Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/6Y2TymiX_p_OYajYrvRgQjaJEZQ.roa
File: 6Y2TymiX_p_OYajYrvRgQjaJEZQ.roa (raw, json)
Hash identifier: VKRbk5jJ7amkAFp1xDSA61hESbj30yxQOwfBWlftbqY=
Subject key identifier: E9:8D:93:CA:68:97:FE:9F:CE:61:A8:D8:AE:F4:60:42:36:89:11:94
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 01A06E0E8DB8D4E9FD7A95A30A95BBBEF202
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/6Y2TymiX_p_OYajYrvRgQjaJEZQ.roa
Signing time: Fri 04 Sep 2026 20:14:02 +0000
ROA not before: Fri 04 Sep 2026 20:14:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44822
IP address blocks: 2a0f:b240:7e00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:14:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:0e:8d:b8:d4:e9:fd:7a:95:a3:0a:95:bb:be:f2:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Sep 4 20:14:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e98d93ca6897fe9fce61a8d8aef4604236891194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ea:9f:a6:61:e3:00:9d:7d:04:0e:72:5f:e5:
7c:63:3c:28:4b:c2:63:76:48:61:18:93:f4:a5:5b:
18:f9:80:4d:38:80:3a:a7:f8:1f:bb:73:ab:87:de:
3b:69:34:6d:75:13:6b:13:fb:46:48:09:12:98:5c:
7b:cf:72:9e:bb:00:23:c4:b3:16:21:51:65:9d:27:
4d:11:ef:49:09:25:bc:37:e8:7e:67:5f:fd:22:3e:
9d:7b:cd:79:3a:f5:4c:d4:22:80:b3:2a:61:42:03:
e0:35:7c:c6:47:65:5c:3f:c5:d2:cf:f3:26:7c:0e:
a6:c6:1b:0a:54:fc:3e:10:d7:34:86:a8:f3:c2:e0:
01:0b:53:95:c1:3a:99:e3:a8:f6:1e:bd:92:f3:35:
f7:25:92:d4:c1:49:ea:cb:9c:1d:73:26:b1:df:49:
aa:25:a3:80:1c:c3:df:ac:c7:97:0c:63:d8:91:58:
d1:0b:f3:91:53:74:94:c9:74:d3:06:03:35:8c:09:
2b:35:d6:5b:13:ee:6d:16:06:fc:41:fc:61:34:d9:
12:c1:d5:b7:9b:ab:78:bb:4d:b2:70:a9:5c:33:9b:
7e:81:93:60:fb:09:9c:83:89:d9:06:7d:60:c0:b9:
e0:7c:57:ef:e5:d8:74:f5:7a:06:40:13:fd:41:08:
74:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:8D:93:CA:68:97:FE:9F:CE:61:A8:D8:AE:F4:60:42:36:89:11:94
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/6Y2TymiX_p_OYajYrvRgQjaJEZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:7e00::/40
Signature Algorithm: sha256WithRSAEncryption
2f:e5:f7:87:7a:b6:e8:5f:5b:70:c6:89:73:aa:a8:26:07:5c:
03:f7:9e:1e:ff:87:93:ad:68:a7:f0:8f:52:59:b5:fe:fe:3c:
5f:f0:e6:2a:9d:e6:c3:ca:6e:ed:4d:46:63:9d:45:8d:4e:59:
ad:eb:89:b3:a9:47:09:4f:ee:ff:ae:76:7d:7f:d0:d6:1d:18:
4d:d5:b9:17:e1:32:49:e3:d5:9c:8d:ca:d0:51:31:59:67:9f:
c0:45:e4:e4:57:2a:1a:91:30:ce:16:bd:8c:60:8a:73:ca:e7:
46:af:e5:77:46:b5:e7:38:8e:22:25:05:6b:cd:34:28:2a:83:
fb:98:fc:21:d9:3a:ca:eb:75:7e:59:01:9a:c6:e7:6d:dc:b5:
40:bd:5c:09:13:81:9a:a1:f7:95:ee:eb:aa:a6:be:6e:39:a4:
d5:69:c3:5e:52:9f:f4:df:0f:c9:ef:ac:aa:f5:a2:71:7e:f9:
04:40:39:c1:1f:a2:19:97:9e:9d:f0:98:d8:bf:ff:11:2c:03:
38:36:48:05:a1:70:97:47:d6:0a:7d:43:91:72:f4:39:46:08:
c8:8d:a9:c5:e1:89:8e:6f:94:d6:8d:15:86:43:e6:2d:7a:93:
6f:86:8f:10:ef:56:15:1d:8e:63:3e:03:bd:37:d5:c5:b3:13:
05:12:c1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:44:21 2026 by rpki-client