Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/QT94a7f3YaoqyGWHzeDTVjZc5EI.roa
File: QT94a7f3YaoqyGWHzeDTVjZc5EI.roa (raw, json)
Hash identifier: cbTJKAG5p7Fig0OxHnMNfGUDSv0GShiX1k7O1tTrca8=
Subject key identifier: 41:3F:78:6B:B7:F7:61:AA:2A:C8:65:87:CD:E0:D3:56:36:5C:E4:42
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 01A14C4AD3C3446EF98819668F93673269BA
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/QT94a7f3YaoqyGWHzeDTVjZc5EI.roa
Signing time: Sat 17 Oct 2026 23:55:34 +0000
ROA not before: Sat 17 Oct 2026 23:55:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19318
IP address blocks: 2a0f:b240:1400::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4c:4a:d3:c3:44:6e:f9:88:19:66:8f:93:67:32:69:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Oct 17 23:55:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=413f786bb7f761aa2ac86587cde0d356365ce442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:74:2c:ff:56:a7:1e:0e:8b:2a:63:56:f5:1e:
a7:71:e2:90:4e:99:97:30:aa:68:d3:b8:e4:c4:0c:
fe:91:ba:4c:79:99:39:71:9d:c4:14:c4:07:ee:84:
0b:12:f9:a9:63:a8:a1:d6:f9:6b:ba:52:e8:08:22:
ad:36:e9:b5:8c:d0:0d:2a:22:25:13:7e:a6:99:0d:
e4:b5:31:35:2d:bb:6f:bb:c5:c3:dc:a6:c2:56:19:
5c:be:63:53:48:81:cd:a3:56:18:c1:c0:48:35:ee:
fb:51:a8:be:47:5b:27:f8:86:39:f8:b5:e6:af:2d:
64:40:f2:6c:fa:35:54:7f:93:9e:8c:ca:ed:f6:05:
f7:58:29:44:30:9d:e8:7b:22:6b:01:c6:b4:28:8b:
a2:56:33:f9:8d:9f:af:f2:11:f7:2b:40:a9:eb:bc:
be:6e:6c:be:1d:b1:51:96:01:ff:6b:e0:86:e2:1b:
ca:85:08:57:f1:38:83:66:80:a6:2e:44:e0:6d:1b:
70:61:09:ff:6f:2b:6d:ac:87:7e:db:e4:59:d5:da:
94:cb:e9:2a:48:a1:34:d7:6b:c0:9f:78:8c:fd:d6:
2e:9f:7f:a6:a6:ae:4f:ba:13:fa:89:97:f9:d2:42:
06:76:d1:7b:37:24:4d:ff:d9:0b:2b:db:bd:ae:cc:
5b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:3F:78:6B:B7:F7:61:AA:2A:C8:65:87:CD:E0:D3:56:36:5C:E4:42
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/QT94a7f3YaoqyGWHzeDTVjZc5EI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:1400::/40
Signature Algorithm: sha256WithRSAEncryption
12:fa:af:3d:22:29:45:66:42:89:38:6a:c1:b9:9d:b2:d4:88:
23:6c:1f:47:09:84:e7:6f:4b:05:5d:ec:de:a8:28:83:51:f7:
dc:69:6f:40:fd:03:94:11:31:1b:d7:c8:63:30:c7:a6:c0:59:
0b:7f:e4:9f:75:c2:97:e1:06:4c:18:28:80:34:dc:b6:35:d7:
d1:45:ab:c7:8b:70:09:7b:0c:2c:b9:43:a6:2d:45:0e:fe:79:
a7:4a:30:29:bd:11:36:1d:c9:b6:6a:05:a2:84:61:f8:16:d9:
71:a3:79:96:bb:dd:a9:f2:f3:98:45:c5:28:bc:40:28:f4:28:
fc:da:c5:1b:61:ff:9d:13:fe:14:7d:96:47:af:0e:77:4d:d2:
b3:ed:c3:16:9f:ee:a0:67:dd:92:dd:1e:2d:2a:94:ef:cd:5b:
be:1e:3a:4f:1d:d6:cb:9f:4b:22:a5:5f:e5:20:fd:ea:91:42:
36:27:44:23:98:32:bd:7e:a0:99:4e:27:3e:29:1a:5c:66:a2:
43:0f:c3:c1:0f:2f:4c:57:b9:87:a8:b9:b1:a0:8d:9d:aa:e7:
75:42:16:95:c3:f8:93:fb:a2:03:5d:a3:f1:1d:c6:ec:79:51:
e5:4f:8c:df:43:2a:b1:62:67:9a:d8:6c:92:7e:50:63:5a:c9:
c9:3e:13:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 01:57:58 2026 by rpki-client