Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/_uyAGA4aVgoG4Nd36CLKXEIaWHE.roa
File: _uyAGA4aVgoG4Nd36CLKXEIaWHE.roa (raw, json)
Hash identifier: qd3g1kb26YrOrv5/vyDVpyckR81f9S0sE1+vYI5y9pk=
Subject key identifier: FE:EC:80:18:0E:1A:56:0A:06:E0:D7:77:E8:22:CA:5C:42:1A:58:71
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 019A10C69CDE43A22A4918BAA1EFCCBE497D
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/_uyAGA4aVgoG4Nd36CLKXEIaWHE.roa
Signing time: Thu 23 Oct 2025 11:14:03 +0000
ROA not before: Thu 23 Oct 2025 11:14:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210578
IP address blocks: 2a0f:b240:7700::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:10:c6:9c:de:43:a2:2a:49:18:ba:a1:ef:cc:be:49:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Oct 23 11:14:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=feec80180e1a560a06e0d777e822ca5c421a5871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:cd:44:b6:cb:65:ff:13:62:ac:53:af:b6:3c:
de:5a:c8:b7:eb:16:10:72:cd:54:f0:48:7a:0f:71:
9b:70:e1:ae:17:3e:7a:77:c3:d5:d8:c7:0c:82:94:
63:e9:91:44:6c:03:45:3b:97:f5:6c:5a:35:0b:c8:
58:3f:6a:c7:0f:9c:24:82:b9:fd:22:35:c6:8d:7f:
75:fa:32:55:0d:8d:b2:cd:13:98:c9:cb:2c:24:7e:
db:ce:98:98:72:ab:a6:fa:15:bc:d0:fe:8f:09:cb:
6c:99:73:65:ee:15:8a:c9:e3:f7:a5:f7:1e:d5:51:
47:e2:1f:59:8b:63:6d:09:6c:47:de:a2:bb:4b:d9:
b1:1a:9a:43:62:25:8d:c2:e5:0c:1c:34:10:a1:09:
04:f6:17:8c:c8:52:f7:e6:d4:36:48:ce:10:eb:19:
80:16:b0:df:fb:b9:01:26:28:81:63:e9:d1:d6:c4:
28:69:54:54:1c:77:f9:f9:c0:3e:a3:25:0b:7a:7e:
16:b0:67:cd:54:6e:91:b5:c2:fd:42:2c:f1:84:34:
b1:27:c8:9f:c0:63:b7:48:e5:6e:6d:18:77:24:24:
1f:8d:a0:b0:40:96:10:64:f0:54:5a:b4:2c:71:67:
d0:71:b7:cb:3a:2b:33:ab:5c:4e:ca:01:72:38:f7:
ae:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:EC:80:18:0E:1A:56:0A:06:E0:D7:77:E8:22:CA:5C:42:1A:58:71
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/_uyAGA4aVgoG4Nd36CLKXEIaWHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:7700::/40
Signature Algorithm: sha256WithRSAEncryption
55:b8:84:25:fd:01:fa:bd:db:b9:66:ff:8c:02:22:0c:87:2d:
88:17:a1:a5:b2:29:81:25:63:f2:30:ee:0e:8a:47:f0:3e:a7:
c7:53:15:4d:29:c5:ea:26:cc:ca:73:92:72:27:c3:57:ca:d0:
e7:c5:4d:7b:d3:a1:58:34:b7:b2:99:95:fe:ae:db:62:ec:e8:
94:9d:da:c3:5a:ac:09:8b:18:f1:1a:6b:3a:67:66:41:93:25:
8a:65:c0:04:fd:11:4d:ce:c4:57:2b:a9:2f:43:0c:00:1a:6b:
38:46:56:5c:6b:08:90:d0:fc:8e:1a:e1:54:e4:40:4b:54:17:
a9:71:e5:da:55:6e:9c:04:62:0a:75:fd:d6:46:07:f9:3b:b6:
b5:30:b5:3b:83:c7:0b:e5:72:5e:24:07:14:c9:2e:28:23:38:
09:18:81:f0:5c:55:17:77:43:02:b8:4c:26:d5:4d:ec:a6:e4:
5b:14:19:70:e3:fc:19:a7:6b:26:31:12:6d:c0:1b:7e:fc:23:
78:4a:57:c9:0d:e4:52:29:f5:2d:34:52:80:cc:5e:f4:29:ab:
b5:46:a1:6e:fc:6b:c6:91:bb:1a:d7:05:f5:c2:ef:f3:fc:00:
ad:02:0c:57:20:5b:7b:2e:ae:bf:08:e6:8c:98:0e:58:98:7e:
81:c4:d9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:19:33 2025 by rpki-client