Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/YiMkNCUJOcOusrOtKmaRxKRVfdg.roa
File: YiMkNCUJOcOusrOtKmaRxKRVfdg.roa (raw, json)
Hash identifier: OOXlDamu21c2Dyx/zhaLg50HWJ4IvFZTA3NYnCoWVlM=
Subject key identifier: 62:23:24:34:25:09:39:C3:AE:B2:B3:AD:2A:66:91:C4:A4:55:7D:D8
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 019F1A6E4EAA9C384A85DB22CCA8FD953F6F
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/YiMkNCUJOcOusrOtKmaRxKRVfdg.roa
Signing time: Tue 30 Jun 2026 21:27:44 +0000
ROA not before: Tue 30 Jun 2026 21:27:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402547
IP address blocks: 2a0f:b240:80::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:6e:4e:aa:9c:38:4a:85:db:22:cc:a8:fd:95:3f:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Jun 30 21:27:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=62232434250939c3aeb2b3ad2a6691c4a4557dd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ac:3f:b6:66:6e:c4:11:31:24:01:b4:1b:7f:
a2:fd:0b:37:45:03:00:39:3d:2c:d0:68:89:65:44:
ac:ce:fc:60:a4:01:41:ba:1c:4f:c6:45:cb:9e:b3:
81:c2:5f:c5:58:ba:74:de:26:01:1d:1c:94:94:c7:
9e:ed:9f:e3:8e:5f:d4:4c:a9:40:e4:63:fa:e0:db:
2e:8e:86:3f:76:1a:62:25:1c:6a:e7:63:10:88:96:
6f:0a:82:94:fc:15:6e:4a:d1:55:6a:3f:64:b0:dd:
6e:43:9e:8d:8c:21:ea:16:f3:05:a5:95:1f:32:79:
97:cf:53:4c:03:15:f2:4a:56:51:6f:f9:e0:0c:0c:
f6:4b:1f:1b:5d:88:11:e6:ec:ab:bb:ed:39:ce:bd:
72:3a:99:71:d5:07:88:89:a1:1b:07:ed:de:c4:5b:
1b:7d:71:68:93:24:90:8a:04:ac:2b:8c:6f:ee:bc:
3c:14:d7:eb:bf:17:e5:54:83:58:e7:1e:3f:9e:ff:
25:16:23:5a:8f:9a:7b:fa:f6:77:fe:98:f7:e7:36:
c7:01:78:2a:f5:46:2a:4d:78:09:15:b8:41:87:76:
bd:b7:ea:fc:b5:b2:b0:d6:d3:d1:44:2c:b2:61:cb:
db:48:5c:b9:61:60:05:52:71:cc:60:24:50:43:4c:
1b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:23:24:34:25:09:39:C3:AE:B2:B3:AD:2A:66:91:C4:A4:55:7D:D8
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/YiMkNCUJOcOusrOtKmaRxKRVfdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:80::/44
Signature Algorithm: sha256WithRSAEncryption
12:dc:a5:3b:3b:b7:4f:12:fa:99:6c:2f:77:0e:70:5f:88:f7:
9c:e9:f8:ee:39:52:55:17:67:bb:93:17:1d:90:29:9b:6e:da:
ee:02:e0:64:53:9d:d0:35:b1:39:29:c2:20:e4:cc:30:4e:12:
57:8b:fd:cb:47:a1:9e:1d:67:6b:aa:b9:52:8a:97:21:56:47:
45:2b:d5:f3:9f:6f:17:c9:78:c6:9c:50:13:4b:62:87:b3:31:
ee:e5:85:c3:21:f5:3d:ac:a8:e7:10:ab:62:f7:bd:22:e1:ac:
e3:ba:be:11:4d:8f:b3:5a:85:24:a3:eb:4c:cc:ec:41:af:1a:
a6:67:24:40:82:f0:79:d4:40:45:ec:99:94:17:8d:f6:86:30:
5c:55:90:0c:5c:1c:4b:8e:74:99:a2:b0:4c:60:16:3d:3d:9d:
18:0e:06:db:88:3b:27:fb:c4:2a:60:32:99:18:29:c1:c6:80:
63:c6:f1:46:aa:94:49:2a:7a:97:f0:f7:ba:96:b5:a5:72:3b:
02:47:ef:de:84:b5:31:88:38:d7:65:ee:7c:c9:39:34:31:3c:
59:a5:39:44:47:85:67:ac:92:5f:e9:7a:42:f3:36:68:81:39:
f6:6f:fd:0a:6a:7b:3b:5c:cf:00:67:f8:a3:93:e1:55:5a:71:
97:5e:e6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 15:52:18 2026 by rpki-client