Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/kr3Y8jntUAI3hvLBtrSB7OHUX5c.roa
File: kr3Y8jntUAI3hvLBtrSB7OHUX5c.roa (raw, json)
Hash identifier: uiLIMHq0bVPFP2kBe0ekYjNbHzbPMx+L8CnsQdM8hmg=
Subject key identifier: 92:BD:D8:F2:39:ED:50:02:37:86:F2:C1:B6:B4:81:EC:E1:D4:5F:97
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 019C96F1611384D3353B981E4426A33FCE4A
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/kr3Y8jntUAI3hvLBtrSB7OHUX5c.roa
Signing time: Wed 25 Feb 2026 22:35:27 +0000
ROA not before: Wed 25 Feb 2026 22:35:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203504
IP address blocks: 2a0f:b240:1300::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:96:f1:61:13:84:d3:35:3b:98:1e:44:26:a3:3f:ce:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 25 22:35:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=92bdd8f239ed50023786f2c1b6b481ece1d45f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bf:a6:a4:0c:18:56:5a:13:ae:5b:e2:a8:ba:
b1:8d:4f:fe:e4:54:fb:e4:6d:ce:0d:68:d1:b8:ef:
ad:32:d5:5b:4e:a4:d9:ef:d9:41:19:13:05:53:9f:
9b:65:28:b2:69:12:92:0e:6f:cb:14:3b:59:97:91:
4d:db:af:3c:4e:5b:d4:f9:83:f7:f7:6a:22:67:d3:
97:cd:94:df:c5:f0:38:61:43:b6:c4:8b:13:00:e4:
98:11:88:4c:65:37:c5:67:36:a4:86:ce:d3:9e:18:
e8:9a:cb:f9:4b:0d:c6:16:99:78:eb:7f:57:c5:90:
19:fe:5a:2f:f0:2b:28:4f:8a:02:ea:49:9e:ec:3f:
79:0b:d3:63:05:c4:ef:0b:c5:df:98:e9:ea:73:97:
db:51:98:d5:77:dc:59:5d:4a:f8:f7:aa:d8:2f:be:
31:6e:9d:75:6d:14:2b:16:aa:84:c6:e1:9d:b4:48:
4b:8e:00:b9:5a:1a:92:37:22:f4:0d:0f:7a:4f:07:
d8:81:df:8a:26:4b:a5:0a:f3:df:93:3d:63:c5:39:
f5:51:f5:33:68:15:9d:61:4f:02:9d:3e:bd:a9:36:
cf:ac:a3:fd:b1:b2:0c:5a:e8:0e:70:4e:70:22:1b:
aa:6b:3f:fa:dd:74:31:78:f9:45:74:18:7e:e0:43:
88:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:BD:D8:F2:39:ED:50:02:37:86:F2:C1:B6:B4:81:EC:E1:D4:5F:97
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/kr3Y8jntUAI3hvLBtrSB7OHUX5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:1300::/40
Signature Algorithm: sha256WithRSAEncryption
22:0d:c7:1e:a9:d9:d7:33:c5:d1:45:e3:e8:1f:ca:11:07:51:
8a:b1:46:be:9d:a6:d1:1f:4c:74:09:fb:66:a8:12:27:89:8e:
1e:b9:42:27:91:bb:d5:30:ea:56:64:7d:05:93:1b:25:49:58:
3d:c2:50:09:57:5e:bc:91:55:3d:4f:89:78:33:ba:a0:3d:0d:
df:d6:ae:47:7f:c2:56:88:82:2e:05:1d:1c:68:e4:bf:54:af:
f3:8c:b3:0a:f2:69:98:da:ea:28:c1:fa:16:81:8f:3e:d3:16:
11:5c:89:15:c4:e8:07:13:27:d8:30:5e:7a:ae:8e:ee:c7:73:
b9:51:95:c9:d6:ad:e9:6f:6f:bb:2a:4a:67:01:a9:49:d1:93:
40:af:8f:1f:7e:9c:c4:61:0e:ce:cf:83:4f:b8:c7:94:e9:3a:
9a:82:81:f8:c8:62:e8:cd:e2:00:d1:a1:11:98:37:35:2d:d8:
25:db:ab:79:78:e0:10:ce:14:3a:7e:08:a6:47:9f:4d:43:8c:
fa:ed:46:ce:0e:c7:52:88:1f:90:ce:4e:de:bf:f8:10:eb:93:
be:06:4b:4c:89:a3:75:1e:c2:e4:41:af:76:da:d1:a8:23:0d:
31:37:7d:da:26:15:16:0f:a0:6f:eb:14:04:e3:03:63:ba:f3:
95:d0:4b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:09:44 2026 by rpki-client