Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/meS3XwHYttMW5wlh7JYT0SlwLe8.roa
File: meS3XwHYttMW5wlh7JYT0SlwLe8.roa (raw, json)
Hash identifier: ntBnHl9CMPJEoE3WNlqhNZT2S8mbPGjdzMAeO5vLuTs=
Subject key identifier: 99:E4:B7:5F:01:D8:B6:D3:16:E7:09:61:EC:96:13:D1:29:70:2D:EF
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 019F3E1AAF65D5079A75FAE0AA09CEFCF372
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/meS3XwHYttMW5wlh7JYT0SlwLe8.roa
Signing time: Tue 07 Jul 2026 19:42:43 +0000
ROA not before: Tue 07 Jul 2026 19:42:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208733
IP address blocks: 2a0f:b240:7c00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 07:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3e:1a:af:65:d5:07:9a:75:fa:e0:aa:09:ce:fc:f3:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Jul 7 19:42:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=99e4b75f01d8b6d316e70961ec9613d129702def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:54:74:9e:d9:8b:d5:ca:55:e7:a2:1e:21:27:
45:da:c9:2d:cb:4c:fd:b9:4e:0f:08:f7:f3:77:80:
7c:9a:32:43:88:73:db:a5:ef:90:7a:27:d6:86:65:
72:4f:ef:09:49:f3:ac:db:5e:96:8b:a8:c4:bb:61:
a2:da:80:02:4e:ac:53:3d:64:6d:6f:f5:0f:29:55:
92:dc:c2:67:da:f4:98:3e:93:87:72:36:3e:f5:d7:
86:1d:e7:be:e1:c8:77:69:69:81:07:ac:86:80:2e:
b2:9f:5f:07:f1:8b:ae:ef:1a:16:22:59:6d:cd:c9:
62:6d:15:34:2f:48:76:fe:46:b0:5d:50:41:3a:0c:
d3:aa:c7:29:46:fd:90:6e:10:1a:18:f2:3d:ed:77:
5f:38:e4:21:56:70:33:75:af:39:78:b2:a8:20:8b:
3b:dd:47:06:65:eb:3f:4b:3a:9d:be:5b:9c:57:63:
a6:63:59:88:bf:ca:0b:b2:cc:be:1b:0d:eb:19:82:
77:0d:d0:99:1d:d6:cf:24:72:7a:cf:e1:33:ce:fd:
d7:c1:f6:3b:ed:99:83:5f:00:7b:0b:c4:64:55:a0:
4b:e1:95:f2:97:d1:17:f8:f7:9b:3a:e5:a4:76:0c:
91:23:82:83:54:a0:c8:71:1b:53:f6:b1:b8:14:2e:
81:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E4:B7:5F:01:D8:B6:D3:16:E7:09:61:EC:96:13:D1:29:70:2D:EF
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/meS3XwHYttMW5wlh7JYT0SlwLe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:7c00::/40
Signature Algorithm: sha256WithRSAEncryption
02:1c:12:24:3e:ad:f3:3f:87:13:98:38:31:92:12:58:e5:fb:
b5:c9:34:0b:43:a6:b5:b6:93:87:cb:5f:73:3b:13:19:19:1f:
e7:79:db:eb:0b:90:55:b9:2c:fc:50:0d:98:84:9a:4b:46:f4:
44:b2:d1:83:9b:d4:67:74:92:4d:cf:aa:16:98:9d:5c:9c:ea:
7d:dd:7b:40:57:d9:2f:d4:13:f8:16:4f:df:4c:38:ea:36:25:
09:88:9d:9d:05:d3:95:ab:c2:f9:8c:f3:36:0a:0c:4b:95:28:
4e:e8:7b:19:6b:ae:8e:a4:04:10:ff:9a:55:86:23:ea:41:8b:
87:76:df:07:3c:84:51:6f:5d:83:ec:6b:0f:48:19:c9:30:aa:
bb:f8:e7:31:18:73:bd:28:7f:67:7f:72:b7:80:a0:0e:80:50:
01:88:1d:3e:a4:4f:84:42:f3:fc:c3:11:e8:18:a6:9c:5a:2b:
6c:c1:7f:a3:a5:d0:ee:a2:5b:3e:c4:1a:8e:1d:b4:a7:f8:59:
ac:78:1d:71:52:ec:cf:9e:cb:20:f4:13:d8:80:22:65:bd:5a:
32:18:cf:23:16:3a:88:a1:e0:5f:e1:38:a3:5c:37:f7:f9:37:
8a:82:33:ba:96:a9:f7:df:f6:ce:e2:ca:fe:b3:2a:c9:ef:2c:
15:71:10:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:15:29 2026 by rpki-client