Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/CGqwXwmzpIzjrBcyEVtGKwooCYc.roa
File: CGqwXwmzpIzjrBcyEVtGKwooCYc.roa (raw, json)
Hash identifier: 4jmOOBHr60gxAVnUVItM1bzCkAZxvGpSBq7iLF+mRUs=
Subject key identifier: 08:6A:B0:5F:09:B3:A4:8C:E3:AC:17:32:11:5B:46:2B:0A:28:09:87
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 019C418C345B128DAEA7D186F4E7AD751BDB
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/CGqwXwmzpIzjrBcyEVtGKwooCYc.roa
Signing time: Mon 09 Feb 2026 08:37:13 +0000
ROA not before: Mon 09 Feb 2026 08:37:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210235
IP address blocks: 2a0f:b240:7c00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:8c:34:5b:12:8d:ae:a7:d1:86:f4:e7:ad:75:1b:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 9 08:37:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=086ab05f09b3a48ce3ac1732115b462b0a280987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3e:36:51:e5:fe:28:3a:24:c5:d0:c3:9b:66:
c3:28:68:1a:cc:d0:79:e1:53:15:d0:89:f6:cd:26:
d2:db:4e:2d:1e:b6:3f:c3:68:bd:ec:59:a3:c0:5f:
51:6a:ed:f1:e4:30:ce:20:85:dc:86:eb:f9:bf:3b:
f0:36:0c:03:03:78:63:47:0f:aa:f4:55:72:b3:22:
b8:88:cd:5b:eb:3f:6c:d0:a8:28:67:91:bd:91:2f:
2a:b1:03:33:cd:51:3f:86:f9:2b:3f:b5:fd:69:46:
da:2a:b5:4c:07:fb:8c:f1:d4:ff:52:7f:5d:de:ea:
23:87:dd:20:38:6c:70:27:b3:49:89:2c:b3:f1:9f:
f9:3f:26:43:ea:05:6b:0a:a3:b8:95:f8:b3:de:08:
ad:01:72:21:4d:06:32:7b:35:90:3b:fb:f8:2c:e2:
3a:62:b2:9d:11:a4:19:ff:bf:57:fb:a6:a9:0a:32:
d9:35:4c:69:f2:5a:2f:f8:9c:9c:b1:4e:c7:61:3d:
2e:c8:85:d5:1b:d4:ba:06:0a:8f:ee:49:22:21:aa:
f7:10:05:e2:b7:55:97:e2:15:e3:38:7f:ad:d4:b6:
1b:a8:5d:5f:ee:16:f6:9f:8f:5f:3f:88:34:05:1b:
1c:2f:6b:51:28:71:47:3b:ff:98:f2:e0:97:2e:b6:
3e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:6A:B0:5F:09:B3:A4:8C:E3:AC:17:32:11:5B:46:2B:0A:28:09:87
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/CGqwXwmzpIzjrBcyEVtGKwooCYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:7c00::/40
Signature Algorithm: sha256WithRSAEncryption
00:5f:40:ba:0e:be:bc:89:8d:b0:be:7f:bd:54:51:e9:0c:61:
f7:3a:ce:45:d1:da:12:2c:34:37:df:97:ed:c3:c3:6f:ce:80:
09:78:03:4a:8f:71:df:9c:bd:cf:06:04:ba:a8:d8:62:6e:67:
6d:97:be:e6:df:50:6f:77:45:2f:fe:17:d2:77:5b:48:79:93:
4f:0d:3d:a1:93:70:3a:e1:e1:9e:d7:67:75:ea:40:79:d5:95:
a2:96:cc:41:21:bd:2f:de:4a:c5:f8:4e:1c:a7:df:f0:7c:dc:
47:6f:09:c1:23:24:8c:c9:b7:d7:6f:5f:be:f7:0c:61:bf:18:
b6:9f:13:ab:5a:c7:c9:cf:31:f4:4d:ed:61:48:f3:78:a4:93:
7d:13:da:3c:0f:b3:7b:7a:bc:65:17:7c:8d:07:e4:02:2a:db:
01:92:94:53:04:8a:d0:c9:45:15:56:61:05:10:a1:bc:44:15:
19:c5:ce:46:33:31:e6:c1:9c:b3:8a:64:c2:d0:9c:39:07:bd:
fe:66:d1:e8:61:ae:c7:1a:f5:08:f6:92:68:44:3a:a9:5c:5b:
f0:2a:4c:07:01:c2:1d:dc:3f:d5:ae:5c:48:82:06:28:ef:f8:
92:13:84:a7:fd:49:b8:b3:1a:e1:33:98:1a:c0:e9:83:5c:d4:
8e:ab:fa:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:15:54 2026 by rpki-client