Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/QRJroky78Oelpe9w0oDIVKb_VH4.roa
File: QRJroky78Oelpe9w0oDIVKb_VH4.roa (raw, json)
Hash identifier: LTg7XqghwWpx5ACnnJBMlinXdBrgRvPoRKwd7S5brUc=
Subject key identifier: 41:12:6B:A2:4C:BB:F0:E7:A5:A5:EF:70:D2:80:C8:54:A6:FF:54:7E
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 019A362B5FB3C6AEC740733F6C0FF6C49DBB
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/QRJroky78Oelpe9w0oDIVKb_VH4.roa
Signing time: Thu 30 Oct 2025 17:30:03 +0000
ROA not before: Thu 30 Oct 2025 17:30:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204044
IP address blocks: 2a0f:b240:10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:36:2b:5f:b3:c6:ae:c7:40:73:3f:6c:0f:f6:c4:9d:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Oct 30 17:30:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=41126ba24cbbf0e7a5a5ef70d280c854a6ff547e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:41:5e:7a:17:8a:45:bf:42:2d:ac:13:ec:49:
35:20:ba:b1:2f:d8:ec:04:fe:17:73:7f:1a:33:de:
ba:15:fa:31:f7:e2:24:73:f2:ea:94:be:0e:b1:0b:
1b:85:45:27:89:40:db:40:7b:12:66:55:0f:9c:f2:
a0:71:16:1d:d3:66:e4:fb:2a:9a:a3:b1:c2:1a:31:
0a:fb:47:d2:e3:45:d8:8f:6f:1c:71:78:b2:ad:a3:
5d:fe:ee:fd:0c:eb:de:93:51:7b:48:1c:81:e4:b7:
4f:59:17:06:0f:50:62:fe:8c:7f:53:4e:7d:b0:a2:
02:ac:f5:eb:2e:25:cd:bb:02:2e:a0:e9:a5:87:31:
c0:c9:40:fe:4c:23:38:79:ba:05:c7:82:c8:01:2f:
c3:2b:a0:1b:05:5b:8b:c2:08:19:66:f8:6e:1a:38:
58:e6:f0:c7:f0:1a:1b:2a:db:09:2b:a6:d7:33:f5:
bc:6a:39:af:49:a4:e8:5c:0e:27:01:03:04:d5:cd:
36:34:27:56:49:84:8b:7c:ea:34:cf:b1:3e:22:e1:
e8:ef:7c:f6:d8:e2:f3:ea:f0:87:a8:fd:25:42:99:
17:33:1c:49:1a:4c:34:0f:ed:92:bd:66:83:cf:b4:
54:6f:ab:8e:ad:92:23:b1:9c:19:13:30:e4:41:b7:
cb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:12:6B:A2:4C:BB:F0:E7:A5:A5:EF:70:D2:80:C8:54:A6:FF:54:7E
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/QRJroky78Oelpe9w0oDIVKb_VH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:10::/48
Signature Algorithm: sha256WithRSAEncryption
7d:9d:37:e4:c0:79:b5:e1:60:f7:56:ee:ac:29:6b:01:3f:25:
c7:f9:94:2c:5e:fc:7b:67:dd:4a:9c:5b:b3:e0:96:6a:75:d2:
13:c5:84:8a:2a:6f:66:19:be:2b:90:1c:35:a6:f2:f6:a9:5d:
42:e5:84:82:5d:b4:c1:3a:b8:7d:82:f1:a9:3d:a1:17:71:fd:
f6:72:39:e0:11:13:05:5e:87:45:bb:b5:12:f8:c1:e8:d1:02:
57:26:a6:91:26:e5:e7:51:4d:19:ba:cc:bf:42:b2:fb:6f:64:
ae:51:06:05:62:99:2c:ca:0b:05:00:45:e0:e5:ed:21:ee:b2:
56:49:b2:d9:af:84:d2:e3:a4:84:30:fd:24:1b:c6:91:b3:fe:
16:52:e8:13:0b:73:b1:c7:d6:38:3c:67:a7:a0:bc:5b:33:f0:
cc:41:bb:0e:b0:39:df:42:6c:43:34:0c:bb:12:4e:27:32:13:
45:02:aa:76:a0:0a:bc:f7:50:ff:ac:44:56:d0:c1:1b:18:e2:
a5:97:06:02:43:eb:fb:19:e2:dd:95:0d:60:c1:82:7e:cb:04:
cb:1e:0d:29:42:d3:46:14:ff:e6:a5:20:06:73:43:5f:30:b8:
3c:34:c1:75:07:fe:d5:e0:14:ae:85:88:61:ab:b4:a9:89:85:
82:01:7e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:47:43 2025 by rpki-client