Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/c2nXHKm8A3-rZLUxs3o_CU0e7iE.roa
File: c2nXHKm8A3-rZLUxs3o_CU0e7iE.roa (raw, json)
Hash identifier: Lf1zvqeh++blSIfCYXUoP9yGLWeCv87ld+YeplnSGlM=
Subject key identifier: 73:69:D7:1C:A9:BC:03:7F:AB:64:B5:31:B3:7A:3F:09:4D:1E:EE:21
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 019FD3F545849C51B76FD2846F978EE9CA76
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/c2nXHKm8A3-rZLUxs3o_CU0e7iE.roa
Signing time: Wed 05 Aug 2026 22:04:54 +0000
ROA not before: Wed 05 Aug 2026 22:04:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213579
IP address blocks: 2a0f:b240:7800::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 22:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d3:f5:45:84:9c:51:b7:6f:d2:84:6f:97:8e:e9:ca:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Aug 5 22:04:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7369d71ca9bc037fab64b531b37a3f094d1eee21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:40:e8:10:ba:97:68:2d:91:d5:d6:46:53:5c:
e5:a6:5c:3e:0c:10:ad:56:c0:20:45:f6:54:2b:df:
f1:fb:8d:83:b5:04:1b:13:cc:0e:e8:07:7b:33:9e:
f9:7e:c3:73:2d:4f:1e:5d:cf:87:d7:74:a9:e2:67:
a6:43:5e:c1:4b:84:56:85:9c:43:f9:83:86:30:59:
cc:bd:32:7f:59:da:70:1c:af:eb:1d:80:81:d2:e8:
9c:c7:c6:b0:cf:0d:8b:d6:60:6f:ef:5a:0c:3e:ff:
8e:75:e4:9a:bd:1c:8f:ea:95:72:98:d4:0e:13:23:
e0:17:71:05:66:b9:89:12:71:8b:86:31:d3:16:24:
0a:5a:cc:e6:fa:40:21:90:78:91:ae:20:17:f1:29:
2a:4e:a6:4e:ba:8e:f8:68:4b:0b:9a:ac:92:bf:36:
7e:47:11:6b:db:e4:27:86:bc:a6:59:bf:4e:7f:db:
fa:3d:46:3e:af:bb:e1:66:57:59:dd:a0:77:2e:45:
d0:56:88:83:b8:d9:f7:7e:0e:ed:13:c0:78:5c:f3:
bd:d7:58:b2:2a:cd:27:f2:74:46:59:48:de:04:da:
c4:3a:0e:50:6a:b9:eb:96:8e:63:9d:60:f4:28:a2:
0c:1f:24:7a:93:12:fe:be:26:36:71:d5:a0:0a:24:
22:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:69:D7:1C:A9:BC:03:7F:AB:64:B5:31:B3:7A:3F:09:4D:1E:EE:21
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/c2nXHKm8A3-rZLUxs3o_CU0e7iE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:7800::/40
Signature Algorithm: sha256WithRSAEncryption
0e:13:8d:29:dd:db:e6:9c:c5:99:7d:1d:da:e8:0c:1f:4e:d9:
e9:79:85:8d:45:67:29:2f:61:35:fc:30:36:2f:56:94:be:61:
20:41:80:f9:64:49:d6:d5:14:50:ab:2f:67:8b:5c:a5:2c:3a:
84:59:b3:61:66:fd:89:2c:b2:f1:de:98:f5:87:ba:16:9e:18:
bb:aa:47:d3:d2:11:11:8a:e6:3b:18:bc:e7:fa:35:3b:6f:f8:
8c:6e:aa:26:ce:35:b6:b8:ed:bf:ae:b9:eb:17:78:bc:69:05:
fa:e0:fc:c3:8f:a8:06:51:fa:a0:12:ca:d9:49:e3:6b:2e:c7:
99:12:17:10:15:8f:c6:34:94:f2:24:c1:7a:26:80:42:81:f8:
8f:35:79:31:ba:25:de:57:97:9a:03:d5:89:24:d6:d7:28:6e:
59:ec:8d:17:0e:a9:22:c8:0d:4e:97:f3:6e:18:db:1c:46:ad:
a4:58:04:02:e7:e6:74:5c:34:e6:23:b5:d0:e7:77:8d:01:a9:
47:c0:ad:67:e6:e9:34:62:74:1f:7b:49:ec:7d:62:7a:67:49:
ea:cc:9c:be:27:bd:9d:f0:25:f4:da:b7:0d:82:f3:e6:72:38:
7a:14:29:cc:5b:18:ff:7d:1a:40:fc:91:51:6c:14:48:a8:29:
41:c2:ed:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:17:53 2026 by rpki-client