Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/ejBDTMg0EGP1RdgzgiUhmKfwBpc.roa
File: ejBDTMg0EGP1RdgzgiUhmKfwBpc.roa (raw, json)
Hash identifier: UrhFoTgheLQ4Z73TVyD5N/wOHQ6mXPWfk8wfg8coNNI=
Subject key identifier: 7A:30:43:4C:C8:34:10:63:F5:45:D8:33:82:25:21:98:A7:F0:06:97
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 01A0F4C66D6D6D0686FCB99D7A79FDD58EF4
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/ejBDTMg0EGP1RdgzgiUhmKfwBpc.roa
Signing time: Thu 01 Oct 2026 00:03:59 +0000
ROA not before: Thu 01 Oct 2026 00:03:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214016
IP address blocks: 2a0f:b244:1000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f4:c6:6d:6d:6d:06:86:fc:b9:9d:7a:79:fd:d5:8e:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Oct 1 00:03:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7a30434cc8341063f545d83382252198a7f00697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:13:a6:c7:60:97:01:4b:7e:ff:1e:af:66:f8:
3c:89:b1:69:44:75:e8:53:59:ca:e4:20:91:29:7e:
da:80:7c:bf:aa:e4:64:d6:07:c9:a4:a7:29:2b:02:
a3:d8:a2:9a:82:44:57:fc:af:f4:7b:0f:4d:5f:8b:
5b:f0:a3:a0:49:16:bd:8f:7b:2c:88:07:86:aa:50:
07:3e:35:fd:33:52:97:7f:18:86:d5:b4:95:ce:19:
3b:f4:cb:06:5a:d7:ec:47:96:d4:b4:5c:c0:99:a8:
71:c0:ef:44:ab:3f:1c:a8:f7:ab:34:b8:92:67:65:
5f:c1:f8:28:20:22:fd:b1:21:c2:2c:3f:32:3c:63:
34:e6:12:2c:ee:e4:27:be:85:c1:43:7d:fc:54:d8:
0b:6e:e9:b1:e5:fa:b2:ae:82:cc:25:bf:f6:bc:7f:
b2:94:70:e3:6b:78:ee:3b:58:55:bc:a5:5b:af:9b:
6a:81:7d:d0:b4:05:59:e6:9a:1d:32:0b:7f:05:cc:
17:25:93:ae:15:fc:85:93:89:39:06:6e:15:b5:0d:
65:5d:43:63:9e:b2:1c:05:5f:2f:86:24:7b:f6:77:
17:e5:49:08:7f:e6:9f:6a:26:44:82:81:a3:5e:49:
f1:b8:9a:94:63:e5:a8:4c:ce:07:04:b0:69:fd:20:
14:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:30:43:4C:C8:34:10:63:F5:45:D8:33:82:25:21:98:A7:F0:06:97
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/ejBDTMg0EGP1RdgzgiUhmKfwBpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b244:1000::/36
Signature Algorithm: sha256WithRSAEncryption
18:a5:35:60:86:62:3d:ec:79:55:b4:1e:a8:5e:d7:23:7b:3f:
37:4a:8a:61:dd:a1:35:ca:47:90:97:65:8c:76:26:6f:ee:d1:
8a:50:cd:53:a1:8f:47:9c:e2:06:56:93:31:9d:5e:38:5a:5d:
39:24:e1:ee:33:1e:e2:7c:1f:c2:e4:56:eb:1d:63:9a:d8:c6:
f4:94:d1:33:07:52:12:dd:e0:3d:85:4e:7c:d9:62:77:15:4c:
2f:19:0a:68:ac:d3:ee:24:11:f2:4f:2e:cb:4d:4e:32:06:bc:
db:5a:35:69:8d:2e:4f:e0:b0:9d:3c:5e:4c:66:1c:33:c9:e8:
81:56:9a:20:de:d2:08:34:7b:42:77:dc:c2:b7:04:e1:71:e4:
01:06:fe:42:aa:96:3c:f0:8c:0a:49:84:ae:7a:06:55:e8:3e:
1d:fd:f9:a6:6e:15:78:2c:50:02:1f:6a:a8:27:50:ff:5a:26:
86:d2:a5:33:bb:54:53:d5:ac:e2:7a:8e:7d:2b:c5:da:cf:6f:
eb:bd:0b:f1:cb:5c:3e:77:20:d8:95:44:e2:26:bd:ac:c6:f1:
43:7e:b9:76:90:28:f8:ad:f7:76:c1:e3:1c:25:f5:9f:a4:cf:
d0:19:89:0a:e5:48:97:6f:5c:70:94:15:50:c8:97:15:bc:49:
d0:ec:57:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 18:51:59 2026 by rpki-client