Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/xmXNnGIr5GBQas6vtI408S7SBw0.roa
File: xmXNnGIr5GBQas6vtI408S7SBw0.roa (raw, json)
Hash identifier: wKTB/c7TREZAn59JgDq0KNnxyyvn2/OUP/MKSVDcrMY=
Subject key identifier: C6:65:CD:9C:62:2B:E4:60:50:6A:CE:AF:B4:8E:34:F1:2E:D2:07:0D
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 019C2F39F5568FA120F3EF230409D6B68C01
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/xmXNnGIr5GBQas6vtI408S7SBw0.roa
Signing time: Thu 05 Feb 2026 19:14:13 +0000
ROA not before: Thu 05 Feb 2026 19:14:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210578
IP address blocks: 2a0f:b240:7700::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:2f:39:f5:56:8f:a1:20:f3:ef:23:04:09:d6:b6:8c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 5 19:14:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c665cd9c622be460506aceafb48e34f12ed2070d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:38:1d:d4:35:a3:c3:09:c1:08:85:98:3e:36:
43:8f:47:d0:d0:df:29:c1:a0:4f:5f:82:9b:c3:ef:
7e:f8:a1:02:2e:21:79:62:39:32:92:43:dc:b9:94:
0c:cf:cd:04:48:75:44:fb:17:d3:f7:5a:ab:72:9a:
c6:d6:a1:cf:c6:39:ea:47:70:57:a3:27:62:f9:dd:
8b:07:39:cf:f9:0d:ee:a8:20:e3:a6:c0:19:fa:cf:
cd:09:2b:87:7f:37:d4:3c:f1:ab:7d:08:3f:6e:c2:
2d:7a:f8:6f:56:dd:b8:be:3c:ad:3c:78:85:e5:93:
ac:e2:aa:2d:05:9e:94:6e:73:b2:2e:e2:2e:b1:41:
3e:0f:6a:e1:84:4a:5f:50:fb:08:32:a9:6e:c3:ba:
98:81:d6:95:2c:91:de:e1:dd:14:89:89:50:56:5c:
ad:0f:d5:59:3a:fe:53:24:8b:e3:53:16:31:07:7d:
6d:8d:34:71:63:d7:cd:47:3b:2d:9e:1a:32:93:fe:
54:1e:45:32:43:38:ad:7f:42:1e:50:f7:80:a1:24:
46:58:55:91:10:71:0d:6c:25:20:55:b5:bc:64:e7:
f9:47:d0:6c:a4:a5:4a:e3:d1:05:6a:15:19:27:1b:
39:7e:b2:83:2c:4a:22:02:54:08:fe:6e:8f:13:85:
36:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:65:CD:9C:62:2B:E4:60:50:6A:CE:AF:B4:8E:34:F1:2E:D2:07:0D
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/xmXNnGIr5GBQas6vtI408S7SBw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:7700::/40
Signature Algorithm: sha256WithRSAEncryption
1e:ab:e2:83:b7:be:4c:98:d8:75:c9:4d:3e:9b:70:e4:1a:69:
96:c3:a5:42:0c:19:57:18:e5:87:28:4b:53:25:f8:4a:15:fd:
14:76:b8:b4:03:cf:cd:a8:3a:82:74:42:4d:3c:4a:3c:78:cb:
3e:da:f6:58:9b:b8:e5:51:da:7f:55:95:5d:b2:37:88:a9:aa:
5e:33:77:6d:a5:84:03:32:9e:f8:55:7d:1e:f9:82:ee:8d:f1:
17:fd:4c:33:25:de:01:4e:87:a1:38:d1:c0:9e:c5:4f:61:a9:
c1:b5:d1:9b:2a:6a:a3:5b:ce:53:c5:de:82:b1:5f:e7:bd:28:
b8:5e:48:26:51:4b:e0:7c:31:8e:1c:47:1a:5b:9a:e5:1d:ce:
96:39:cc:a3:42:c8:b9:6b:b5:68:e7:17:dd:95:89:f8:85:b1:
97:93:32:9e:61:83:4f:ae:47:59:97:78:18:71:5c:26:a1:c5:
5a:74:0a:0d:a3:ee:16:9c:0e:10:bd:3d:54:98:76:f4:23:31:
92:6e:1a:6d:9a:28:a5:fd:85:81:9c:75:84:82:9c:26:b3:fb:
44:e3:15:8c:b2:6f:e4:85:61:ff:56:f3:06:69:62:6d:cf:f5:
20:80:dd:65:fb:16:b0:e6:94:41:9f:00:f0:36:f5:27:38:6f:
75:6f:b5:a2
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZwvOfVWj6Eg8+8jBAnWtowBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjYwMjA1MTkxNDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjY1Y2Q5YzYyMmJlNDYwNTA2YWNlYWZiNDhlMzRmMTJlZDIwNzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzgd1DWjwwnBCIWYPjZDj0fQ0N8p
waBPX4Kbw+9++KECLiF5YjkykkPcuZQMz80ESHVE+xfT91qrcprG1qHPxjnqR3BX
oydi+d2LBznP+Q3uqCDjpsAZ+s/NCSuHfzfUPPGrfQg/bsItevhvVt24vjytPHiF
5ZOs4qotBZ6UbnOyLuIusUE+D2rhhEpfUPsIMqluw7qYgdaVLJHe4d0UiYlQVlyt
D9VZOv5TJIvjUxYxB31tjTRxY9fNRzstnhoyk/5UHkUyQzitf0IeUPeAoSRGWFWR
EHENbCUgVbW8ZOf5R9BspKVK49EFahUZJxs5frKDLEoiAlQI/m6PE4U22QIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFMZlzZxiK+RgUGrOr7SONPEu0gcNMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEveG1YTm5HSXI1R0JRYXM2dnRJNDA4UzdTQncwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg+yQHcw
DQYJKoZIhvcNAQELBQADggEBAB6r4oO3vkyY2HXJTT6bcOQaaZbDpUIMGVcY5Yco
S1Ml+EoV/RR2uLQDz82oOoJ0Qk08Sjx4yz7a9libuOVR2n9VlV2yN4ipql4zd22l
hAMynvhVfR75gu6N8Rf9TDMl3gFOh6E40cCexU9hqcG10ZsqaqNbzlPF3oKxX+e9
KLheSCZRS+B8MY4cRxpbmuUdzpY5zKNCyLlrtWjnF92VifiFsZeTMp5hg0+uR1mX
eBhxXCahxVp0Cg2j7hacDhC9PVSYdvQjMZJuGm2aKKX9hYGcdYSCnCaz+0TjFYyy
b+SFYf9W8wZpYm3P9SCA3WX7FrDmlEGfAPA29Sc4b3VvtaI=
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:04:12 2026 by rpki-client