Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/l9uaEZy0m6yXFoYTDhkMLZBNcsk.roa
File: l9uaEZy0m6yXFoYTDhkMLZBNcsk.roa (raw, json)
Hash identifier: Rz82U+dIN/ZH+HxqrfyVP68SKEuY9k5yMUbRtPgUIwM=
Subject key identifier: 97:DB:9A:11:9C:B4:9B:AC:97:16:86:13:0E:19:0C:2D:90:4D:72:C9
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 01A14C4BBE27E97432D760890479121BA239
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/l9uaEZy0m6yXFoYTDhkMLZBNcsk.roa
Signing time: Sat 17 Oct 2026 23:56:34 +0000
ROA not before: Sat 17 Oct 2026 23:56:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207208
IP address blocks: 2a0f:b240:1400::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4c:4b:be:27:e9:74:32:d7:60:89:04:79:12:1b:a2:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Oct 17 23:56:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=97db9a119cb49bac971686130e190c2d904d72c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3f:27:bd:26:4a:6f:ea:8a:56:cd:cf:9b:07:
5d:c6:ee:ad:b8:88:d4:dd:af:73:0a:77:f7:5e:4e:
fc:b0:05:2c:ef:88:8f:3d:69:da:98:3f:88:31:78:
e3:1b:b3:1b:1a:0b:9e:0c:9c:0c:60:0f:5f:f1:f9:
12:1a:65:da:0f:40:9b:f2:c5:a6:a4:7d:6f:02:31:
28:c6:59:7d:8c:1c:b4:20:95:41:b4:2a:e0:46:71:
ad:7f:d2:32:c4:2f:eb:57:c4:01:3b:9f:0e:bf:43:
cf:03:51:6a:c1:79:89:fc:92:f1:62:2c:c8:ea:f5:
a0:7a:a5:19:8e:94:5d:6d:95:09:15:19:2c:bb:db:
d2:be:c4:d8:d7:70:40:8c:a1:15:d5:47:ad:7a:1a:
2d:50:ff:1e:5a:9e:af:38:75:8a:d4:94:d5:38:f4:
7e:f3:35:e8:59:dc:de:d5:cc:5e:20:65:86:44:dc:
e7:ae:25:c8:65:7f:14:e4:8c:3a:05:6d:c4:67:24:
47:db:bd:7f:f5:15:df:0d:fb:a8:79:e7:1d:b2:72:
2a:0e:cc:ac:4e:dd:fe:88:df:48:24:72:6d:7a:37:
ba:c9:d1:77:c0:82:05:3a:2a:54:2f:d6:0a:3e:16:
bf:b7:c9:5d:93:94:67:5d:dd:5d:2c:df:59:99:10:
1d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:DB:9A:11:9C:B4:9B:AC:97:16:86:13:0E:19:0C:2D:90:4D:72:C9
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/l9uaEZy0m6yXFoYTDhkMLZBNcsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:1400::/40
Signature Algorithm: sha256WithRSAEncryption
26:4d:1e:14:cf:2f:9c:75:c1:95:dd:ac:84:b1:53:57:ee:bc:
2b:71:6c:16:16:17:50:d4:3f:c1:2c:a9:b8:42:61:7c:73:f0:
4e:64:0f:62:bc:2b:ce:a0:65:8c:0a:3f:fa:a9:e8:d3:93:f5:
86:09:61:8f:cd:18:d4:6e:61:c1:3a:4d:a9:7a:2c:fd:f6:d4:
50:00:9d:27:a9:cc:6c:17:d3:2b:09:fb:8d:c9:c1:bf:f9:56:
73:c7:db:e9:52:a5:88:7f:b9:cf:d0:40:a5:72:87:00:70:d5:
b9:e3:4a:f7:2e:17:cf:e6:dd:25:bd:de:33:b3:cb:88:a5:9e:
78:a3:9a:53:27:a5:68:05:33:b0:91:de:44:4f:1b:5b:95:1d:
ce:c5:2d:c4:64:ce:cd:8c:d2:63:db:a5:62:29:fd:5a:7f:0f:
1d:ba:a3:b3:76:c3:65:5d:10:57:86:e1:f5:09:c3:25:b4:47:
16:55:15:cc:0c:c9:a4:18:55:94:2b:78:61:9a:ed:25:ab:8b:
23:63:1a:68:b3:8a:e6:34:2a:16:5c:88:07:22:c9:c6:3c:dd:
6e:1a:ce:3d:9d:71:af:32:26:f6:ff:73:fb:87:f9:b6:f6:6e:
0e:2a:3f:ea:2a:0f:06:25:d5:94:65:82:19:ff:ea:b0:b3:cf:
14:db:d2:cd
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAaFMS74n6XQy12CJBHkSG6I5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjYxMDE3MjM1NjM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5N2RiOWExMTljYjQ5YmFjOTcxNjg2MTMwZTE5MGMyZDkwNGQ3MmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuT8nvSZKb+qKVs3Pmwddxu6tuIjU
3a9zCnf3Xk78sAUs74iPPWnamD+IMXjjG7MbGgueDJwMYA9f8fkSGmXaD0Cb8sWm
pH1vAjEoxll9jBy0IJVBtCrgRnGtf9IyxC/rV8QBO58Ov0PPA1FqwXmJ/JLxYizI
6vWgeqUZjpRdbZUJFRksu9vSvsTY13BAjKEV1UetehotUP8eWp6vOHWK1JTVOPR+
8zXoWdze1cxeIGWGRNznriXIZX8U5Iw6BW3EZyRH271/9RXfDfuoeecdsnIqDsys
Tt3+iN9IJHJteje6ydF3wIIFOipUL9YKPha/t8ldk5RnXd1dLN9ZmRAd3wIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFJfbmhGctJuslxaGEw4ZDC2QTXLJMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvbDl1YUVaeTBtNnlYRm9ZVERoa01MWkJOY3NrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg+yQBQw
DQYJKoZIhvcNAQELBQADggEBACZNHhTPL5x1wZXdrISxU1fuvCtxbBYWF1DUP8Es
qbhCYXxz8E5kD2K8K86gZYwKP/qp6NOT9YYJYY/NGNRuYcE6Tal6LP321FAAnSep
zGwX0ysJ+43Jwb/5VnPH2+lSpYh/uc/QQKVyhwBw1bnjSvcuF8/m3SW93jOzy4il
nnijmlMnpWgFM7CR3kRPG1uVHc7FLcRkzs2M0mPbpWIp/Vp/Dx26o7N2w2VdEFeG
4fUJwyW0RxZVFcwMyaQYVZQreGGa7SWriyNjGmiziuY0KhZciAciycY83W4azj2d
ca8yJvb/c/uH+bb2bg4qP+oqDwYl1ZRlghn/6rCzzxTb0s0=
-----END CERTIFICATE-----
Generated at Sun Oct 25 01:29:39 2026 by rpki-client