Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/yXluBifSLpFWVuMONYJai-akhpg.roa
File: yXluBifSLpFWVuMONYJai-akhpg.roa (raw, json)
Hash identifier: kCAn+0N3b1TFaS7DEN9MSC/8pUE1sVteMEmRoeEVegg=
Subject key identifier: C9:79:6E:06:27:D2:2E:91:56:56:E3:0E:35:82:5A:8B:E6:A4:86:98
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 019C9451610AC301F2681B0A40A7939EAAF4
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/yXluBifSLpFWVuMONYJai-akhpg.roa
Signing time: Wed 25 Feb 2026 10:21:27 +0000
ROA not before: Wed 25 Feb 2026 10:21:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200229
IP address blocks: 2a0f:b240:d00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:94:51:61:0a:c3:01:f2:68:1b:0a:40:a7:93:9e:aa:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 25 10:21:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c9796e0627d22e915656e30e35825a8be6a48698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a5:f1:3f:1c:f1:99:28:42:14:37:8d:6a:20:
07:46:c4:84:68:7b:8c:84:4a:f3:25:08:28:04:d1:
6d:b0:13:27:0c:b4:5b:2e:91:81:e8:17:bf:54:30:
66:81:25:79:43:c2:65:db:b7:4f:d8:c4:4b:7e:15:
16:38:d8:9e:f9:2f:44:00:d1:55:82:02:e2:bf:d9:
c0:be:91:65:38:56:05:34:f2:32:3c:2a:2e:91:2c:
5a:15:cf:d1:56:cd:1f:3b:85:ea:6c:a3:10:f4:4b:
51:0c:ed:d1:fc:0a:40:12:3b:a7:d3:f5:ca:43:8e:
7f:f7:12:37:da:c8:47:ca:3c:6d:c7:07:32:1c:50:
20:e3:7b:59:83:79:81:ba:c3:04:7d:e9:3f:f3:d0:
31:27:ac:0e:49:13:db:48:70:6d:12:08:82:9a:33:
7a:7b:6b:08:cc:a7:2c:e5:e0:e8:6d:88:6f:d9:8b:
c3:12:43:f5:85:b3:0f:58:83:a1:c3:7b:73:0f:76:
cd:85:8a:49:41:ea:f4:f9:55:4e:21:36:6e:1d:bc:
07:1f:ca:4a:6e:29:cd:5b:20:cd:47:86:c9:16:5d:
aa:32:ac:cd:05:bb:b3:f3:eb:b3:7b:d7:ea:eb:6b:
0d:7e:bd:b0:36:35:a8:51:48:8a:f1:fd:35:ec:4d:
b6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:79:6E:06:27:D2:2E:91:56:56:E3:0E:35:82:5A:8B:E6:A4:86:98
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/yXluBifSLpFWVuMONYJai-akhpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:d00::/40
Signature Algorithm: sha256WithRSAEncryption
73:eb:c6:4c:de:60:c0:66:1d:7b:dc:1c:c3:c0:34:e0:8e:1f:
0e:0c:2a:6d:71:eb:35:de:f4:2e:df:42:f1:f0:88:88:ab:79:
2e:bc:cd:91:1d:e2:07:1d:f1:6c:35:86:aa:74:a4:c3:42:74:
78:25:df:51:d9:ca:c7:8f:8c:5d:7a:c4:7f:ca:50:47:f2:4a:
c4:e7:25:f5:35:67:ab:7b:e5:44:7a:42:59:75:8a:d6:eb:77:
2a:7d:f4:b5:1b:37:c2:99:27:5d:78:62:e5:f0:a7:b1:20:88:
ec:91:4b:e3:a7:02:c3:5e:cc:5d:31:61:0f:d6:fc:03:32:d5:
3a:7e:bc:7e:69:07:23:f0:56:f5:d1:94:55:9e:0b:8a:01:2b:
d1:6c:bc:0a:21:e2:52:4a:ef:b5:49:51:f0:fb:3d:6e:d4:ee:
96:39:9a:77:66:ac:42:d7:0b:15:4d:4a:02:ea:99:8b:fa:2e:
31:e8:6a:cd:f5:74:47:79:ca:e9:85:ca:d9:f9:ee:09:0c:d1:
6a:00:b0:55:69:4c:df:8c:a7:e4:6c:90:8d:79:86:26:e7:b1:
a9:e4:17:07:47:c5:20:a9:5f:23:05:9b:a6:03:93:ac:22:84:
4e:08:9d:65:bb:0b:4a:33:d0:a0:72:d7:4a:d3:66:9d:40:96:
5a:00:42:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:42:19 2026 by rpki-client