Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/StcaCyJHse15Sa9YS3WbIqvZUTw.roa
File: StcaCyJHse15Sa9YS3WbIqvZUTw.roa (raw, json)
Hash identifier: TxNfA3DkEBwJxaRaCfUDDHAk8HHvdfBpSZ4mob1vIYM=
Subject key identifier: 4A:D7:1A:0B:22:47:B1:ED:79:49:AF:58:4B:75:9B:22:AB:D9:51:3C
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 01A09239A9F8D9101347354C7A8F3CE8A288
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/StcaCyJHse15Sa9YS3WbIqvZUTw.roa
Signing time: Fri 11 Sep 2026 20:47:27 +0000
ROA not before: Fri 11 Sep 2026 20:47:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215473
IP address blocks: 2a0f:b241:91::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:92:39:a9:f8:d9:10:13:47:35:4c:7a:8f:3c:e8:a2:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Sep 11 20:47:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ad71a0b2247b1ed7949af584b759b22abd9513c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f9:27:87:89:b5:2b:69:ae:35:10:6f:ba:42:
f3:d1:28:42:ed:66:da:23:45:c8:c6:2b:d7:d5:94:
c0:30:ec:4f:18:87:23:3b:39:5b:e9:6b:c0:3e:06:
62:a7:27:cf:9a:9e:f3:36:b1:7a:d9:53:07:3c:42:
8d:72:5f:32:d0:74:1d:ef:a5:19:05:65:cc:05:4d:
9a:7c:b0:77:f6:d8:ea:43:da:7f:e7:18:56:e7:4e:
1f:0f:22:6e:d9:6f:f3:80:7b:40:67:2d:b7:4a:e1:
ea:db:d0:b1:54:39:e9:b4:ac:64:56:01:38:73:d9:
c0:4e:92:c5:f3:b3:68:2b:cd:03:e6:da:13:53:49:
4d:3e:3d:89:ca:b5:2f:1d:59:30:5b:b3:9f:a8:41:
f3:85:93:88:ba:ae:6b:f1:e1:d8:6d:f8:9e:bc:c8:
f2:23:0f:75:ff:5f:0c:7a:f9:91:23:99:26:9c:85:
ef:21:0e:3a:cb:0f:9f:75:6c:46:82:d0:1f:c8:95:
4d:04:08:af:a2:99:88:86:a9:25:ba:de:39:e2:32:
a0:2d:59:e4:54:cf:1c:3d:3f:04:96:50:af:0e:78:
89:a8:fa:97:6f:0e:b2:19:62:78:90:9b:0f:de:bd:
ef:04:34:d0:6e:43:b9:8a:7c:cc:05:98:67:fe:9a:
3c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D7:1A:0B:22:47:B1:ED:79:49:AF:58:4B:75:9B:22:AB:D9:51:3C
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/StcaCyJHse15Sa9YS3WbIqvZUTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:91::/48
Signature Algorithm: sha256WithRSAEncryption
04:d2:66:81:33:95:35:98:58:e9:cd:88:9d:24:82:2a:71:c0:
94:7d:ca:b2:14:e7:5f:51:0f:46:e4:4b:97:1e:75:51:44:db:
cb:cf:d7:d7:68:bb:ce:45:00:17:f4:e1:95:a8:84:ce:cb:c9:
4f:a3:d1:b0:46:d5:58:b1:77:08:55:df:ed:eb:a1:b3:3a:2d:
85:65:b7:90:7b:a4:24:c5:e1:9a:1e:37:37:86:18:9c:d6:39:
d1:33:25:a0:e8:dc:43:f1:99:cc:8c:2e:8f:cf:6c:36:22:c3:
1b:e6:e2:87:a5:f6:7f:9b:cb:21:54:28:b6:70:57:51:b9:5c:
35:c1:54:e7:1a:aa:7e:84:1b:f3:f6:85:29:78:56:dd:c8:52:
aa:ab:c1:8d:56:7e:01:8c:5d:1a:af:d0:a7:0a:af:a9:07:72:
a1:61:0a:20:2a:80:80:ad:8f:36:d0:09:0b:10:dd:8b:e9:d4:
9a:ac:a5:c9:de:b7:1c:e4:9e:64:20:ba:4d:fd:fe:8e:81:ef:
43:6b:63:50:90:fb:f9:9a:51:fa:0b:ec:7d:4c:97:a6:ad:4c:
da:1f:ba:40:63:66:ff:bb:75:56:ad:7a:06:1b:9a:cf:00:2b:
d1:cb:71:16:2c:10:12:dd:b2:b5:07:6d:a8:6f:36:81:0f:3d:
ce:e6:06:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:26:32 2026 by rpki-client