Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/87tEiqClrtaHUT-XijviEbzeWRM.roa
File: 87tEiqClrtaHUT-XijviEbzeWRM.roa (raw, json)
Hash identifier: f8RpW7WI3y0EkHOEaO9u0eDOakKNWF06vHUGJxYjVE4=
Subject key identifier: F3:BB:44:8A:A0:A5:AE:D6:87:51:3F:97:8A:3B:E2:11:BC:DE:59:13
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 019FBAA2721835C273CD8E8FDBD2B947D41D
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/87tEiqClrtaHUT-XijviEbzeWRM.roa
Signing time: Sat 01 Aug 2026 00:03:55 +0000
ROA not before: Sat 01 Aug 2026 00:03:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208751
IP address blocks: 2a0f:b240:6200::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ba:a2:72:18:35:c2:73:cd:8e:8f:db:d2:b9:47:d4:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Aug 1 00:03:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f3bb448aa0a5aed687513f978a3be211bcde5913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:2c:80:b5:45:e2:af:a3:89:c9:be:8c:d8:e8:
44:2c:71:05:83:42:83:8a:58:71:20:aa:85:39:e5:
ad:93:ce:1d:21:c9:43:54:86:92:35:15:13:2f:ed:
cc:f2:87:62:d7:2d:28:d2:b8:38:b7:29:29:06:3c:
23:23:16:92:07:9d:a5:a1:fc:7d:82:ab:15:17:b0:
99:92:a6:6a:61:93:bb:4a:70:81:7d:cc:d2:54:c8:
17:fa:5c:61:bd:b8:b4:97:4d:4e:a6:cd:95:27:bd:
74:06:00:b0:68:d8:3d:63:8c:f6:aa:ab:33:7c:15:
1c:d9:01:9b:0d:a7:8b:17:8e:66:bc:9b:e7:db:79:
77:15:ae:dc:83:c4:a4:da:dd:64:8d:30:67:c6:f8:
f7:bc:49:4c:b8:ad:be:4b:fa:eb:22:87:dd:8b:76:
7f:21:bd:cc:bd:15:68:5f:ac:86:af:c8:92:c1:62:
98:90:44:e4:66:12:01:bc:08:eb:7e:ee:23:fe:d9:
64:63:51:77:61:0e:56:c6:0e:ff:2f:24:ea:83:fa:
32:66:db:40:9e:f2:8e:36:01:c0:31:c6:7f:a2:87:
40:82:be:92:aa:76:9b:a1:25:d2:a9:21:8b:51:fe:
e9:c5:13:7e:25:1c:72:cc:c6:80:b8:b6:52:3a:1f:
77:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:BB:44:8A:A0:A5:AE:D6:87:51:3F:97:8A:3B:E2:11:BC:DE:59:13
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/87tEiqClrtaHUT-XijviEbzeWRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:6200::/40
Signature Algorithm: sha256WithRSAEncryption
7c:88:b3:bd:47:79:6e:34:88:44:00:ed:5a:a0:ec:05:09:0e:
86:ba:64:5e:41:d4:15:b6:39:29:e0:27:52:78:c6:99:95:61:
f1:4f:74:36:cf:b5:41:b7:a4:cf:a4:4b:9b:83:bd:f8:4d:12:
ae:cc:c8:82:6d:9c:78:34:22:09:a7:a7:2c:d6:fd:80:52:71:
80:72:5f:da:4a:d3:a3:40:17:61:c9:01:35:dd:9a:ab:4a:b9:
94:fd:92:ac:f6:db:3b:96:20:4d:3d:75:3f:72:eb:df:7b:d3:
9f:61:cc:ca:27:8d:88:fb:c9:0e:a8:c6:a5:b2:35:94:d8:27:
c5:77:75:85:8c:48:4a:45:d7:b6:27:e8:a2:2d:34:d9:b9:80:
d9:8d:38:ee:2a:9c:eb:84:76:fa:d7:95:13:72:dd:97:76:1c:
ad:d7:8f:1c:53:99:93:c1:24:91:f7:09:c9:60:39:55:c0:f7:
f8:45:b4:68:13:9c:59:7a:9a:d9:28:44:0d:4c:c8:f8:91:20:
d3:31:da:d9:9e:ce:46:6b:6c:d2:32:47:70:b2:9f:fb:7f:16:
94:59:95:2d:3e:2c:74:79:54:42:6d:bd:fa:ce:35:e3:d9:75:
df:12:9a:62:be:5c:87:38:43:34:40:23:82:48:23:fe:d5:fe:
84:e2:02:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:18:03 2026 by rpki-client