:00:
f8:7c:b2:03:d8:58:f9:4c:a3:8c:8b:b9:9c:a1:a2:ec:cc:26:
79:b9:fd:5a:7a:72:5a:c9:d6:bc:09:78:55:e9:32:c5:43:d6:
66:b1:94:bb:ff:b4:75:0c:c9:cd:1f:f3:e0:92:37:1e:dc:3b:
50:1a:6b:6c:65:f9:58:ea:52:64:88:e6:76:30:bf:e6:3c:6a:
b9:97:ff:4d:28:99:1e:e7:f6:27:51:aa:1c:8b:92:56:74:bf:
48:2f:85:f3:ae:34:ab:70:ca:1b:42:88:7b:bf:b3:6a:84:05:
94:47:4f:7d:50:62:fc:49:0b:b7:0e:1a:8b:de:a7:5e:07:67:
4d:46:e8:db:96:bb:19:07:ba:11:93:bf:0b:2b:2a:33:d0:33:
bd:a9:de:c2:bd:13:81:6b:8a:88:3b:22:8a:ca:e8:af:20:05:
99:4e:38:5a:ee:08:cf:78:3b:de:3d:83:f2:9f:ec:bb:1c:7b:
3b:2e:75:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:16:20 2026 by rpki-client