Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/s40KyQl3UMYUbvkJNQp_s7s8qmA.roa
File: s40KyQl3UMYUbvkJNQp_s7s8qmA.roa (raw, json)
Hash identifier: atrzOxIa/9BvZsH+dEIdkIjQ1zPGiyvZUVtuj3rygjA=
Subject key identifier: B3:8D:0A:C9:09:77:50:C6:14:6E:F9:09:35:0A:7F:B3:BB:3C:AA:60
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 019A17034BFCEC3DAFF0A491D8D8891E027F
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/s40KyQl3UMYUbvkJNQp_s7s8qmA.roa
Signing time: Fri 24 Oct 2025 16:18:03 +0000
ROA not before: Fri 24 Oct 2025 16:18:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213579
IP address blocks: 2a0f:b240:7800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:17:03:4b:fc:ec:3d:af:f0:a4:91:d8:d8:89:1e:02:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Oct 24 16:18:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b38d0ac9097750c6146ef909350a7fb3bb3caa60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b9:db:f9:04:91:83:c8:3e:e4:a2:8a:4b:f2:
3a:81:63:1e:3c:c3:8c:93:97:26:26:e5:cb:5a:e7:
f7:94:f9:6a:e6:52:93:62:60:a3:00:d0:3a:65:87:
35:8f:58:82:70:ca:83:32:98:e5:95:1d:54:1c:b4:
1d:d7:bd:09:73:45:14:3f:37:94:31:55:82:0d:56:
5a:9f:6b:d6:67:4d:11:bb:87:5b:21:f8:c2:fc:5f:
8f:fc:dd:0a:c9:96:94:04:2b:2f:ea:47:c6:a5:32:
fc:82:e3:b4:c0:fe:55:59:30:ee:3e:37:9f:a0:c3:
37:72:fb:21:d2:a5:d4:4e:c7:0f:70:02:35:5c:96:
19:be:f4:cb:df:ae:b7:9d:f2:f0:01:1c:f3:53:35:
7b:c2:7e:a8:69:5f:50:9f:31:96:7d:8e:66:56:53:
38:2b:ff:50:62:d4:ca:14:04:98:cc:65:a1:fe:21:
f6:4a:6d:b8:a7:8e:6d:41:c9:bb:ef:fe:51:4b:2f:
08:91:79:77:51:d8:2f:68:ba:e9:97:99:51:3f:9a:
14:20:22:4f:48:d6:53:b4:2c:59:b2:fd:77:24:70:
12:6f:90:8b:0b:16:24:d1:86:8b:9d:ea:66:56:87:
b4:7f:6c:04:fb:dd:2c:97:26:e3:26:9c:0f:d2:34:
ca:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:8D:0A:C9:09:77:50:C6:14:6E:F9:09:35:0A:7F:B3:BB:3C:AA:60
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/s40KyQl3UMYUbvkJNQp_s7s8qmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:7800::/40
Signature Algorithm: sha256WithRSAEncryption
88:9c:0a:0c:c6:3c:9e:93:78:64:22:70:8f:07:9b:88:02:a4:
9a:85:00:c1:09:23:1d:cb:69:09:16:70:2b:08:8a:23:3f:83:
19:d6:35:00:e6:2c:e5:52:f5:a4:32:af:eb:c4:0c:cc:2a:22:
4c:ca:89:46:e6:53:a6:ae:98:f9:f6:2b:a9:26:53:0c:4a:c1:
1d:e5:fa:33:84:61:7f:ab:90:d3:c8:4d:73:42:27:e2:71:06:
25:e5:2b:20:d4:75:62:bd:75:75:45:6e:e1:20:f7:07:09:78:
59:12:0b:89:b1:3c:8b:e5:7d:67:52:85:06:a9:67:93:de:7b:
6e:74:c8:70:c9:9c:14:d7:c6:75:99:06:7c:ff:39:5b:ee:ad:
2e:cf:4e:37:a4:10:ef:30:12:a9:29:86:b6:5f:6c:d0:b5:5d:
37:82:27:26:3f:12:f8:36:95:45:d7:c3:cf:fa:4f:fe:dd:d3:
3d:58:06:5f:6f:dc:c5:ac:46:a7:b6:73:79:8d:bb:44:d4:c0:
14:43:40:bb:a5:a0:1a:4e:ea:cf:90:37:a2:3d:de:66:e6:fb:
55:06:ac:f9:51:68:4f:c3:d0:fd:39:11:e7:31:a4:bf:ce:4d:
77:5a:07:09:a6:53:5e:ea:fa:20:b4:18:40:57:93:db:51:c1:
d4:e4:92:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:19:18 2025 by rpki-client