Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/7LtuZPTLrim5k51TVUwcQl9rm_Y.roa
File: 7LtuZPTLrim5k51TVUwcQl9rm_Y.roa (raw, json)
Hash identifier: DWSEtsU7rML4oP51P6Pjevtad50wD9cmx7T+rhkqlKc=
Subject key identifier: EC:BB:6E:64:F4:CB:AE:29:B9:93:9D:53:55:4C:1C:42:5F:6B:9B:F6
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 01A124B9712CBA648F55BBB6A28CE4CB889D
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/7LtuZPTLrim5k51TVUwcQl9rm_Y.roa
Signing time: Sat 10 Oct 2026 07:31:35 +0000
ROA not before: Sat 10 Oct 2026 07:31:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47509
IP address blocks: 2a0f:b240:5200::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:b9:71:2c:ba:64:8f:55:bb:b6:a2:8c:e4:cb:88:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Oct 10 07:31:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ecbb6e64f4cbae29b9939d53554c1c425f6b9bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0f:82:fd:ee:28:45:5d:e2:25:c6:06:8a:dc:
76:e3:53:e9:ce:2e:93:e7:8a:68:72:62:a7:08:11:
da:d5:33:21:18:43:33:01:bb:b1:7f:16:0d:70:25:
55:96:b3:ba:13:07:42:38:a8:e2:be:e8:12:45:42:
3a:35:3c:27:a2:f6:9a:16:8b:52:cf:b9:b4:8e:cc:
ec:e5:c5:1b:0a:74:3d:42:08:c1:3e:5a:95:9b:03:
4c:55:71:23:fb:6d:b8:ab:ce:a7:24:82:ce:6f:08:
0e:9b:ec:49:58:7b:aa:a3:64:5b:41:4e:4a:74:6f:
be:a9:6f:6d:cf:d8:67:61:56:c4:1b:ce:a7:06:d6:
1f:e9:f4:88:fe:f4:57:d3:21:60:71:df:f4:20:ef:
0a:39:63:bf:44:7b:43:9a:85:20:a5:f6:52:ca:ed:
4d:0d:84:f6:25:74:42:c3:79:72:83:5b:6e:27:79:
50:bb:98:88:83:93:78:3b:90:60:24:a4:57:12:6b:
5c:9d:39:32:01:0e:b3:fe:4d:98:46:2c:31:3e:54:
f7:65:fc:3e:87:58:d5:9c:f4:7e:80:a6:9d:04:da:
aa:99:e0:7f:ca:73:a3:a0:dc:41:fe:ef:b5:a9:d1:
8a:7b:30:4e:dc:f2:23:8c:2f:f4:60:53:71:d2:81:
99:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:BB:6E:64:F4:CB:AE:29:B9:93:9D:53:55:4C:1C:42:5F:6B:9B:F6
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/7LtuZPTLrim5k51TVUwcQl9rm_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:5200::/40
Signature Algorithm: sha256WithRSAEncryption
28:4a:6d:a9:56:a7:cc:dc:25:52:16:1e:2d:f8:f5:07:c2:7f:
b9:3c:e5:f2:ef:99:df:0b:9d:5e:bc:83:1e:f0:9c:09:ec:f3:
8c:f2:66:03:8d:51:49:15:88:15:0f:70:62:31:c4:22:59:ae:
e8:85:46:aa:e8:bc:42:65:44:92:52:03:1e:a7:ef:db:c4:52:
03:47:2f:d1:58:81:98:3f:7c:c2:34:bb:ec:20:41:71:34:06:
91:cb:bf:c5:65:32:76:ef:82:9a:7e:13:38:aa:c6:46:cf:c2:
57:e6:54:f2:7b:d8:4b:f9:92:8b:e6:ca:04:33:e8:cc:dc:25:
19:b1:21:cf:13:c6:5a:1b:1e:a3:79:66:df:54:e4:14:c1:e3:
cd:96:a5:0b:0a:ed:f9:bb:36:1f:bf:7c:fd:0d:4b:03:b3:25:
a1:52:f0:ba:d4:12:12:57:cc:6c:b4:96:22:01:76:a4:d7:f8:
19:60:36:70:69:97:23:29:09:82:49:b4:f8:c6:2e:3c:b2:07:
6f:ba:ea:88:89:1b:02:4b:91:00:51:93:80:db:40:31:08:82:
c3:d5:82:2b:a2:a4:4f:20:47:08:55:b5:ee:2b:85:ef:0d:b9:
5a:a4:c5:4a:70:3c:3c:fc:75:8f:bc:5e:c3:44:24:33:a5:e0:
c4:83:3f:c2
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAaEkuXEsumSPVbu2oozky4idMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjYxMDEwMDczMTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlY2JiNmU2NGY0Y2JhZTI5Yjk5MzlkNTM1NTRjMWM0MjVmNmI5YmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyw+C/e4oRV3iJcYGitx241Ppzi6T
54pocmKnCBHa1TMhGEMzAbuxfxYNcCVVlrO6EwdCOKjivugSRUI6NTwnovaaFotS
z7m0jszs5cUbCnQ9QgjBPlqVmwNMVXEj+224q86nJILObwgOm+xJWHuqo2RbQU5K
dG++qW9tz9hnYVbEG86nBtYf6fSI/vRX0yFgcd/0IO8KOWO/RHtDmoUgpfZSyu1N
DYT2JXRCw3lyg1tuJ3lQu5iIg5N4O5BgJKRXEmtcnTkyAQ6z/k2YRiwxPlT3Zfw+
h1jVnPR+gKadBNqqmeB/ynOjoNxB/u+1qdGKezBO3PIjjC/0YFNx0oGZ3QIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFOy7bmT0y64puZOdU1VMHEJfa5v2MB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvN0x0dVpQVExyaW01azUxVFZVd2NRbDlybV9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg+yQFIw
DQYJKoZIhvcNAQELBQADggEBAChKbalWp8zcJVIWHi349QfCf7k85fLvmd8LnV68
gx7wnAns84zyZgONUUkViBUPcGIxxCJZruiFRqrovEJlRJJSAx6n79vEUgNHL9FY
gZg/fMI0u+wgQXE0BpHLv8VlMnbvgpp+EziqxkbPwlfmVPJ72Ev5kovmygQz6Mzc
JRmxIc8TxlobHqN5Zt9U5BTB482WpQsK7fm7Nh+/fP0NSwOzJaFS8LrUEhJXzGy0
liIBdqTX+BlgNnBplyMpCYJJtPjGLjyyB2+66oiJGwJLkQBRk4DbQDEIgsPVgiui
pE8gRwhVte4rhe8NuVqkxUpwPDz8dY+8XsNEJDOl4MSDP8I=
-----END CERTIFICATE-----
Generated at Sat Oct 24 01:58:39 2026 by rpki-client