Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/NAWhULe38BbcgGlvx4qrzADyu40.roa
File: NAWhULe38BbcgGlvx4qrzADyu40.roa (raw, json)
Hash identifier: 62KFcdtse6q5NeF9ugh8MyveMXYGhFPx1mAKrYLRmY8=
Subject key identifier: 34:05:A1:50:B7:B7:F0:16:DC:80:69:6F:C7:8A:AB:CC:00:F2:BB:8D
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 019ED4A1D77098382FB6F687307E9A072B92
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/NAWhULe38BbcgGlvx4qrzADyu40.roa
Signing time: Wed 17 Jun 2026 08:10:36 +0000
ROA not before: Wed 17 Jun 2026 08:10:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203090
IP address blocks: 2a0f:b240:10::/48 maxlen: 48
2a0f:b240:12::/48 maxlen: 48
2a0f:b240:19::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:a1:d7:70:98:38:2f:b6:f6:87:30:7e:9a:07:2b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Jun 17 08:10:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3405a150b7b7f016dc80696fc78aabcc00f2bb8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:40:b1:a0:9c:76:b6:1c:6d:b1:d5:e5:e8:f0:
f9:8c:37:86:3a:ff:81:87:11:2d:f8:2f:11:f9:d0:
f1:58:b0:bd:ef:2f:74:b4:36:b6:70:4b:28:3b:ae:
76:ee:c5:1f:36:d7:a0:4b:35:b6:f9:b8:cc:42:ca:
09:e5:8c:c9:1a:95:25:6c:29:6a:06:f3:01:5a:89:
1b:a4:a8:73:8f:f5:11:06:d4:20:4e:2c:a0:81:d6:
d7:a1:44:53:b8:f7:0b:f9:a3:4a:5c:32:f8:f2:64:
92:e0:63:42:12:fc:28:8d:70:84:7e:55:c7:4a:d1:
4e:76:57:ee:03:ab:89:d2:1d:ce:75:4a:40:e0:f5:
11:93:5a:a9:cf:ca:1a:75:d3:11:ce:77:c5:20:df:
a9:fc:14:23:78:92:bc:de:34:f9:bf:e4:4b:2a:77:
18:5d:49:98:51:35:e3:d1:42:59:67:74:bd:54:42:
84:50:38:3b:5c:1f:d4:e1:82:89:2e:eb:ee:95:71:
45:79:d1:56:de:61:cb:3b:54:08:fd:c6:9d:6c:a1:
fc:1f:99:f9:96:1e:54:4d:f6:12:7b:07:60:d0:1f:
78:f3:c4:8d:e1:0b:76:d2:3f:95:70:c9:9d:5e:72:
bb:15:6b:29:9e:e1:f9:f2:6d:f3:70:bf:37:9e:62:
f3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:05:A1:50:B7:B7:F0:16:DC:80:69:6F:C7:8A:AB:CC:00:F2:BB:8D
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/NAWhULe38BbcgGlvx4qrzADyu40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:10::/48
2a0f:b240:12::/48
2a0f:b240:19::/48
Signature Algorithm: sha256WithRSAEncryption
77:b9:86:dc:4e:34:91:7f:62:0c:b6:67:5a:d1:99:81:84:70:
a4:d4:71:3b:bd:65:cd:69:e6:b5:d3:e7:a8:e9:06:ea:f1:f9:
aa:64:b2:7b:e1:36:23:7e:20:24:e2:87:c2:fe:67:4f:60:46:
43:2b:8f:a5:20:bd:e9:3c:8c:1c:ed:43:7e:b9:b3:bf:4c:c7:
2a:6b:41:16:37:5d:5f:3f:2c:e5:0e:04:34:4b:9f:4b:16:d6:
ad:85:fc:16:f9:19:d2:69:b2:41:6b:1a:ed:cf:98:02:13:1e:
1e:84:81:a8:48:8e:c4:28:ab:87:5d:44:77:36:c7:ee:a0:25:
17:d8:dc:0f:a2:4c:a0:22:43:1e:ab:76:31:79:a7:a3:73:44:
0e:5e:08:82:46:5b:9d:12:d2:71:e2:db:47:f2:6f:80:60:ed:
65:a6:a4:ca:58:4d:cc:bd:e4:db:43:a6:f6:1b:20:ad:6e:0b:
b4:41:ad:3c:af:2f:9f:63:fc:bf:cb:d7:89:66:1d:2d:4f:84:
b9:e6:d5:90:83:b2:1f:5a:82:ea:25:35:c6:af:ba:cd:32:a7:
50:6b:51:b9:86:c5:40:42:bc:08:48:f3:2e:e8:68:ca:20:33:
9b:60:0c:a4:28:3b:74:2c:37:0d:67:b0:d1:f9:bd:07:5f:3c:
7e:a2:14:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:15:08 2026 by rpki-client