Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/4q_HoRH_4lzgJ5DUAWKn6jnqsaw.roa
File: 4q_HoRH_4lzgJ5DUAWKn6jnqsaw.roa (raw, json)
Hash identifier: CWD3bP09fV0QxlnefkdKkqOuED2JKmkN4HcFmsQTY1o=
Subject key identifier: E2:AF:C7:A1:11:FF:E2:5C:E0:27:90:D4:01:62:A7:EA:39:EA:B1:AC
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 019EFAA149D8DFB2D68C9D9899D00AD6A53C
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/4q_HoRH_4lzgJ5DUAWKn6jnqsaw.roa
Signing time: Wed 24 Jun 2026 17:15:34 +0000
ROA not before: Wed 24 Jun 2026 17:15:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219365
IP address blocks: 2a0f:b240:1a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 07:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fa:a1:49:d8:df:b2:d6:8c:9d:98:99:d0:0a:d6:a5:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Jun 24 17:15:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e2afc7a111ffe25ce02790d40162a7ea39eab1ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:55:8d:0a:eb:9d:47:ad:32:a2:5b:69:20:0b:
06:cc:13:6e:22:ec:59:36:fd:92:1c:f3:ae:8b:c7:
e7:f0:d9:b0:81:0b:5d:bc:6b:33:9d:ac:e6:e0:50:
b3:25:f2:7d:71:3b:39:2c:7a:ea:ee:50:c7:43:6d:
70:be:8f:c2:4c:59:a4:15:2c:31:e2:1e:04:31:90:
30:5b:a8:6a:a5:b7:5f:8f:4f:75:10:6a:72:bb:99:
c5:ef:29:3b:27:7f:3a:46:75:31:80:22:4a:1d:9c:
4c:a2:6f:5c:49:73:c5:21:8a:6d:9c:64:8b:57:21:
62:3d:40:c7:b6:6c:52:d5:7e:4d:ae:b0:58:03:8c:
b3:26:be:3b:fb:90:46:48:17:70:01:1e:51:4e:9e:
6b:c3:8d:51:34:4e:b3:00:2f:7f:f3:96:04:0d:ad:
08:f4:b4:76:cc:63:9d:96:8b:06:8e:d6:b8:f6:17:
05:df:5b:87:03:16:c1:6d:81:b8:4a:d4:6c:d6:24:
81:8e:73:19:fc:60:40:1a:e3:b9:b3:4b:7e:83:b1:
24:24:43:cf:6a:f6:2b:64:47:1d:8b:e3:66:a6:e9:
13:24:ac:0d:c6:22:66:e9:e2:d1:11:53:98:c0:47:
42:27:1a:95:14:ff:38:54:08:4a:fd:01:4e:1e:e6:
0b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:AF:C7:A1:11:FF:E2:5C:E0:27:90:D4:01:62:A7:EA:39:EA:B1:AC
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/4q_HoRH_4lzgJ5DUAWKn6jnqsaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:1a::/48
Signature Algorithm: sha256WithRSAEncryption
8a:21:31:90:f9:10:2e:6e:c5:b0:f5:bf:a6:9c:72:41:99:e5:
3f:88:2f:2e:d8:8b:60:89:d2:4c:2c:fe:4c:19:5f:51:9a:2a:
ac:20:0b:65:57:16:69:9c:a9:d1:be:0a:7f:9e:1c:88:6f:ca:
61:56:8d:bd:89:4a:2d:a0:59:84:e9:27:63:20:e5:93:f3:96:
ac:7b:9e:df:10:16:38:3b:bf:a5:03:be:db:7d:b5:f0:6d:3d:
67:4e:0e:6f:76:14:a2:8e:38:16:47:dd:c1:c0:7f:fc:fc:5c:
a6:87:b2:96:6b:30:72:bb:35:96:e2:4d:f1:7f:7e:73:de:a5:
b3:35:fc:68:26:97:ea:c8:4d:d2:45:cc:e7:bc:64:42:4d:bb:
f9:21:94:b1:3f:04:3f:ce:c4:d7:fa:ff:32:34:0f:f0:eb:c2:
4a:ff:a6:7a:9a:fb:12:ae:de:fb:e5:1f:48:9c:67:01:95:9a:
e4:c1:4d:f2:c9:65:02:2f:15:e3:af:6a:e5:c9:98:9d:86:cf:
5b:c1:eb:ef:f4:5d:85:fb:a4:fd:fc:63:e9:9e:94:24:31:3e:
9f:e5:2d:ad:6a:ff:4d:e6:20:93:a6:9b:0c:33:50:3c:5a:1a:
5c:a1:78:f7:67:e5:ad:31:92:8b:71:78:2a:d8:40:62:c7:1c:
71:03:83:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:15:29 2026 by rpki-client