Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/4vKXx6NsAqjukaSn6HtDfvIqWyk.roa
File: 4vKXx6NsAqjukaSn6HtDfvIqWyk.roa (raw, json)
Hash identifier: DekSFSvFAdXtSwm1qrTH+fgE+tNLt0LabgaBIqmU1Bw=
Subject key identifier: E2:F2:97:C7:A3:6C:02:A8:EE:91:A4:A7:E8:7B:43:7E:F2:2A:5B:29
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 019C8E520A82FB539A6838144A0B4D35E46C
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/4vKXx6NsAqjukaSn6HtDfvIqWyk.roa
Signing time: Tue 24 Feb 2026 06:24:27 +0000
ROA not before: Tue 24 Feb 2026 06:24:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202986
IP address blocks: 2a0f:b240:1200::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8e:52:0a:82:fb:53:9a:68:38:14:4a:0b:4d:35:e4:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 24 06:24:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e2f297c7a36c02a8ee91a4a7e87b437ef22a5b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7d:28:cd:ce:47:6c:55:e1:02:f7:4c:a9:bd:
aa:58:b3:bb:23:20:87:c3:47:49:f3:4d:14:a5:c2:
98:ab:3c:cc:a3:bd:89:85:fd:f0:9d:77:b3:5d:0e:
8e:8c:a9:6e:b5:c6:05:43:40:41:aa:84:88:d1:7f:
69:74:80:27:6f:aa:7b:e4:43:3d:a9:6f:a3:c2:7e:
a8:a1:3b:f7:ad:26:4a:37:9d:28:d0:d5:83:ea:4d:
76:1c:58:ae:7d:f3:ce:ad:46:c6:35:bc:b9:d8:98:
64:4c:42:40:f3:39:9a:fb:b6:36:99:4c:e8:c0:33:
4a:02:80:7d:64:e5:f7:26:1d:f2:bc:19:b0:04:24:
48:28:21:36:8a:c7:bd:ed:60:cc:e7:4d:b7:91:b5:
ef:ad:62:2a:6b:c2:41:59:60:66:de:6a:e5:98:43:
6d:22:f2:78:b0:7d:f4:c2:06:df:4a:06:9d:62:b3:
33:e8:d2:ba:af:a0:2f:23:0e:b9:3f:68:5c:b1:cf:
2e:74:86:42:06:ab:e1:78:23:4e:3c:63:3b:ac:9b:
08:f0:7f:69:38:6f:29:d4:10:58:65:e4:e6:57:7a:
eb:06:74:79:2b:d3:20:9f:ee:97:0c:f2:d4:94:9c:
6d:fa:ed:e3:6a:83:6b:75:4f:8d:3c:33:18:cb:e9:
c2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F2:97:C7:A3:6C:02:A8:EE:91:A4:A7:E8:7B:43:7E:F2:2A:5B:29
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/4vKXx6NsAqjukaSn6HtDfvIqWyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:1200::/40
Signature Algorithm: sha256WithRSAEncryption
8a:d9:b8:9c:10:d3:e4:52:99:13:8c:2c:9d:2b:86:36:cb:6b:
71:e0:9a:c7:e1:3b:d3:d1:fd:bd:0f:f2:db:8a:7e:b8:7e:fd:
00:e8:41:cb:53:26:7c:d6:e9:d8:ab:29:10:c6:ff:0d:5d:24:
21:81:b7:b1:93:af:e5:9a:6c:69:69:b4:c1:b4:db:3f:58:58:
b0:b9:62:67:ac:3e:c2:52:92:80:35:34:e1:3c:7d:20:6d:00:
09:eb:4d:a0:ab:a4:7a:9d:64:92:9e:e3:7d:67:c1:4c:48:49:
8c:c5:98:c1:3c:16:fa:88:03:bf:02:2c:b3:01:8f:4c:43:27:
a0:a9:a0:20:81:f8:31:86:88:3e:1a:ff:3f:8b:a3:71:7a:eb:
f0:04:cb:95:f6:c5:ab:9b:16:65:4d:49:d3:77:ff:c2:72:49:
54:d0:8c:58:ca:4b:f3:fe:4c:30:31:d8:56:6d:d3:44:35:24:
06:ee:77:81:9e:9e:64:ea:66:8f:04:bf:b2:96:7b:9b:a4:41:
48:1e:48:13:25:25:33:c4:64:0e:93:4f:24:2f:5a:9d:f5:dd:
ee:19:42:d0:a6:6d:8b:c8:3d:ca:16:38:00:21:fb:a1:cf:bc:
72:86:dd:6b:9f:c3:de:4c:4e:8f:ff:d7:28:6b:0b:96:10:0b:
e0:e9:84:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:59:38 2026 by rpki-client