Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/cINpQF_Qqmx3Bquch3Fv__8YfVU.roa
File: cINpQF_Qqmx3Bquch3Fv__8YfVU.roa (raw, json)
Hash identifier: 9Ufxk6C6/Y+SyWTNreZwHMZ4r/foMeVzHmsoA+enReo=
Subject key identifier: 70:83:69:40:5F:D0:AA:6C:77:06:AB:9C:87:71:6F:FF:FF:18:7D:55
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 019A364B9159B999142609C84D338762E5D0
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/cINpQF_Qqmx3Bquch3Fv__8YfVU.roa
Signing time: Thu 30 Oct 2025 18:05:13 +0000
ROA not before: Thu 30 Oct 2025 18:05:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204776
IP address blocks: 2a0f:b240:8100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:36:4b:91:59:b9:99:14:26:09:c8:4d:33:87:62:e5:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Oct 30 18:05:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=708369405fd0aa6c7706ab9c87716fffff187d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:31:fe:72:76:2a:e6:7d:68:41:64:23:7e:b3:
e4:b3:d1:50:db:8e:96:8e:53:e2:a8:b9:4f:c9:9f:
6b:64:b6:16:20:8b:99:57:67:84:34:bb:67:25:8d:
c3:71:31:ef:f1:81:da:04:87:9a:ee:b0:52:2c:36:
b5:bf:f0:70:ab:61:24:87:2b:d7:dd:a5:ba:dd:39:
15:f9:ff:d1:5e:e2:0f:47:b5:93:c0:9b:1e:f0:34:
2c:0e:1a:f1:42:58:f7:b9:9f:eb:80:6c:03:79:b1:
35:c3:6d:07:96:a7:b0:58:7f:a6:d9:60:33:90:d5:
52:25:68:ad:10:6e:ae:01:91:a1:40:e4:c6:52:22:
5e:de:fa:97:d2:ac:9d:29:bf:60:8a:2a:46:00:46:
f2:2b:1e:26:46:5b:83:1e:9e:dc:1f:15:56:bf:2e:
9a:f5:79:fb:31:0d:12:46:b6:39:9e:d1:47:a2:e7:
e2:39:40:7f:fe:47:48:8a:1f:9a:ed:8f:c2:34:e5:
08:52:ca:4c:85:bd:49:60:87:6a:16:68:34:80:a4:
5f:7d:6f:59:0b:d4:d5:dd:33:a5:36:31:a8:a3:e1:
33:34:73:54:79:ff:48:2c:f0:f2:7d:27:1e:01:fe:
c8:2a:db:c0:10:0a:ea:ae:af:53:d2:8e:3e:b0:64:
bf:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:83:69:40:5F:D0:AA:6C:77:06:AB:9C:87:71:6F:FF:FF:18:7D:55
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/cINpQF_Qqmx3Bquch3Fv__8YfVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:8100::/40
Signature Algorithm: sha256WithRSAEncryption
28:26:ba:0b:2e:6b:34:51:2a:ae:fb:0b:75:74:ee:9d:45:29:
f4:95:90:2c:0f:a3:d3:9c:cf:29:df:c8:0c:53:60:4b:3a:1a:
48:49:44:4a:5e:af:30:38:b3:35:e7:d1:c2:97:7f:81:f8:fe:
75:0b:2d:62:3f:24:b7:c2:89:8e:29:0b:34:dc:ad:ce:b9:79:
11:cc:71:f9:f2:23:1c:d1:10:ba:83:00:dd:7f:f3:29:c3:7f:
fc:38:9b:cd:3b:5c:74:c0:f1:3f:ba:18:a6:7b:d5:fc:64:3d:
c1:13:b4:d8:5f:16:eb:73:22:12:50:e8:7d:00:52:5a:95:61:
94:3c:49:c8:bb:71:ad:bf:45:86:9c:20:e6:8e:d9:e5:36:1e:
de:98:24:42:ec:77:c3:b2:ab:7a:39:60:3e:4e:16:f2:2c:09:
95:5c:30:22:64:e1:08:b1:33:1c:13:36:5f:2d:37:cb:0b:13:
18:71:af:c4:3f:8e:ce:38:c7:22:95:75:a6:3d:fd:f9:84:ab:
77:eb:01:bd:75:88:0c:c0:e2:06:31:bd:87:0e:03:2b:2d:05:
06:29:19:76:87:cb:41:88:79:05:86:b9:6f:34:27:a1:a8:b6:
7a:ae:a5:46:34:b7:f7:ee:84:6b:02:86:cb:a6:df:d2:fb:db:
2e:1b:1b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:44:57 2025 by rpki-client