Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/2BzAVsEr5M948V1YLj9-ujC-cUo.roa
File: 2BzAVsEr5M948V1YLj9-ujC-cUo.roa (raw, json)
Hash identifier: GtaKU5xG3nkKpmkSmkJ2nVO0jhL3T/eVdtTHKfko740=
Subject key identifier: D8:1C:C0:56:C1:2B:E4:CF:78:F1:5D:58:2E:3F:7E:BA:30:BE:71:4A
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 019FF273EDC349BE07CA2820BC0562568B3D
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/2BzAVsEr5M948V1YLj9-ujC-cUo.roa
Signing time: Tue 11 Aug 2026 20:11:51 +0000
ROA not before: Tue 11 Aug 2026 20:11:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212387
IP address blocks: 2a0f:b240:a5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f2:73:ed:c3:49:be:07:ca:28:20:bc:05:62:56:8b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Aug 11 20:11:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d81cc056c12be4cf78f15d582e3f7eba30be714a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:00:3d:c6:99:7d:45:91:d9:9b:b9:4d:61:6b:
b6:94:32:07:c1:01:b5:5d:d1:34:e9:a9:9c:55:6a:
cb:fd:d9:f0:21:c1:e5:d7:a4:57:34:a0:19:7c:83:
92:cc:73:ee:32:77:e6:19:11:93:f1:57:d4:9e:e4:
ce:6a:f1:06:a5:ed:c7:3e:55:cc:07:7a:da:1e:57:
56:12:bf:9f:6a:60:15:ff:fe:4e:14:1e:2b:3e:8f:
f7:cc:8d:bc:cd:1f:8c:8b:4e:11:15:71:bb:e3:71:
90:ff:f9:fc:ab:d0:47:e9:7d:78:c8:9d:3b:54:d8:
7d:59:91:42:bb:43:1c:fb:03:e5:09:4f:64:3b:86:
32:24:bb:23:7c:54:fb:7d:64:1c:cb:04:75:02:38:
6a:14:a5:7a:52:68:de:4a:44:21:6e:3e:c7:df:97:
2a:6b:a7:a3:0c:6b:a3:fa:99:cd:28:55:b6:5f:e2:
a4:af:51:ef:fb:a3:bc:56:d3:b7:1b:f3:a2:09:61:
55:b6:7f:90:cf:59:1e:df:b1:09:3f:72:8e:2a:e7:
dc:ba:8f:b4:81:d4:f2:d7:cb:5a:b3:0f:63:f2:95:
74:cb:fd:76:f5:41:1d:f8:16:50:8f:ec:51:11:02:
a4:e4:eb:f9:1b:2e:3d:98:ac:7c:aa:ec:8e:69:7f:
0c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:1C:C0:56:C1:2B:E4:CF:78:F1:5D:58:2E:3F:7E:BA:30:BE:71:4A
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/2BzAVsEr5M948V1YLj9-ujC-cUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:a5::/48
Signature Algorithm: sha256WithRSAEncryption
04:d8:32:7a:13:e0:15:78:23:94:13:9b:32:55:27:2e:1f:a0:
29:ca:5e:4d:d3:6a:d2:18:ab:7c:a7:7c:c4:bb:83:d1:03:f5:
56:0e:98:42:2e:8f:ab:f9:4f:06:b2:6c:c6:50:ac:a6:dc:ce:
c5:22:a6:26:ab:0e:d5:05:b6:55:cc:ba:1e:ef:cd:39:ce:d5:
ca:8b:ab:dc:20:00:c2:86:e1:8d:aa:de:99:14:57:b2:1e:0c:
2c:9e:1a:2d:57:e5:bb:c1:fb:10:93:ce:50:da:6c:97:31:72:
89:92:3c:02:cd:17:ed:db:b8:23:12:28:92:44:b6:16:80:3a:
7c:b9:06:ab:5f:32:d0:a7:fa:fb:61:f9:5b:c5:2f:12:a1:16:
a6:fb:f8:30:cf:44:4b:37:ab:41:70:d2:d0:6d:b9:d5:e1:a9:
1a:28:11:40:b5:1d:48:52:fc:ab:8b:79:a8:66:24:ca:24:f4:
d8:02:c2:a2:54:2f:c9:8d:1e:bb:3a:52:ab:cf:0e:14:9a:15:
39:46:90:ab:76:c0:4a:ba:10:d1:1d:5e:59:90:f1:3d:45:b7:
45:42:fc:21:1f:0a:75:14:52:68:cb:43:36:42:99:ce:f5:20:
a0:6d:7e:27:52:e4:25:6d:87:46:16:88:6d:01:53:14:46:7a:
a0:48:42:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:03:41 2026 by rpki-client