Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/35_eKzezbjTexTglf1AREYS1LEo.roa
File: 35_eKzezbjTexTglf1AREYS1LEo.roa (raw, json)
Hash identifier: rIpavloog5YQwDUsaCpze40VpaqKncx3bjiQH5GslcQ=
Subject key identifier: DF:9F:DE:2B:37:B3:6E:34:DE:C5:38:25:7F:50:11:11:84:B5:2C:4A
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 019A36B1F393FC0E7143F2B357A148C6FCDB
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/35_eKzezbjTexTglf1AREYS1LEo.roa
Signing time: Thu 30 Oct 2025 19:57:03 +0000
ROA not before: Thu 30 Oct 2025 19:57:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401903
IP address blocks: 2a0f:b240:6d00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:36:b1:f3:93:fc:0e:71:43:f2:b3:57:a1:48:c6:fc:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Oct 30 19:57:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df9fde2b37b36e34dec538257f50111184b52c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b9:fb:7a:1e:3b:dc:74:60:67:35:2f:21:5f:
89:29:d6:7c:ac:ca:6c:28:75:1d:2a:43:61:11:5b:
53:2f:ad:04:4c:15:a7:9c:db:eb:a5:ae:84:f1:85:
14:9f:47:ba:c1:ee:7a:82:9f:de:9f:e4:b0:d2:30:
8f:8a:92:54:f3:28:f2:1e:d0:52:3c:70:63:c0:30:
14:2c:02:92:a0:52:87:84:3a:70:69:8d:0c:27:dd:
27:28:6d:27:41:8d:72:77:08:b9:59:1e:82:94:4d:
a3:52:a4:96:bd:bd:e2:b7:e8:bb:8b:9b:fb:8b:ed:
51:cb:89:ab:54:a6:82:73:08:4b:47:40:58:69:7f:
ed:3d:4f:c1:d7:16:99:dd:28:30:ff:71:2b:08:24:
59:f5:e8:2e:85:d2:b2:26:44:13:05:e3:20:ae:bc:
45:03:94:fc:b1:8a:cc:d9:46:91:11:9b:4b:7b:60:
0d:4a:57:66:98:b7:bb:52:f7:db:be:cf:12:57:c4:
23:0f:9f:91:44:70:25:93:18:bb:b4:f6:13:26:88:
22:26:26:3d:b2:4c:1d:3b:fa:fc:87:09:15:c1:75:
21:6d:c9:5e:d7:7f:cf:59:8c:0f:16:b6:17:dd:5f:
43:88:08:01:a9:49:d9:d1:42:0a:05:08:0d:a2:77:
cf:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:9F:DE:2B:37:B3:6E:34:DE:C5:38:25:7F:50:11:11:84:B5:2C:4A
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/35_eKzezbjTexTglf1AREYS1LEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:6d00::/40
Signature Algorithm: sha256WithRSAEncryption
28:9a:e7:1c:1e:6a:60:82:f6:87:d6:fc:89:61:e9:76:f1:76:
1e:08:ee:0c:29:22:c3:c4:ad:c3:aa:f3:fe:4c:a7:a0:f6:0d:
7d:8f:a0:74:a2:bb:d9:5e:f1:85:eb:cc:f6:89:01:7b:4d:d0:
e4:c3:6b:e2:56:c8:85:10:f9:f8:9e:b0:80:81:20:39:c1:e5:
04:2a:4e:35:fe:48:30:1d:38:2d:48:77:cd:7b:d8:72:a3:ed:
78:8d:5a:94:5e:64:60:4a:9d:7d:3b:a5:ba:83:fe:e3:e9:a1:
76:7c:e8:74:b8:34:92:ab:53:45:e6:46:b3:c3:f2:6e:20:58:
ae:c5:e2:80:56:b0:88:dd:e4:14:bb:2c:37:83:56:a9:d6:b8:
8f:e4:87:bb:61:2a:0c:74:da:d4:ac:ec:ee:7b:43:5e:0c:ac:
09:e1:5d:e9:18:27:22:a9:51:33:57:54:85:4f:e9:62:f6:fa:
a8:4b:bc:ef:0a:c4:ab:aa:d6:31:77:46:6d:80:c2:d9:8f:6d:
1d:9e:c9:45:36:7e:2f:b2:6a:16:31:0a:a7:60:b2:a6:90:67:
76:07:32:bb:c6:fb:3f:a9:d4:cc:d2:a9:91:8f:a0:d5:57:65:
6e:fb:e7:1e:8d:56:54:7f:b5:fc:0e:05:df:7e:44:24:2d:c8:
a6:d4:dd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:57:23 2025 by rpki-client