Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/GNdHDhjQP6Nu_hZUdroBm65sxT4.roa
File: GNdHDhjQP6Nu_hZUdroBm65sxT4.roa (raw, json)
Hash identifier: Rz0bhe++jQnpIMObTISGI0H4sC5NrcWAXV7wNssRvEk=
Subject key identifier: 18:D7:47:0E:18:D0:3F:A3:6E:FE:16:54:76:BA:01:9B:AE:6C:C5:3E
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 019C2F04DB792068C62B92743FAD13C63358
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/GNdHDhjQP6Nu_hZUdroBm65sxT4.roa
Signing time: Thu 05 Feb 2026 18:16:13 +0000
ROA not before: Thu 05 Feb 2026 18:16:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201726
IP address blocks: 2a0f:b240:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:2f:04:db:79:20:68:c6:2b:92:74:3f:ad:13:c6:33:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 5 18:16:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=18d7470e18d03fa36efe165476ba019bae6cc53e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:dd:94:64:f1:e3:f9:96:11:87:bf:da:19:29:
d1:b5:08:94:d6:d3:d1:5a:55:4c:8e:b8:bb:9d:8b:
b5:eb:e3:77:cb:bf:c4:64:19:7b:f3:08:76:a5:3b:
a9:92:10:fd:4e:49:75:6a:d5:d0:c1:25:5f:10:6a:
04:8f:24:f1:8d:f8:89:5d:84:35:1e:a7:93:58:02:
0d:46:a4:ea:b1:c1:c2:96:80:0b:1d:4c:5a:c3:10:
f8:05:a1:b1:61:2e:17:be:d4:b6:19:67:aa:b8:ca:
d8:94:ed:1e:18:dc:bb:b9:f5:34:f9:33:b8:d2:9e:
d2:d4:37:10:95:4c:78:4d:25:74:49:15:eb:ce:9b:
1f:c8:45:49:d8:f8:dc:4b:db:83:a6:4c:74:80:86:
78:73:cf:95:7f:b1:71:72:ca:29:d5:1a:9c:1c:eb:
fa:53:fa:d8:54:f2:27:1d:8c:61:40:6e:7d:aa:f6:
6b:1b:a5:fc:06:e8:1b:01:2d:37:e9:f6:87:d5:0c:
29:c9:48:b0:b8:96:76:54:59:17:f1:30:d6:34:32:
4e:75:d4:2d:35:06:63:16:10:76:51:b3:52:1c:f5:
8a:11:57:8b:a1:22:c1:fe:40:8e:1a:be:34:09:c4:
95:cd:89:f4:97:8f:d8:04:e3:7f:d4:53:c2:46:6c:
e8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D7:47:0E:18:D0:3F:A3:6E:FE:16:54:76:BA:01:9B:AE:6C:C5:3E
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/GNdHDhjQP6Nu_hZUdroBm65sxT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:1000::/40
Signature Algorithm: sha256WithRSAEncryption
8e:75:42:c8:eb:c9:ef:9a:58:82:0e:bf:12:25:71:25:96:76:
79:47:f6:1f:17:73:51:b4:db:8f:62:38:88:f0:4a:ed:68:96:
9f:51:49:d1:bc:3b:0f:31:40:75:ba:48:a6:eb:ec:03:4d:2b:
d2:22:2f:f8:64:3f:02:1c:de:d2:a3:06:5c:78:1a:7e:3e:44:
a6:7d:08:a7:cc:d5:79:7f:9d:99:81:87:26:15:b5:72:56:93:
62:83:a4:a3:4d:de:0f:cf:0c:99:13:ab:1a:0c:58:06:5f:79:
79:43:6c:74:63:fb:ae:1d:f4:62:d9:35:ac:58:11:bb:62:b7:
60:b5:67:8f:56:66:45:5c:4e:0d:5d:50:c6:c5:8b:2a:e7:a3:
32:a4:65:ca:f1:ba:6d:bf:ca:39:bd:e6:17:ec:b0:29:5a:9d:
a4:b7:55:b4:14:2c:89:6d:ce:01:68:92:0d:14:69:2f:4e:27:
ce:95:51:5f:3e:52:b3:ce:68:e3:e6:5c:b6:1a:ca:49:55:8e:
c4:02:7a:3c:fe:a5:12:eb:fa:0e:77:52:11:97:18:6e:30:3a:
6e:74:37:d5:27:03:ec:47:57:52:05:c3:ec:8c:e1:e3:3f:d0:
23:03:8c:6e:1d:71:be:b0:44:e7:4e:e5:b1:03:a2:65:fa:a6:
e4:44:e6:23
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZwvBNt5IGjGK5J0P60TxjNYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjYwMjA1MTgxNjEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOGQ3NDcwZTE4ZDAzZmEzNmVmZTE2NTQ3NmJhMDE5YmFlNmNjNTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy92UZPHj+ZYRh7/aGSnRtQiU1tPR
WlVMjri7nYu16+N3y7/EZBl78wh2pTupkhD9Tkl1atXQwSVfEGoEjyTxjfiJXYQ1
HqeTWAINRqTqscHCloALHUxawxD4BaGxYS4XvtS2GWequMrYlO0eGNy7ufU0+TO4
0p7S1DcQlUx4TSV0SRXrzpsfyEVJ2PjcS9uDpkx0gIZ4c8+Vf7Fxcsop1RqcHOv6
U/rYVPInHYxhQG59qvZrG6X8BugbAS036faH1QwpyUiwuJZ2VFkX8TDWNDJOddQt
NQZjFhB2UbNSHPWKEVeLoSLB/kCOGr40CcSVzYn0l4/YBON/1FPCRmzoPQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFBjXRw4Y0D+jbv4WVHa6AZuubMU+MB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvR05kSERoalFQNk51X2haVWRyb0JtNjVzeFQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg+yQBAw
DQYJKoZIhvcNAQELBQADggEBAI51Qsjrye+aWIIOvxIlcSWWdnlH9h8Xc1G0249i
OIjwSu1olp9RSdG8Ow8xQHW6SKbr7ANNK9IiL/hkPwIc3tKjBlx4Gn4+RKZ9CKfM
1Xl/nZmBhyYVtXJWk2KDpKNN3g/PDJkTqxoMWAZfeXlDbHRj+64d9GLZNaxYEbti
t2C1Z49WZkVcTg1dUMbFiyrnozKkZcrxum2/yjm95hfssClanaS3VbQULIltzgFo
kg0UaS9OJ86VUV8+UrPOaOPmXLYayklVjsQCejz+pRLr+g53UhGXGG4wOm50N9Un
A+xHV1IFw+yM4eM/0CMDjG4dcb6wROdO5bEDomX6puRE5iM=
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:06 2026 by rpki-client