Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Ag_qGpbxSxbHDXeN3y6aueB2QJE.roa
File: Ag_qGpbxSxbHDXeN3y6aueB2QJE.roa (raw, json)
Hash identifier: V4/OipecurAuumdrgM8XNhlXtZ2Zngo6JRREhv/eLfo=
Subject key identifier: 02:0F:EA:1A:96:F1:4B:16:C7:0D:77:8D:DF:2E:9A:B9:E0:76:40:91
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 019C63000B30BAB5E0C879EAEA2C95DF8715
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Ag_qGpbxSxbHDXeN3y6aueB2QJE.roa
Signing time: Sun 15 Feb 2026 20:31:13 +0000
ROA not before: Sun 15 Feb 2026 20:31:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205305
IP address blocks: 2a0f:b246::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:63:00:0b:30:ba:b5:e0:c8:79:ea:ea:2c:95:df:87:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 15 20:31:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=020fea1a96f14b16c70d778ddf2e9ab9e0764091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a4:c9:e2:c8:20:3d:d4:da:fe:2f:ce:dd:dc:
ab:5f:f5:7e:15:a8:99:72:76:c4:c8:5e:dd:05:d9:
33:35:69:98:3b:f9:2a:2a:25:b7:34:ba:82:41:a6:
20:a6:63:96:07:50:ac:2a:cd:15:10:c5:c7:2b:0f:
9c:20:f5:02:7f:20:b2:e7:08:6a:85:9b:de:57:1a:
e2:f2:94:c6:c8:d3:b4:d0:4b:87:3c:29:c7:a8:e7:
56:04:84:84:c9:e3:f4:39:21:88:26:06:33:13:ba:
43:9e:21:d2:1a:10:66:64:ef:fc:c9:15:6c:ff:36:
dd:90:02:ea:cf:cf:0a:a3:ec:d8:9f:8a:f5:07:66:
f4:2d:88:db:c6:a4:a8:eb:ad:c6:0f:12:3f:db:e0:
88:7e:e7:2b:c4:95:36:32:93:94:13:eb:ae:d6:4f:
fa:02:a0:1d:8c:b1:c3:a2:aa:2a:85:c9:4e:c4:d6:
1a:0a:cd:74:66:be:80:14:45:a5:8c:9d:d5:5b:7f:
88:4c:39:c0:dd:b5:bb:10:d0:b8:54:18:d6:af:36:
ba:2d:a4:38:f7:b3:0d:ba:e7:f2:86:e1:52:14:4d:
03:86:ed:a4:6b:cf:ce:0d:5f:a2:34:77:43:55:d0:
b3:9f:fa:9f:d2:7d:32:c8:60:fa:bb:cb:b1:71:d5:
4b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0F:EA:1A:96:F1:4B:16:C7:0D:77:8D:DF:2E:9A:B9:E0:76:40:91
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Ag_qGpbxSxbHDXeN3y6aueB2QJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b246::/32
Signature Algorithm: sha256WithRSAEncryption
27:83:d3:96:52:62:97:1f:d0:70:62:5c:8a:30:6c:d8:b8:99:
dc:44:d8:7c:d5:dc:94:af:f8:3b:99:b1:f2:46:2d:2c:d7:49:
92:3e:4f:67:80:80:c2:57:2a:6b:8e:41:bc:40:e3:c4:bf:a2:
a6:c1:c4:cd:12:61:4a:c3:47:92:32:b9:51:45:e2:5b:40:89:
b8:f1:8c:62:bb:d5:9b:ff:ef:cd:d0:88:2b:9f:46:91:6a:11:
7d:88:b9:14:42:1f:29:d4:40:81:4e:7e:f5:55:fc:b6:bf:97:
15:03:0e:b4:fe:43:a4:44:af:85:a6:b9:0b:f5:11:1f:d9:4f:
7b:2a:74:ab:78:70:52:70:69:9e:42:18:7a:d4:b9:dd:bc:94:
42:bc:bb:99:3b:cf:4c:a2:5d:75:6c:45:f8:78:56:d0:ed:81:
9e:91:c4:b3:66:b4:5f:d1:a0:d0:04:24:4e:cb:df:b1:0f:1c:
3d:11:e8:dc:a5:04:44:2f:18:02:f9:87:ab:ce:a1:1d:8d:13:
aa:03:bc:7e:ee:49:76:ec:f8:cd:07:7b:97:62:c2:e2:ee:f4:
a7:65:d9:cb:7b:8e:cd:26:6b:85:8e:b4:62:ab:34:13:2e:a1:
c2:a7:b3:4e:f4:99:59:2f:d4:89:72:e5:e4:f4:e3:fb:ca:91:
ac:23:02:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:17:54 2026 by rpki-client