Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/buy9-MdvApu5qpbYQFVaXbcbtxg.roa
File: buy9-MdvApu5qpbYQFVaXbcbtxg.roa (raw, json)
Hash identifier: f16cdpYL7CccAJ0aFBr3gXq9pwi6+FyO1tXYHOroX84=
Subject key identifier: 6E:EC:BD:F8:C7:6F:02:9B:B9:AA:96:D8:40:55:5A:5D:B7:1B:B7:18
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 01A14C4CA81DA9848F2D2C50F6029BFA9DFD
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/buy9-MdvApu5qpbYQFVaXbcbtxg.roa
Signing time: Sat 17 Oct 2026 23:57:34 +0000
ROA not before: Sat 17 Oct 2026 23:57:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 150670
IP address blocks: 2a0f:b240:1400::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4c:4c:a8:1d:a9:84:8f:2d:2c:50:f6:02:9b:fa:9d:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Oct 17 23:57:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6eecbdf8c76f029bb9aa96d840555a5db71bb718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:aa:2c:53:19:64:d7:d7:8f:29:97:46:3b:f0:
61:d8:c3:2d:cc:b5:40:ab:0e:82:1c:a6:da:45:7f:
16:2f:7d:45:99:3a:fc:15:70:4a:10:21:ca:5b:b0:
56:b4:0a:2c:aa:ff:75:2d:06:22:71:68:a1:f1:8c:
9e:a3:83:28:bb:37:3b:29:07:80:66:6f:e4:39:ea:
66:4c:f0:d7:f9:ba:5d:af:57:d3:9a:40:26:e6:e9:
04:08:26:af:f3:12:05:c4:8b:cf:e4:da:e6:e2:01:
60:3e:06:ce:f5:c7:8f:f2:db:e1:31:2a:8d:68:7a:
fc:70:2d:29:1b:f8:91:a6:46:2e:69:bf:21:64:a6:
a4:50:70:83:94:f2:87:e8:e5:fc:7f:1e:51:0d:13:
06:f1:95:8a:50:c7:c7:17:e3:6e:b2:2f:14:58:a9:
6a:2b:4b:4a:c8:87:a8:92:e8:f0:5d:04:de:3e:92:
9a:52:d4:81:c2:8b:6d:c9:be:a4:13:71:5e:67:19:
81:77:f4:6d:54:a7:f8:0c:03:d1:99:78:e5:19:50:
4b:9c:46:d1:95:b0:5f:06:26:62:74:02:9c:5f:70:
50:73:31:6c:45:fe:86:a5:4e:e9:84:17:09:19:46:
81:58:ab:1a:09:c5:21:7f:6a:4d:c3:fb:1d:83:3b:
6d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:EC:BD:F8:C7:6F:02:9B:B9:AA:96:D8:40:55:5A:5D:B7:1B:B7:18
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/buy9-MdvApu5qpbYQFVaXbcbtxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:1400::/40
Signature Algorithm: sha256WithRSAEncryption
8a:0f:12:e5:c8:0f:a0:4b:e0:a2:5b:bc:c4:88:c9:11:10:2b:
97:14:2e:66:d9:95:16:dd:0d:2f:dc:1a:9a:f7:45:fc:95:83:
84:1a:04:95:54:50:0a:88:9a:76:3d:24:9e:0b:a4:7e:05:f8:
71:50:3f:f2:6d:91:54:08:3d:d8:e3:06:f2:b7:7a:3f:d3:9e:
ef:a1:4e:16:f8:c5:39:92:32:9a:f1:5c:fa:40:c2:d3:e8:a6:
56:8a:89:6f:2c:40:3b:67:56:f1:ae:5a:e7:d1:86:41:99:1f:
f4:dd:0f:b4:81:48:b9:71:72:5c:cd:e6:a2:40:b5:56:33:29:
84:db:76:52:4d:22:7b:3f:30:0d:3c:39:eb:8e:86:ce:0b:87:
2a:77:50:97:5f:f9:05:2f:3d:d3:6e:6c:f7:fe:57:e5:c3:b0:
f6:fd:39:81:39:05:d4:bc:33:5d:da:91:a9:c6:c4:56:24:f1:
7f:3f:e0:6c:07:cd:21:5d:2c:db:eb:d8:b2:52:79:e0:7b:e7:
b1:5d:12:10:eb:f4:6a:5f:f2:a3:57:d0:94:d4:32:71:0b:ca:
64:cb:2e:3d:8d:f8:62:00:1f:1f:70:68:5f:7c:d1:03:bc:96:
fb:79:ea:23:b7:21:5d:39:d0:0b:38:10:bc:e3:e0:a8:cd:e9:
88:e3:d1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:06:39 2026 by rpki-client