Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/W-YWKCrhvVlwHDwpYokzhVk7wAE.roa
File: W-YWKCrhvVlwHDwpYokzhVk7wAE.roa (raw, json)
Hash identifier: 61lyfGm0JtPC3Md29evNSIswZtpbo74KAv4HbZbIVv8=
Subject key identifier: 5B:E6:16:28:2A:E1:BD:59:70:1C:3C:29:62:89:33:85:59:3B:C0:01
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 019A36AD5FA8DA1310AA0AD16CA47A56B387
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/W-YWKCrhvVlwHDwpYokzhVk7wAE.roa
Signing time: Thu 30 Oct 2025 19:52:03 +0000
ROA not before: Thu 30 Oct 2025 19:52:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201979
IP address blocks: 2a0f:b240:8200::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:36:ad:5f:a8:da:13:10:aa:0a:d1:6c:a4:7a:56:b3:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Oct 30 19:52:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5be616282ae1bd59701c3c2962893385593bc001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:77:0a:1b:f6:61:e9:60:75:3c:4d:0a:bb:80:
71:05:f7:b4:df:65:a0:a7:e4:e0:dd:95:05:78:0c:
d8:a2:52:ce:93:02:71:be:23:9f:16:08:a5:a3:8c:
02:55:5d:91:46:02:40:e6:39:3d:c0:75:9b:6d:0f:
28:fc:da:48:18:f2:a0:40:a4:53:85:03:82:78:a9:
4b:6d:9f:56:7c:fe:46:a0:5c:a0:df:b5:7e:b6:29:
da:60:81:78:b7:e7:0a:2d:3b:60:cb:b1:5a:24:b8:
d3:45:2e:94:36:7d:25:28:a9:41:a6:a2:8f:54:79:
bb:7e:dd:05:a8:31:ac:7e:d3:6c:11:08:79:6a:3b:
a1:63:11:52:25:17:ed:1c:81:23:48:ae:90:0b:f6:
f5:71:d8:5a:59:6c:a8:d7:a0:ce:ec:76:d1:a5:16:
47:fc:fc:5e:b1:16:11:55:8f:cd:79:58:3e:d1:4a:
8b:b9:f1:11:7a:89:77:4d:2e:a4:8c:f9:8b:10:6f:
7c:fb:4b:f2:f3:42:17:1a:8f:b4:3b:91:94:25:08:
24:df:38:8b:64:c7:fd:7e:0a:20:b8:9c:fe:83:b9:
c9:5e:88:67:30:56:d2:87:2d:f8:1e:96:76:ae:84:
38:8e:6a:52:e6:68:20:4e:bb:9f:fc:82:3a:af:c1:
db:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E6:16:28:2A:E1:BD:59:70:1C:3C:29:62:89:33:85:59:3B:C0:01
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/W-YWKCrhvVlwHDwpYokzhVk7wAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:8200::/40
Signature Algorithm: sha256WithRSAEncryption
81:07:b1:31:2b:8f:55:13:a9:66:ca:55:e3:dc:ca:20:8c:42:
f5:11:0c:1c:12:78:d9:3d:37:26:b1:ca:0a:db:4a:2a:92:c4:
c3:d0:90:df:16:7b:98:49:db:2e:b2:b9:db:aa:7a:f4:92:5c:
a1:ae:83:bf:d8:7b:44:de:cd:f0:c0:8e:d0:5f:0f:aa:13:6c:
c1:24:9d:e4:39:1c:bf:91:c5:31:17:03:66:5d:40:6f:1e:45:
88:19:0b:3e:e0:66:d8:92:45:56:ef:87:b1:f0:39:59:4c:1f:
b9:c1:8f:14:a9:7f:ee:d9:b5:46:89:b2:53:b1:c0:67:8e:f6:
10:03:bc:ec:c5:4d:9f:f9:c8:f1:b7:6b:76:19:24:ab:ef:2c:
9a:94:5f:69:9f:19:97:fa:46:28:04:ab:fa:1f:27:89:c6:60:
87:82:30:aa:cf:4e:42:82:7d:24:dc:8c:3d:b1:5a:2e:f3:47:
52:35:f5:29:13:01:3c:77:cf:de:f0:0a:ea:cd:dc:e4:e3:69:
ce:3c:b6:82:47:68:ca:ba:36:9a:47:00:9c:9e:74:ce:68:33:
86:75:be:88:10:df:c5:99:38:2d:b6:c9:eb:51:ce:21:1a:05:
31:63:41:d4:30:93:54:9c:62:e0:56:2e:c8:51:a6:db:c4:b9:
02:21:77:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:29:43 2025 by rpki-client