Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/CeG9A8xnTgMkXosf2Tccfx9i06o.roa
File: CeG9A8xnTgMkXosf2Tccfx9i06o.roa (raw, json)
Hash identifier: 2svja6YBb+HdaG3Nl560/e4BZ+IDfixNGfAl9432WWA=
Subject key identifier: 09:E1:BD:03:CC:67:4E:03:24:5E:8B:1F:D9:37:1C:7F:1F:62:D3:AA
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 01A0A8807B72E60724F85AF9F6272FDBDE24
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/CeG9A8xnTgMkXosf2Tccfx9i06o.roa
Signing time: Wed 16 Sep 2026 04:36:27 +0000
ROA not before: Wed 16 Sep 2026 04:36:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201392
IP address blocks: 2a0f:b240:1500::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 17:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a8:80:7b:72:e6:07:24:f8:5a:f9:f6:27:2f:db:de:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Sep 16 04:36:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=09e1bd03cc674e03245e8b1fd9371c7f1f62d3aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:af:ac:7d:e9:22:ce:a1:c6:ed:fa:56:3f:eb:
5c:39:83:e3:62:b7:37:33:23:d7:32:ca:62:17:a0:
ca:d6:27:e5:79:d1:57:3b:d6:71:f0:cf:1f:63:25:
24:77:c9:3c:b3:4b:8d:09:97:10:5c:57:a6:3a:68:
22:46:6c:6a:f2:37:bb:ca:47:9b:9c:5e:46:43:12:
80:69:b8:0e:70:6a:0a:fa:c8:cf:5a:18:7c:98:a1:
fc:6d:f0:0f:84:fe:e7:d5:8e:f0:16:af:4f:6c:bf:
a7:40:ca:20:59:66:ef:6f:2f:73:53:53:be:93:81:
e3:3f:4d:cc:95:f9:e0:7c:3e:27:ed:c2:ae:bb:35:
ec:93:55:be:53:cb:4e:ef:81:8c:c5:3a:12:6c:64:
3f:e9:52:bf:2b:2d:a8:51:31:91:52:0b:42:d7:55:
7c:f4:e5:c9:eb:f4:b0:09:e3:4f:67:d8:0a:1a:08:
c8:1c:d3:0c:fa:e6:fa:49:19:0f:de:69:ee:c2:53:
b3:fe:e0:1a:de:02:83:72:86:bf:bc:60:ee:23:45:
2f:a5:ef:97:52:30:57:9c:11:d5:85:a2:a8:9b:52:
9f:5b:47:00:d8:e0:fc:b2:1d:26:71:b6:5d:98:94:
c9:92:aa:87:fc:b0:ae:68:87:b3:6e:1f:5a:2c:a3:
48:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E1:BD:03:CC:67:4E:03:24:5E:8B:1F:D9:37:1C:7F:1F:62:D3:AA
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/CeG9A8xnTgMkXosf2Tccfx9i06o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:1500::/40
Signature Algorithm: sha256WithRSAEncryption
0f:50:2d:ae:27:49:27:39:86:4b:6a:4a:fd:62:79:47:62:95:
e4:9d:0e:43:52:c2:e9:35:41:52:fa:7f:9d:13:cb:c6:bc:f6:
94:b7:4f:e1:96:f4:01:f9:5a:13:c4:6f:51:89:21:d6:d1:8d:
89:8d:1f:33:16:2d:b6:5b:9e:72:97:c2:1f:05:e6:f1:16:04:
bc:28:8a:4e:71:d1:14:a0:20:9f:03:f0:60:a5:62:b0:06:84:
1c:42:17:43:2c:e1:59:ba:6f:d2:95:a8:d8:89:97:a7:49:5c:
19:ed:23:29:29:aa:56:2d:07:d5:b6:6e:d8:eb:3f:a3:a9:83:
ae:d7:22:82:a1:29:34:b7:f9:6c:5f:e0:83:45:36:20:50:98:
0e:a8:0e:e9:be:ab:4b:83:6d:92:57:d6:d9:27:b7:67:6c:0a:
dd:ef:ab:24:3a:9c:3a:06:3a:0a:8d:bd:54:46:40:6b:26:da:
e0:88:c7:61:0f:1b:f4:c9:bd:f5:67:b4:8e:9c:5a:6f:4b:fd:
ba:af:42:8b:06:5d:2a:52:ae:6b:bc:6e:0b:ed:84:f5:9b:e5:
e8:fb:6a:42:ae:c6:83:30:c9:1c:05:be:81:b0:d8:f4:59:91:
d1:ea:92:01:48:6b:4f:f5:cc:9b:3f:d8:97:03:4a:7d:c4:0e:
30:06:b0:cb
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAaCogHty5gck+Fr59icv294kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjYwOTE2MDQzNjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOWUxYmQwM2NjNjc0ZTAzMjQ1ZThiMWZkOTM3MWM3ZjFmNjJkM2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6a+sfekizqHG7fpWP+tcOYPjYrc3
MyPXMspiF6DK1ifledFXO9Zx8M8fYyUkd8k8s0uNCZcQXFemOmgiRmxq8je7ykeb
nF5GQxKAabgOcGoK+sjPWhh8mKH8bfAPhP7n1Y7wFq9PbL+nQMogWWbvby9zU1O+
k4HjP03MlfngfD4n7cKuuzXsk1W+U8tO74GMxToSbGQ/6VK/Ky2oUTGRUgtC11V8
9OXJ6/SwCeNPZ9gKGgjIHNMM+ub6SRkP3mnuwlOz/uAa3gKDcoa/vGDuI0Uvpe+X
UjBXnBHVhaKom1KfW0cA2OD8sh0mcbZdmJTJkqqH/LCuaIezbh9aLKNIVQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFAnhvQPMZ04DJF6LH9k3HH8fYtOqMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvQ2VHOUE4eG5UZ01rWG9zZjJUY2NmeDlpMDZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg+yQBUw
DQYJKoZIhvcNAQELBQADggEBAA9QLa4nSSc5hktqSv1ieUdileSdDkNSwuk1QVL6
f50Ty8a89pS3T+GW9AH5WhPEb1GJIdbRjYmNHzMWLbZbnnKXwh8F5vEWBLwoik5x
0RSgIJ8D8GClYrAGhBxCF0Ms4Vm6b9KVqNiJl6dJXBntIykpqlYtB9W2btjrP6Op
g67XIoKhKTS3+Wxf4INFNiBQmA6oDum+q0uDbZJX1tknt2dsCt3vqyQ6nDoGOgqN
vVRGQGsm2uCIx2EPG/TJvfVntI6cWm9L/bqvQosGXSpSrmu8bgvthPWb5ej7akKu
xoMwyRwFvoGw2PRZkdHqkgFIa0/1zJs/2JcDSn3EDjAGsMs=
-----END CERTIFICATE-----
Generated at Tue Sep 22 03:27:23 2026 by rpki-client