Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/teDDNHGS-jgEc5WGhfizKKvrJPY.roa
File: teDDNHGS-jgEc5WGhfizKKvrJPY.roa (raw, json)
Hash identifier: kSZdfrAlQhGCZz+uuigySOlKejlY0WqZUtSoFjP8hAo=
Subject key identifier: B5:E0:C3:34:71:92:FA:38:04:73:95:86:85:F8:B3:28:AB:EB:24:F6
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 019D406953E6AA2AEFEABA6D24D6A351546F
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/teDDNHGS-jgEc5WGhfizKKvrJPY.roa
Signing time: Mon 30 Mar 2026 20:22:17 +0000
ROA not before: Mon 30 Mar 2026 20:22:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199683
IP address blocks: 2a0f:b240:8::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:40:69:53:e6:aa:2a:ef:ea:ba:6d:24:d6:a3:51:54:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Mar 30 20:22:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b5e0c3347192fa380473958685f8b328abeb24f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:26:83:10:9f:2d:be:46:8e:b1:a9:6b:d2:73:
bd:cd:4c:11:6e:29:e8:c8:df:93:ab:b3:71:c4:b6:
fd:f0:7a:4b:fd:78:53:95:29:37:d3:ec:04:2a:52:
86:c4:2f:de:5b:f6:83:d4:05:ad:a4:23:31:e4:81:
a0:1c:0a:a7:f8:31:ef:f6:dc:3b:1a:1b:f1:40:df:
b6:e7:cc:ce:b4:14:3a:98:10:b2:c0:bb:c1:4d:9d:
18:91:8a:ca:93:fe:45:6f:f6:cb:81:bb:72:f5:17:
c0:eb:1e:29:13:f5:91:52:2f:70:1d:12:30:17:8f:
9b:5f:cb:6f:8b:c8:29:f7:8c:ad:3b:76:a5:c8:e0:
57:d1:9e:4e:64:7e:dd:92:4a:cf:fd:ee:a9:fd:8c:
9e:a7:35:06:19:d2:2c:ec:a3:f5:d4:2b:65:c8:31:
2f:db:02:c4:2d:21:7f:d7:05:2e:09:e9:92:37:2a:
23:e3:20:e0:66:dc:31:11:99:37:15:40:19:68:ed:
fd:43:1b:db:4d:a7:3b:c1:f6:29:48:01:2b:06:b4:
98:b5:d2:99:c6:03:fe:54:b6:64:45:62:72:2d:77:
96:e9:7e:2a:35:a8:fb:fe:fb:58:ad:42:45:91:35:
76:18:43:4f:09:eb:22:5b:5b:c0:e6:61:5e:92:3d:
b7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E0:C3:34:71:92:FA:38:04:73:95:86:85:F8:B3:28:AB:EB:24:F6
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/teDDNHGS-jgEc5WGhfizKKvrJPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:8::/46
Signature Algorithm: sha256WithRSAEncryption
72:bd:79:2d:ab:83:b3:b1:b3:91:b4:5c:f5:ac:6b:32:b0:de:
ad:bb:cc:9b:72:9e:33:bb:e7:b3:bb:1d:36:6c:fa:45:99:37:
66:5c:62:85:c7:2d:93:42:5a:a6:f2:1b:72:63:82:48:a8:af:
1a:f5:43:d8:2a:31:37:fc:26:29:cb:fd:2e:65:a1:12:1e:b7:
07:70:c4:48:7f:cc:5b:bc:5e:aa:5e:15:c5:d8:d8:4d:ca:ee:
26:ed:62:da:c7:60:65:24:43:1a:71:f6:46:5d:d4:5f:ac:4a:
fa:7e:8c:91:d8:dc:6a:59:57:72:7f:d1:29:a8:ca:22:d8:6f:
69:1f:63:8c:75:2c:5a:97:63:39:22:47:27:12:d9:7d:96:8f:
12:de:0c:a6:27:5f:ea:da:18:ab:79:1d:93:1d:02:74:05:f5:
4d:c0:23:16:70:78:4f:61:05:04:b0:2b:8c:dc:fe:c3:be:01:
bf:44:84:84:0b:43:13:4d:cd:e1:ac:fc:a6:2e:06:ad:10:2c:
c1:2e:16:88:72:82:95:37:29:35:b6:22:42:6d:65:c6:2b:30:
06:da:7c:7f:ba:d7:b3:e5:97:4f:7a:68:e3:a1:7a:cc:67:dc:
b0:41:f9:6c:6c:d0:13:f0:1a:72:bb:2f:5e:f5:f0:40:94:26:
f7:df:df:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:58:16 2026 by rpki-client