Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/kpH615rQYHey6lRB1ZcU52Qx_LI.roa
File: kpH615rQYHey6lRB1ZcU52Qx_LI.roa (raw, json)
Hash identifier: xYSvZhnyV4T/r43fb/qr/DMoHvK6ph5zK50eMxvrPv0=
Subject key identifier: 92:91:FA:D7:9A:D0:60:77:B2:EA:54:41:D5:97:14:E7:64:31:FC:B2
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 019A40E7C8369B256318EC7736C09818B650
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/kpH615rQYHey6lRB1ZcU52Qx_LI.roa
Signing time: Sat 01 Nov 2025 19:32:03 +0000
ROA not before: Sat 01 Nov 2025 19:32:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216401
IP address blocks: 2a0f:b240:6400::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:40:e7:c8:36:9b:25:63:18:ec:77:36:c0:98:18:b6:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Nov 1 19:32:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9291fad79ad06077b2ea5441d59714e76431fcb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0b:c5:b9:b1:46:ba:7d:f9:23:ad:3f:80:bd:
6b:94:0c:9a:af:5f:6d:c4:8d:3b:72:b4:41:36:65:
bc:19:4f:d1:a3:fa:80:b9:03:00:50:c8:b1:34:cc:
93:fd:53:68:fb:9f:9c:7e:98:9b:75:ff:5c:17:ee:
4d:7f:d9:45:a9:1d:5b:52:87:c4:ec:21:7a:d4:10:
6c:87:72:4e:25:5c:9e:ff:c7:75:3f:b8:47:cf:69:
46:d0:1e:b0:d3:eb:1d:0f:02:d1:9a:7b:36:20:ab:
c6:4a:14:2d:c5:7e:09:3d:30:a4:dd:dd:2e:87:d9:
ab:09:aa:b9:27:e9:62:e3:e2:10:2c:60:9a:c7:22:
54:4d:08:1a:82:f5:e7:e0:c5:bb:33:92:16:37:ea:
12:38:04:e1:95:e3:8b:b2:1c:7e:a8:9b:87:9c:11:
31:ce:62:b0:0e:0e:f1:c2:b5:88:b9:50:cb:8d:42:
1c:95:3d:4c:d6:a4:ff:bd:9b:e4:3c:8f:20:bc:30:
2e:20:1c:34:39:9a:50:40:00:b9:2c:e3:31:ed:90:
9e:a2:f6:18:d7:8c:6b:53:07:46:09:a8:78:76:ed:
51:30:9b:90:a3:58:77:d6:72:b8:23:3a:7b:ac:72:
57:fa:55:4a:3e:5c:68:b1:eb:dc:e7:b3:a7:0a:dd:
5c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:91:FA:D7:9A:D0:60:77:B2:EA:54:41:D5:97:14:E7:64:31:FC:B2
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/kpH615rQYHey6lRB1ZcU52Qx_LI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:6400::/40
Signature Algorithm: sha256WithRSAEncryption
45:67:45:86:ee:7f:55:0b:b5:3c:90:bc:b9:7a:20:db:0c:fe:
c2:55:b4:79:04:dc:67:0d:68:af:39:51:5e:fb:9f:47:06:c5:
53:db:a6:07:78:d8:5a:10:db:15:a0:da:20:65:9a:9b:23:47:
ed:44:05:43:3b:14:c1:5b:e8:d0:7a:69:77:05:24:ce:c9:b4:
3a:56:9d:54:24:bf:72:44:e1:5e:53:da:e5:05:d0:4f:cb:43:
04:a2:e6:67:45:8d:ea:8d:6c:44:a4:d3:cc:9c:32:65:8c:0f:
7d:24:0d:20:a2:fb:60:0e:cc:45:e8:71:b9:8d:96:20:2d:bd:
ed:e4:18:0c:da:ae:37:3e:df:c7:ce:19:60:e4:16:0c:00:38:
d2:37:81:18:f4:eb:6f:90:4f:96:ac:de:82:2e:f7:02:a7:9e:
48:dd:ee:cf:6d:b6:52:fb:7b:f8:b5:87:97:a8:4c:1e:c2:f7:
17:dc:fc:15:d9:bf:a4:ca:bf:3d:b7:f9:19:a7:79:e5:e9:18:
d3:ed:22:7a:20:54:62:bd:cd:a9:62:1e:a5:e8:ba:bc:ae:48:
44:68:a3:e4:cd:fd:8d:40:7a:4b:ec:8f:49:ca:a9:24:8d:d7:
49:cc:12:03:44:b1:a1:c6:80:b2:5d:f9:d5:cc:7e:0b:67:f5:
5e:09:34:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:50:58 2025 by rpki-client