Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Q9gwJR34XDugRKwXsUnfNlBimyg.roa
File: Q9gwJR34XDugRKwXsUnfNlBimyg.roa (raw, json)
Hash identifier: pGfvJ/2sLT/MzFyfE9I7hd1rMOKWuutjrggQCleOF8U=
Subject key identifier: 43:D8:30:25:1D:F8:5C:3B:A0:44:AC:17:B1:49:DF:36:50:62:9B:28
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 019A359F4B3BAD88BE880AD1B7DBAAABACEC
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Q9gwJR34XDugRKwXsUnfNlBimyg.roa
Signing time: Thu 30 Oct 2025 14:57:03 +0000
ROA not before: Thu 30 Oct 2025 14:57:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44822
IP address blocks: 2a0f:b240:7e00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:35:9f:4b:3b:ad:88:be:88:0a:d1:b7:db:aa:ab:ac:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Oct 30 14:57:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43d830251df85c3ba044ac17b149df3650629b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:35:7a:40:82:0b:ae:41:3f:af:49:4d:96:40:
a3:4c:bd:3c:3a:68:8a:c3:c8:9b:c2:5e:d9:66:98:
bf:67:fa:5a:76:1b:26:87:fe:b4:49:73:43:9f:83:
72:9f:7b:bc:bf:9a:0e:06:29:79:ca:22:94:96:03:
19:3a:f0:c2:0f:7c:71:b8:66:70:5b:c3:3f:22:af:
41:77:4c:68:ae:1c:b3:a4:61:53:de:e0:6a:28:ce:
e7:2e:4a:76:b6:e9:68:ab:33:1c:b3:06:75:d0:ea:
a3:2d:e8:8d:71:96:f7:4d:02:d8:88:2e:bc:62:b4:
86:c6:b5:43:e4:d8:43:7f:b8:90:d6:71:12:ae:db:
f3:27:b4:fd:a2:7f:76:e2:bc:29:18:69:d7:4b:74:
cb:cc:00:05:71:49:a8:22:3f:df:25:59:b1:02:cf:
0d:16:d4:75:32:89:f2:8c:f5:1f:62:f4:2d:4a:0c:
c6:b9:b7:75:ab:2e:8b:61:be:a8:ab:f7:b9:aa:2b:
cc:8b:c0:f4:a0:c0:98:ab:d6:c3:c6:06:ea:31:6e:
8d:14:5d:1c:f2:d6:22:53:0a:b1:89:4f:e7:02:94:
7d:45:02:f8:77:a9:cf:03:d3:c0:07:2e:a3:98:ce:
81:fe:aa:39:2f:ba:32:f5:3b:6f:33:d0:ae:86:60:
1c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D8:30:25:1D:F8:5C:3B:A0:44:AC:17:B1:49:DF:36:50:62:9B:28
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/Q9gwJR34XDugRKwXsUnfNlBimyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:7e00::/40
Signature Algorithm: sha256WithRSAEncryption
2b:72:a2:52:f3:63:77:7f:b7:3c:34:7f:f4:8b:95:62:c5:ce:
98:4b:8e:80:b7:bd:42:dd:98:11:26:5b:dc:a8:53:fc:0d:e4:
30:00:7b:13:dc:f3:2b:af:98:d4:93:94:af:54:07:c6:ba:ad:
12:f5:14:05:28:72:28:e2:95:11:90:ad:d9:29:cc:88:86:dd:
1a:96:48:52:37:0c:d2:89:87:4c:19:89:a8:9f:82:0e:59:e7:
cc:d7:d7:24:71:ed:53:c8:c5:f3:1e:98:39:4f:87:6d:1a:4a:
93:53:01:2e:c0:00:f4:54:b5:82:3a:6f:ba:93:db:20:7b:2c:
94:ca:ff:30:19:9d:87:69:54:63:61:e7:a0:1a:0a:72:1d:3a:
82:2e:e9:26:0a:53:54:b8:e5:b9:f1:7a:76:09:f7:88:78:e2:
7a:f1:9a:72:87:e5:12:ee:f2:c0:50:2a:12:c8:79:e1:59:f7:
0a:7a:6d:0f:f1:a4:6d:92:41:ce:a2:8b:4b:15:98:64:df:bf:
ed:21:ff:4a:57:1b:05:94:d5:42:1c:a1:1f:2c:a5:ea:5b:ae:
09:1a:0e:a4:12:b1:88:b1:a3:83:2f:10:77:fe:cd:71:c5:3e:
ed:32:f7:81:03:33:b4:1c:78:92:ae:60:27:5e:b1:75:b1:3e:
d5:ec:4b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:33:00 2025 by rpki-client