Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/a6cF0bpNofa5GGQr8R_yHJMuyZE.roa
File: a6cF0bpNofa5GGQr8R_yHJMuyZE.roa (raw, json)
Hash identifier: 7SgWQ3Dd7u9XNC6t7dlaAp9yEbpmftU4pNC1IHy1Zwg=
Subject key identifier: 6B:A7:05:D1:BA:4D:A1:F6:B9:18:64:2B:F1:1F:F2:1C:93:2E:C9:91
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 019A4A7C7A3F8D49D315F606208C72D99652
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/a6cF0bpNofa5GGQr8R_yHJMuyZE.roa
Signing time: Mon 03 Nov 2025 16:11:03 +0000
ROA not before: Mon 03 Nov 2025 16:11:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 87.254.11.0/24 maxlen: 24
87.254.18.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4a:7c:7a:3f:8d:49:d3:15:f6:06:20:8c:72:d9:96:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Nov 3 16:11:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ba705d1ba4da1f6b918642bf11ff21c932ec991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f5:92:22:86:9c:26:4d:1f:b7:7d:b3:d6:fc:
ae:04:fe:bc:17:d6:d1:2e:8d:c3:5c:36:0b:d9:7e:
ce:85:4e:92:71:8a:00:5f:c2:bb:aa:bf:ec:60:9f:
e9:bb:b2:02:1e:c9:fe:8b:b4:7e:c6:1a:12:c3:93:
90:26:a1:53:b4:80:a6:e1:08:ee:6b:2d:e5:a5:54:
2d:ec:35:f3:8a:c8:66:9a:e4:0d:56:1a:93:82:cf:
15:a6:36:b3:21:ce:63:df:82:20:dd:14:df:64:e7:
23:8f:b9:f2:88:b4:9f:cb:08:ed:f6:4a:69:a9:99:
6a:23:94:cd:a8:82:3c:4f:f9:fd:6c:36:ff:16:de:
d3:90:32:67:90:a9:5a:a7:0f:84:f8:77:44:15:d7:
cd:69:25:37:ea:1b:9c:78:6d:d5:58:3a:e3:18:86:
ab:e3:58:85:ff:91:ce:d0:f3:fb:53:24:81:5b:2f:
55:50:a2:0d:8f:3c:3d:3d:b4:d2:66:ef:17:43:0b:
0c:1a:03:da:89:fd:c6:f3:18:32:36:c6:95:f7:93:
31:69:37:fd:70:7c:07:4a:c6:5f:c9:32:84:ec:6c:
51:ef:9c:48:b1:1f:30:04:3e:56:6a:92:f4:f7:91:
81:d1:17:7e:a2:4a:3b:ca:47:fb:9e:cb:29:f5:e1:
a9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:A7:05:D1:BA:4D:A1:F6:B9:18:64:2B:F1:1F:F2:1C:93:2E:C9:91
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/a6cF0bpNofa5GGQr8R_yHJMuyZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.11.0/24
87.254.18.0/23
Signature Algorithm: sha256WithRSAEncryption
33:2d:4d:1d:e7:11:ba:5f:37:0a:f0:1d:d9:3e:7e:fa:34:ab:
75:57:ff:4c:f2:78:eb:8d:c2:aa:81:d3:3b:bc:73:67:e9:2a:
52:dd:20:49:da:8a:ba:93:c8:78:f2:fe:b4:f2:2c:99:e4:a5:
29:46:fa:19:18:41:e2:97:6e:9c:7b:12:b8:38:0c:b8:21:5b:
07:77:6d:95:8b:8c:34:8d:3d:86:c9:d2:9b:73:61:2e:85:e9:
d1:c9:03:87:08:5a:b1:90:44:18:8e:6d:c7:9b:4b:71:80:c4:
ad:e0:cb:f8:fb:d4:3f:ae:0c:ab:bb:e7:07:1f:e9:27:b2:27:
df:5d:90:c5:30:40:42:7f:b0:22:68:8c:dc:d1:e3:e2:c1:32:
f7:e0:8f:c1:ca:4d:79:b3:7f:28:b1:e5:6c:8c:44:27:60:1b:
47:80:00:7f:f0:4c:7e:9e:d8:a3:00:f1:fa:39:cd:db:cd:92:
22:b3:0e:bf:ed:c2:37:a9:67:88:46:7f:a8:fa:a2:b0:95:18:
35:bf:47:3d:7f:aa:ae:e3:c1:59:0b:28:1a:e3:cd:ee:0f:d6:
da:e5:ec:45:d2:7d:20:59:26:b8:e0:4b:e9:f2:37:d4:32:51:
35:95:1c:04:aa:ee:1a:5d:dd:91:b9:db:a2:90:93:1f:34:40:
83:c6:bd:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:30:13 2025 by rpki-client