Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/z8VVZPezHv_DOp5qKB74en3eXrQ.roa
File: z8VVZPezHv_DOp5qKB74en3eXrQ.roa (raw, json)
Hash identifier: byc9wk7KAYFhsrfHkuBkIeXeAgEBrM63GJ6pp/NmEjQ=
Subject key identifier: CF:C5:55:64:F7:B3:1E:FF:C3:3A:9E:6A:28:1E:F8:7A:7D:DE:5E:B4
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 019A20AFCB86148307B672B174B957324D23
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/z8VVZPezHv_DOp5qKB74en3eXrQ.roa
Signing time: Sun 26 Oct 2025 13:23:03 +0000
ROA not before: Sun 26 Oct 2025 13:23:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200229
IP address blocks: 2a0f:b240:d00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:af:cb:86:14:83:07:b6:72:b1:74:b9:57:32:4d:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Oct 26 13:23:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cfc55564f7b31effc33a9e6a281ef87a7dde5eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e3:2c:66:15:e9:10:f1:8a:f2:30:0e:54:fd:
03:eb:73:ee:fb:4d:d9:b8:03:fa:5e:12:81:9a:73:
5d:43:59:1d:90:c1:f1:5c:d5:f7:5a:42:a9:02:89:
fd:12:f4:a9:f6:7f:e8:5e:43:68:15:68:7e:0d:c0:
d6:17:d0:2d:7c:01:7f:ab:c1:9b:68:d7:48:1c:f7:
32:64:c0:69:fe:c9:6b:11:91:56:9c:6b:58:54:1d:
e7:13:2e:58:1a:0f:c3:fe:1d:29:77:07:62:b5:be:
ef:c7:c2:f2:2d:3e:37:a7:0d:8a:d6:1e:ac:c7:56:
bc:5f:cb:05:1c:d7:a9:73:97:68:a7:53:80:e9:49:
31:a4:6f:6a:73:a3:3a:bf:1c:14:25:55:0a:5b:20:
9a:c1:8e:d8:dc:3d:8a:34:9c:f8:6e:09:6b:81:9d:
b8:f9:df:71:1a:4e:59:bd:46:fe:7b:8c:3d:7c:3e:
59:f9:d2:d0:1f:48:49:54:bf:ba:1f:53:db:32:69:
04:fc:cf:86:b3:53:b5:22:d0:db:8c:8f:e4:10:7b:
ed:2e:5d:af:7b:06:df:c8:ae:ba:62:44:98:c9:23:
df:0a:f8:f2:b8:1b:f3:49:22:48:72:e8:80:cd:85:
75:af:9e:07:cc:f4:fd:8d:21:50:b7:2d:ab:f7:f0:
b0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C5:55:64:F7:B3:1E:FF:C3:3A:9E:6A:28:1E:F8:7A:7D:DE:5E:B4
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/z8VVZPezHv_DOp5qKB74en3eXrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:d00::/40
Signature Algorithm: sha256WithRSAEncryption
62:ee:79:32:98:8d:f8:3b:53:6f:61:c0:1c:40:56:e3:2c:0a:
62:48:e7:a1:b1:5e:af:af:1e:4b:62:14:be:3e:07:69:d5:ba:
f1:6e:88:d2:46:e8:74:11:56:bd:21:4b:fb:49:d8:33:be:a6:
85:19:dd:48:d8:58:ea:7c:08:50:46:4b:3e:59:cf:cb:e2:ef:
95:85:ca:f2:29:08:f8:d2:6c:5d:03:a1:6b:7c:2d:05:1b:76:
f4:8c:72:4a:90:34:c0:37:db:7f:7d:c4:12:75:94:e6:8a:46:
25:61:4e:31:a2:05:3b:49:9d:28:4a:f0:ba:43:0a:a6:5e:a2:
81:87:61:a6:49:0c:43:85:7e:66:1e:7d:94:98:0e:25:ab:ef:
9f:41:8b:6d:59:e0:1a:65:8e:0d:46:8f:2b:e5:f9:85:2d:9a:
55:b5:77:ae:ce:a3:fc:35:04:7d:18:cf:e6:1b:20:61:2e:d9:
4a:8e:3a:d4:b1:93:b2:bb:9b:88:71:0f:36:54:fe:74:75:b7:
5c:81:0e:ab:3d:55:ca:c4:37:06:7d:21:de:d3:bc:ed:20:5f:
33:3b:63:c2:d5:82:fb:56:01:c7:cf:79:d0:c5:ff:ea:02:64:
2f:ad:45:2c:70:58:bb:cf:6e:78:db:64:f4:d7:66:9b:5a:37:
5d:9c:fc:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:31:34 2025 by rpki-client