Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/IwxZ_-CUTk35ZwU8nlBNMCz0Rec.roa
File: IwxZ_-CUTk35ZwU8nlBNMCz0Rec.roa (raw, json)
Hash identifier: ZCjBAI1741ZBa6NZG7Mk/v0ysLlnxdjoZ1eA3hDF56k=
Subject key identifier: 23:0C:59:FF:E0:94:4E:4D:F9:67:05:3C:9E:50:4D:30:2C:F4:45:E7
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 019A33ED54CB7C8B8728849AC6C03C1DC111
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/IwxZ_-CUTk35ZwU8nlBNMCz0Rec.roa
Signing time: Thu 30 Oct 2025 07:03:03 +0000
ROA not before: Thu 30 Oct 2025 07:03:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207466
IP address blocks: 2a0f:b240:7900::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:33:ed:54:cb:7c:8b:87:28:84:9a:c6:c0:3c:1d:c1:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Oct 30 07:03:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=230c59ffe0944e4df967053c9e504d302cf445e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ba:50:2c:06:56:5a:2c:31:22:e9:52:a2:4d:
a6:ba:e0:a2:27:64:ae:5f:84:88:a2:b6:61:05:9a:
07:d4:c0:73:2c:32:25:b8:24:e9:74:95:5e:b5:c5:
5f:24:25:d4:14:6d:d2:4e:88:7b:a9:d6:c6:1a:eb:
4b:1e:5d:de:6b:5d:15:f3:99:8b:c2:b8:19:73:43:
42:df:6f:5a:e3:34:5e:73:3d:ca:26:db:d8:25:12:
63:46:5b:8e:2c:91:e3:c1:cf:53:83:56:42:97:9e:
00:e1:48:ac:23:30:20:07:eb:59:b8:7d:7d:6e:c9:
86:99:c4:fc:06:ae:f5:f4:fa:9c:d2:a0:bb:74:17:
ee:88:44:91:5d:33:fd:10:85:03:aa:ef:b4:c8:12:
38:f7:5a:a6:e4:ea:d8:bc:8d:80:53:02:39:a1:23:
eb:b9:44:6c:56:e7:e2:59:12:a5:71:91:00:94:fe:
67:60:2c:33:4d:b3:25:c9:c0:4b:d7:de:2a:49:63:
0c:c5:29:00:c4:fa:53:d4:ed:bc:ce:ab:fd:74:9a:
14:c2:05:1c:52:59:93:cd:f2:43:e3:b7:53:dd:e3:
9e:0d:35:b9:28:e7:9c:af:dd:92:92:fc:47:2e:83:
18:b5:69:8c:86:d6:ba:68:6a:8a:5d:7c:1c:9e:e0:
6b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:0C:59:FF:E0:94:4E:4D:F9:67:05:3C:9E:50:4D:30:2C:F4:45:E7
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/IwxZ_-CUTk35ZwU8nlBNMCz0Rec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:7900::/40
Signature Algorithm: sha256WithRSAEncryption
13:4e:c4:a8:93:34:57:3e:64:29:52:f4:21:a6:bd:ef:b9:c1:
8c:c0:5a:37:d2:72:86:3b:57:0c:9a:08:8a:3e:57:89:ce:00:
99:06:9a:31:8d:20:8f:2d:96:a6:64:e1:e2:54:4e:bf:25:79:
7f:94:0e:ac:f3:b1:ee:2f:91:3f:ac:78:1a:85:01:8b:38:cf:
b7:6c:4e:46:38:74:f3:79:04:cf:aa:75:05:6f:21:99:d4:30:
c2:c7:7d:4f:ba:1c:fc:e6:6b:9c:17:00:66:19:4d:08:37:37:
99:2f:65:e1:4d:55:f3:d1:ad:82:5b:54:56:37:ae:e1:77:2f:
c6:b6:fa:2b:aa:2d:1a:db:e6:21:ca:b3:4c:c9:72:c2:cd:64:
36:31:92:aa:c6:0c:d8:8f:02:f0:09:d7:ee:43:cd:80:ae:88:
44:60:41:48:c0:d0:2e:57:1c:b5:93:e9:95:31:d5:df:c5:f8:
8e:51:3d:2c:8d:4d:af:68:b1:0e:b5:5e:f8:3d:4b:05:04:de:
8a:cb:65:c5:f3:4a:8b:fe:bf:8d:e8:73:0c:fc:59:36:5d:02:
37:4b:fe:4d:c3:0a:72:c7:a4:fe:f1:79:d3:c0:13:f3:24:d5:
45:b2:2e:a3:b1:d0:78:74:1b:c3:f1:1f:d4:4e:6c:38:99:84:
5b:2c:8e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:18:51 2025 by rpki-client