Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/_QqDi1fZ5gIgkIKDwqX2OxWyt5o.roa
File: _QqDi1fZ5gIgkIKDwqX2OxWyt5o.roa (raw, json)
Hash identifier: DMBlZ9KJCiw5f/YSWITKWMaS6oGELv9ipy7M6jwMe3k=
Subject key identifier: FD:0A:83:8B:57:D9:E6:02:20:90:82:83:C2:A5:F6:3B:15:B2:B7:9A
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 019E9457EC72A3B978375C4A13D485BF3306
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/_QqDi1fZ5gIgkIKDwqX2OxWyt5o.roa
Signing time: Thu 04 Jun 2026 20:34:10 +0000
ROA not before: Thu 04 Jun 2026 20:34:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3257
IP address blocks: 2a0f:b242::/32 maxlen: 48
2a0f:b243::/32 maxlen: 48
2a0f:b247::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 15:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:94:57:ec:72:a3:b9:78:37:5c:4a:13:d4:85:bf:33:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Jun 4 20:34:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fd0a838b57d9e60220908283c2a5f63b15b2b79a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e2:25:da:3f:bf:93:be:7e:45:ec:ed:b8:57:
dd:8b:69:4c:cb:6c:0d:f1:19:f1:69:40:be:c7:74:
2c:62:6e:21:46:a6:d6:8b:d7:bc:94:58:12:e1:4c:
e9:89:d3:99:40:c0:0f:e4:b0:87:22:33:48:03:d5:
aa:93:83:a1:ae:91:72:7e:84:bd:c8:4b:60:26:b0:
5b:98:a0:6f:c7:fb:6c:ff:0a:85:7e:4c:b8:ac:f0:
33:da:82:2b:5e:b5:b3:4e:e9:55:4f:d7:2e:96:82:
4a:81:d2:20:c8:d7:27:c3:05:5b:68:f7:92:55:1e:
92:9d:4c:61:5f:40:1d:f6:3f:8e:9b:d7:ea:5a:06:
4f:fd:9d:88:44:94:37:db:37:86:20:b4:c8:d7:8d:
00:8f:d8:d4:c2:66:10:93:a6:f3:ab:b1:95:a2:2c:
e7:37:21:c7:ff:42:75:e6:cf:8d:dc:29:c3:13:2f:
ca:e1:f6:aa:43:83:d4:1b:50:68:37:15:6c:dd:66:
b9:45:02:1f:72:56:73:a2:6a:45:1b:26:92:87:5b:
40:f8:c9:d0:7d:ec:b9:14:44:c3:55:39:88:2c:c9:
ce:c7:ba:7b:10:c6:81:12:21:dd:0d:9e:29:04:c7:
c1:2c:57:88:07:46:8c:cb:41:a2:4b:95:4b:44:00:
37:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:0A:83:8B:57:D9:E6:02:20:90:82:83:C2:A5:F6:3B:15:B2:B7:9A
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/_QqDi1fZ5gIgkIKDwqX2OxWyt5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b242::/31
2a0f:b247::/32
Signature Algorithm: sha256WithRSAEncryption
52:ec:c4:b1:3e:67:1c:bd:b4:78:df:38:b2:c3:51:c9:d4:29:
9a:a3:2c:d7:1b:c9:fe:d5:69:d0:c8:ef:08:0d:65:24:28:e4:
b1:4f:f6:8d:cf:18:85:d7:fc:9b:84:3c:aa:1e:d1:e2:8f:34:
0c:dc:8d:d2:4b:14:28:7b:52:ee:f5:46:8a:1a:96:61:c0:04:
1b:ac:c7:43:54:0c:3d:f3:d0:ba:03:9b:61:e7:09:b4:67:b5:
d4:5b:26:03:e3:f9:04:03:61:23:85:07:60:f7:6d:b4:0f:5b:
04:88:44:af:17:78:76:6f:fd:b4:49:a1:df:cd:75:61:18:be:
47:cb:87:20:92:24:d4:c0:d3:7a:81:24:00:bb:6b:0d:95:15:
4c:1b:f3:0b:92:55:4e:ed:1e:0c:a6:15:88:a3:8b:c2:63:df:
a3:b6:86:35:4c:ad:a4:11:63:96:49:95:10:03:cf:3e:a7:27:
bc:f3:47:6c:7e:ff:21:b3:a1:24:b8:2f:c6:89:5d:a0:9e:a8:
a0:03:b9:6d:02:55:02:51:34:68:60:02:55:59:5c:b7:09:95:
58:40:0b:8f:19:43:d9:2c:f5:d8:0f:d2:01:53:08:19:a7:31:
40:ff:69:b0:c7:27:8a:42:85:7c:df:8b:c5:e2:7e:9c:18:d1:
eb:ea:70:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 21:16:16 2026 by rpki-client