Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/9WnWanzP4sSDgsi0VPy-9PrjTvI.roa
File: 9WnWanzP4sSDgsi0VPy-9PrjTvI.roa (raw, json)
Hash identifier: S0CmDXRPhT9S5EqjtU4PfpHzz6uvjyhjr5vAa1t11co=
Subject key identifier: F5:69:D6:6A:7C:CF:E2:C4:83:82:C8:B4:54:FC:BE:F4:FA:E3:4E:F2
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 019A361390FA6D7F24C66E37CE7F1204CF1D
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/9WnWanzP4sSDgsi0VPy-9PrjTvI.roa
Signing time: Thu 30 Oct 2025 17:04:03 +0000
ROA not before: Thu 30 Oct 2025 17:04:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207113
IP address blocks: 2a0f:b240:8000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:36:13:90:fa:6d:7f:24:c6:6e:37:ce:7f:12:04:cf:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Oct 30 17:04:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f569d66a7ccfe2c48382c8b454fcbef4fae34ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ad:7d:53:bd:78:e9:82:29:ac:b9:22:c0:a4:
3e:98:24:e8:dc:07:84:9d:17:49:67:c8:f7:c8:f0:
06:eb:60:e3:74:fb:e1:fe:04:f7:be:28:fe:a9:b0:
c5:54:1c:bd:36:86:ed:8d:f5:fe:1e:ac:5a:96:79:
f8:cf:4b:7c:22:73:ad:34:d5:50:60:5d:9d:bd:91:
03:2c:7f:84:83:1f:d9:f7:64:90:30:54:57:4c:7f:
bc:76:80:b6:fc:b1:d0:2d:b3:2a:7e:1a:18:76:d4:
67:9d:37:77:12:82:56:ff:f6:cd:7b:99:ba:a0:2c:
0f:83:00:2a:34:73:42:2c:da:c3:1a:2a:d4:ed:5f:
39:97:99:27:3d:d8:1e:29:46:84:c6:a8:a1:24:9b:
14:93:96:80:1a:e9:b9:1b:d4:2c:ac:b1:d8:36:ff:
12:f0:4a:7e:37:76:98:dd:93:df:32:ee:ae:dd:26:
62:4d:60:1f:f2:ba:c8:d5:f8:d9:5f:7a:93:b4:2a:
1d:6f:6a:65:a8:f6:8d:50:e6:79:9a:3f:0b:f7:1d:
c3:12:11:63:5f:d1:32:44:38:ff:4c:bc:23:dc:6d:
99:a6:a8:ac:46:9c:8a:2d:e4:f8:50:86:0c:b0:41:
44:36:e5:9a:79:24:0a:76:65:fb:be:8a:e3:52:34:
27:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:69:D6:6A:7C:CF:E2:C4:83:82:C8:B4:54:FC:BE:F4:FA:E3:4E:F2
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/9WnWanzP4sSDgsi0VPy-9PrjTvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:8000::/40
Signature Algorithm: sha256WithRSAEncryption
8e:88:db:e5:87:b5:c4:cf:f7:a5:26:ed:ea:62:e1:38:05:eb:
91:a6:6e:65:1c:0a:d6:45:a2:c2:ad:bc:83:44:b0:ec:06:55:
3c:e9:1f:33:a0:91:05:bc:23:2b:9b:17:d4:39:f6:0b:76:c8:
c4:41:8f:47:af:d4:97:00:36:be:88:50:90:41:6a:38:9c:a3:
96:7a:68:28:f9:59:37:27:1e:8b:b6:b5:ea:0d:94:58:29:e5:
a1:2b:bc:33:17:47:61:47:55:66:02:53:91:29:d6:33:78:f5:
de:69:70:45:d8:17:f9:ce:55:52:f6:60:16:1c:14:a8:f0:ee:
0d:61:43:29:77:e4:eb:fa:aa:b1:cf:26:b3:bb:b8:3a:73:26:
03:f3:58:02:12:75:61:63:1f:6b:6a:59:6f:7f:a6:17:a3:4e:
12:05:26:d4:d4:4c:16:65:37:3a:a9:49:da:94:57:ed:b6:05:
07:58:ff:70:62:c0:62:9a:4f:be:7e:92:ed:e3:d5:59:26:46:
64:0e:40:8a:3d:ef:b5:77:28:eb:29:99:45:a2:6f:d9:47:66:
36:7d:97:45:ca:7c:89:49:3f:78:8c:f4:02:c1:21:0f:ba:63:
f9:8d:86:26:f0:73:fb:a4:d8:ea:39:da:fd:33:b2:33:34:83:
c5:1d:49:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:30:56 2025 by rpki-client