Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/e5DByWyuci9YwYv92Hunhe01fW8.roa
File: e5DByWyuci9YwYv92Hunhe01fW8.roa (raw, json)
Hash identifier: gnc+UvXF9vXREvglBiY7ZvWA4fN5/w6on4SOlJLbnfY=
Subject key identifier: 7B:90:C1:C9:6C:AE:72:2F:58:C1:8B:FD:D8:7B:A7:85:ED:35:7D:6F
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 019E7F5BDCC1AC0F8C1A73701D8A9B179FBF
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/e5DByWyuci9YwYv92Hunhe01fW8.roa
Signing time: Sun 31 May 2026 18:46:27 +0000
ROA not before: Sun 31 May 2026 18:46:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205398
IP address blocks: 2a0f:b240:200::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 15:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:7f:5b:dc:c1:ac:0f:8c:1a:73:70:1d:8a:9b:17:9f:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: May 31 18:46:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b90c1c96cae722f58c18bfdd87ba785ed357d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:eb:5c:32:d3:13:49:91:0d:00:8d:37:06:b3:
70:15:b9:06:c4:63:23:bc:7e:d2:50:88:6e:42:b9:
b5:5a:6f:db:4e:8e:dc:02:12:4c:2a:c1:e4:4d:84:
09:f7:04:c6:ec:45:94:f7:d1:b8:d8:92:1f:08:1d:
1a:24:b5:06:a7:25:34:ae:08:9c:2d:e8:00:a6:a1:
a9:b9:25:61:b8:8a:f9:7e:7b:ad:10:9d:dd:6d:bf:
63:c5:28:5c:eb:bc:e2:e8:9f:26:15:0a:12:72:48:
1d:70:04:6e:dc:48:bf:25:db:0a:a2:ff:be:1a:0b:
18:70:4b:4e:79:2b:fe:95:a8:3e:36:75:b0:bd:69:
7a:3f:00:dd:c6:b3:88:60:da:ce:47:0c:29:6e:ac:
92:c6:c6:1d:89:b6:90:cf:5b:7d:19:4b:b7:ca:a9:
e4:4e:75:74:40:9e:75:aa:e0:2f:12:91:f1:7b:9e:
d4:bc:ba:e5:c4:0a:0a:2f:68:05:7e:e7:95:29:5f:
39:82:78:b5:6b:16:93:33:c8:b7:07:fe:5c:7f:62:
38:0a:22:12:5f:5f:e2:7a:2f:cd:37:12:e3:1e:d9:
8a:e7:c5:96:af:08:23:62:77:ce:0b:86:de:42:4f:
d5:2f:3b:21:13:f1:e2:ca:fc:d3:8d:4b:e8:10:20:
c8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:90:C1:C9:6C:AE:72:2F:58:C1:8B:FD:D8:7B:A7:85:ED:35:7D:6F
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/e5DByWyuci9YwYv92Hunhe01fW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:200::/40
Signature Algorithm: sha256WithRSAEncryption
48:0d:0d:d9:ba:da:35:9f:18:6c:41:b5:89:35:08:29:74:e8:
41:06:68:e9:f5:81:85:6c:79:6b:51:e3:fe:f2:99:b3:56:20:
80:30:72:29:20:63:ea:c8:a6:da:b5:ef:8b:d1:c4:79:e8:0b:
2b:b4:b5:25:6a:76:84:9e:1d:1f:8c:02:4f:be:63:b7:b5:44:
84:89:53:ed:de:f0:df:a8:af:1e:e7:a7:1b:11:82:8e:5b:1d:
f7:f2:08:8e:fc:de:f0:33:1f:41:bb:cf:3a:7f:1a:b8:44:a4:
a4:76:a4:95:1b:8e:56:2e:42:ac:99:13:2f:2a:d3:a0:67:f1:
c4:5e:eb:0f:62:03:de:80:cf:d7:f9:88:af:0a:c2:db:40:a3:
0e:de:0b:0f:c5:1f:76:68:06:8b:41:91:3d:7a:7f:0e:ef:c0:
14:7f:84:13:5e:e5:c6:7b:0a:46:ef:2a:ed:bf:37:6d:38:d3:
92:6d:a8:7e:48:62:58:ba:54:47:b4:a8:73:27:33:83:64:60:
0d:6f:dd:15:ee:25:c1:de:50:63:f6:77:64:13:7b:bd:89:a6:
c0:29:89:e4:82:78:18:19:af:cc:02:1b:12:d9:a0:44:37:a2:
5c:6a:27:12:da:c8:30:df:9a:3c:e1:85:e8:c4:4b:f9:49:db:
48:fe:c0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 21:16:18 2026 by rpki-client