Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/8_RYnKHx9-wmKgOX9E2Yctr_txU.roa
File: 8_RYnKHx9-wmKgOX9E2Yctr_txU.roa (raw, json)
Hash identifier: CKB0iKAVModnvsiUCSj/52ruHm1fCCnt/gK755T/iY4=
Subject key identifier: F3:F4:58:9C:A1:F1:F7:EC:26:2A:03:97:F4:4D:98:72:DA:FF:B7:15
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 019A3B92BAE1F99371E71D4DADE820C4EF72
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/8_RYnKHx9-wmKgOX9E2Yctr_txU.roa
Signing time: Fri 31 Oct 2025 18:41:03 +0000
ROA not before: Fri 31 Oct 2025 18:41:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210667
IP address blocks: 2a0f:b240:8300::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3b:92:ba:e1:f9:93:71:e7:1d:4d:ad:e8:20:c4:ef:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Oct 31 18:41:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3f4589ca1f1f7ec262a0397f44d9872daffb715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:08:4e:83:08:f4:0e:49:86:38:71:d1:88:8f:
09:ac:a6:dc:85:27:0b:ae:50:93:c0:7b:41:27:2c:
d4:89:58:38:34:4b:c4:30:d9:03:a1:cd:f3:b3:b9:
67:c5:38:38:09:06:53:ac:d0:1b:fc:53:e7:80:a6:
64:6b:c5:20:1a:5d:c8:00:1e:05:11:f2:31:48:3a:
d0:27:cc:5d:75:9e:0a:3a:55:68:43:69:e0:a9:68:
66:b5:67:eb:ab:af:c0:1b:18:a4:83:0d:94:a9:c3:
b1:53:11:54:e4:79:87:59:30:ec:51:25:a8:c3:5b:
e2:be:ad:89:e6:71:7f:cf:6e:8b:2d:71:81:ec:d6:
84:a6:fd:41:79:7c:61:10:29:51:df:dd:25:95:2d:
c6:52:92:16:81:31:96:70:34:6e:ad:0f:9e:b7:4d:
2b:44:5b:3b:72:d3:de:4b:4d:fb:0d:b2:ec:b8:cb:
cc:c6:10:c4:d1:de:f2:b9:f5:1d:55:13:cb:b2:91:
6c:1a:21:b4:2b:b0:d9:db:17:82:cf:d7:19:15:f4:
25:7b:b8:d8:09:97:a3:e9:bb:a9:ab:20:f9:9f:b7:
d9:d1:be:10:6f:fb:7a:71:ab:40:51:7f:c8:0b:66:
04:11:23:f1:7a:b6:58:24:d4:6f:a7:e4:42:2e:3d:
37:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F4:58:9C:A1:F1:F7:EC:26:2A:03:97:F4:4D:98:72:DA:FF:B7:15
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/8_RYnKHx9-wmKgOX9E2Yctr_txU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:8300::/40
Signature Algorithm: sha256WithRSAEncryption
44:7c:87:26:70:36:cd:e1:96:64:3e:d9:28:1e:79:4a:ce:50:
13:19:39:86:ab:c8:50:93:70:82:24:c9:9b:43:84:dd:47:af:
a1:b9:2f:00:90:19:25:27:15:97:b4:fa:18:47:eb:14:cd:03:
1b:5b:cd:74:13:e3:2d:b1:95:05:c5:8c:70:d3:2f:29:5c:35:
d0:e8:0a:9b:5f:74:b0:bd:c8:22:aa:da:d8:a7:92:61:47:6a:
97:7a:7a:bd:d8:ee:fc:07:6f:97:6d:e4:b3:51:fc:bb:7a:07:
08:c3:79:80:77:12:5d:e3:67:ae:a1:d8:dc:34:b0:51:9b:64:
40:d1:2f:41:0f:96:b1:00:77:7c:f9:00:3f:f5:eb:3c:02:7a:
d2:16:ea:cf:fe:bc:87:c4:8a:03:e6:47:b3:b2:71:02:6c:ec:
fc:62:48:a2:fb:4e:48:93:18:6f:e6:7f:e2:d9:53:00:22:f0:
41:7c:05:a9:3d:fd:23:1a:97:52:34:ea:b8:72:71:6c:8d:b2:
46:ee:a5:70:ff:c1:eb:89:28:8c:fd:55:00:0e:9f:7e:f4:84:
e6:fe:2b:e0:b0:b2:ea:74:ae:c4:55:d7:02:51:fb:c1:bb:4f:
30:29:bb:01:09:de:3b:a6:75:7d:ea:18:85:0d:c1:1b:e8:81:
34:1e:e6:c8
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZo7krrh+ZNx5x1NreggxO9yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjUxMDMxMTg0MTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmM2Y0NTg5Y2ExZjFmN2VjMjYyYTAzOTdmNDRkOTg3MmRhZmZiNzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QhOgwj0DkmGOHHRiI8JrKbchScL
rlCTwHtBJyzUiVg4NEvEMNkDoc3zs7lnxTg4CQZTrNAb/FPngKZka8UgGl3IAB4F
EfIxSDrQJ8xddZ4KOlVoQ2ngqWhmtWfrq6/AGxikgw2UqcOxUxFU5HmHWTDsUSWo
w1vivq2J5nF/z26LLXGB7NaEpv1BeXxhEClR390llS3GUpIWgTGWcDRurQ+et00r
RFs7ctPeS037DbLsuMvMxhDE0d7yufUdVRPLspFsGiG0K7DZ2xeCz9cZFfQle7jY
CZej6bupqyD5n7fZ0b4Qb/t6catAUX/IC2YEESPxerZYJNRvp+RCLj03RwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFPP0WJyh8ffsJioDl/RNmHLa/7cVMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvOF9SWW5LSHg5LXdtS2dPWDlFMlljdHJfdHhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg+yQIMw
DQYJKoZIhvcNAQELBQADggEBAER8hyZwNs3hlmQ+2SgeeUrOUBMZOYaryFCTcIIk
yZtDhN1Hr6G5LwCQGSUnFZe0+hhH6xTNAxtbzXQT4y2xlQXFjHDTLylcNdDoCptf
dLC9yCKq2tinkmFHapd6er3Y7vwHb5dt5LNR/Lt6BwjDeYB3El3jZ66h2Nw0sFGb
ZEDRL0EPlrEAd3z5AD/16zwCetIW6s/+vIfEigPmR7OycQJs7PxiSKL7TkiTGG/m
f+LZUwAi8EF8Bak9/SMal1I06rhycWyNskbupXD/weuJKIz9VQAOn370hOb+K+Cw
sup0rsRV1wJR+8G7TzApuwEJ3jumdX3qGIUNwRvogTQe5sg=
-----END CERTIFICATE-----
Generated at Wed Nov 5 01:08:06 2025 by rpki-client