Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/m5xMq8623plK4xeG6TlxAfeZbOo.roa
File: m5xMq8623plK4xeG6TlxAfeZbOo.roa (raw, json)
Hash identifier: 3ogsy58SgCQU2wFNC+mMSfnAXuTvkXS7yGC/zszfZcs=
Subject key identifier: 9B:9C:4C:AB:CE:B6:DE:99:4A:E3:17:86:E9:39:71:01:F7:99:6C:EA
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 0199B5D0233AEE5A1DDCA4DC3954FF79EF7B
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/m5xMq8623plK4xeG6TlxAfeZbOo.roa
Signing time: Sun 05 Oct 2025 19:19:00 +0000
ROA not before: Sun 05 Oct 2025 19:19:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3257
IP address blocks: 2a0f:b242::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:b5:d0:23:3a:ee:5a:1d:dc:a4:dc:39:54:ff:79:ef:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Oct 5 19:19:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b9c4cabceb6de994ae31786e9397101f7996cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a2:53:d7:d3:8f:80:10:1e:b1:4e:cb:dd:21:
62:fe:35:a7:c2:bd:ce:e4:5e:c5:04:ad:6d:f7:6c:
23:5e:5e:41:6e:ff:db:05:8a:74:df:80:4f:26:4b:
f7:c7:a4:6d:ee:49:97:79:27:ec:16:2e:81:dc:f0:
e4:51:e0:38:b5:c4:ce:67:9e:a1:29:92:5f:d8:3c:
44:54:cd:2e:d6:6c:75:cf:63:64:ef:f1:d5:93:4d:
a0:a8:20:d2:ca:39:bc:01:64:23:9f:8d:dc:e2:da:
fb:73:12:54:ba:6e:8b:14:a1:5a:03:48:18:eb:f8:
1a:ff:85:51:86:88:ca:3f:3c:49:b3:a7:3c:d0:87:
1a:7d:41:00:3a:6c:40:88:14:f2:29:02:7d:75:da:
b1:0a:94:67:a8:96:1d:71:02:fe:97:b3:4b:5f:ef:
38:d1:62:e1:e5:ef:6b:00:5e:59:99:33:50:f9:d3:
70:d7:3f:01:76:37:56:38:68:cf:d8:7a:21:6f:a1:
29:9e:96:68:88:16:dd:c7:92:03:dd:75:ea:72:0f:
77:81:f0:91:17:e8:eb:4c:96:07:98:ac:4d:c8:86:
03:0f:37:4c:e8:62:2e:a6:45:7c:28:7d:58:d8:a1:
c4:c8:31:48:95:1c:88:87:86:13:55:3b:2d:1f:59:
7e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:9C:4C:AB:CE:B6:DE:99:4A:E3:17:86:E9:39:71:01:F7:99:6C:EA
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/m5xMq8623plK4xeG6TlxAfeZbOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b242::/32
Signature Algorithm: sha256WithRSAEncryption
56:11:b8:d6:0d:ec:92:89:9f:c1:52:08:9d:66:e8:91:9a:d6:
36:99:ab:d2:d0:6d:83:18:96:99:5a:89:aa:cd:7e:74:52:3d:
25:7c:09:63:75:35:ac:b2:2a:26:c3:4e:a0:7b:6c:2a:cf:14:
d5:4c:ab:45:70:64:d0:4a:1b:3e:9b:c4:47:2f:8a:2a:e5:b9:
39:fc:b1:e0:da:fc:0b:3d:d5:82:3f:9e:0f:73:82:d6:34:1f:
cc:81:96:f9:e0:e8:a4:31:9f:25:19:5c:f3:3c:73:ef:95:3b:
40:d3:ed:a8:eb:cc:dc:81:ee:cd:9c:01:ab:3a:65:ae:91:fd:
9a:d0:d7:7c:88:3a:a3:9f:43:60:3f:2e:b0:fa:7e:94:59:12:
8f:fb:b2:60:5e:f2:e4:0a:8c:8b:de:87:b0:d9:b2:ca:72:0c:
e6:f1:63:cc:df:82:d8:85:3c:3e:d3:a3:e3:60:ca:a8:dc:61:
14:6a:b0:20:fd:88:59:9d:d5:5d:a8:73:ed:d1:5c:94:52:40:
f5:ec:97:b1:06:55:5c:4e:4d:c1:eb:eb:d4:3f:67:78:31:a3:
87:86:fc:f5:ab:1f:78:e4:92:ab:10:73:bd:a4:31:de:87:b1:
fe:06:05:61:e7:2d:f1:aa:af:63:61:52:d4:77:85:b1:d5:5a:
32:f6:bd:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 07:48:14 2025 by rpki-client