Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/ndhdNzWXY0VqUwlwcd5SBijvaBI.roa
File: ndhdNzWXY0VqUwlwcd5SBijvaBI.roa (raw, json)
Hash identifier: WhoEIxJwYro+n2OO/dSXqCQEkUi7Q1YIXNwC3OuQjXY=
Subject key identifier: 9D:D8:5D:37:35:97:63:45:6A:53:09:70:71:DE:52:06:28:EF:68:12
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 01A14C4CA8B6BF2E4B0D26716CC846082034
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/ndhdNzWXY0VqUwlwcd5SBijvaBI.roa
Signing time: Sat 17 Oct 2026 23:57:34 +0000
ROA not before: Sat 17 Oct 2026 23:57:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213250
IP address blocks: 2a0f:b240:1400::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4c:4c:a8:b6:bf:2e:4b:0d:26:71:6c:c8:46:08:20:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Oct 17 23:57:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9dd85d37359763456a53097071de520628ef6812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3d:68:aa:87:91:20:67:67:db:f2:36:61:3f:
ad:48:09:7b:7d:c8:07:aa:42:ee:29:60:6c:01:50:
81:08:97:1a:a2:69:1d:dd:1d:ed:2f:5a:58:54:06:
19:b0:68:ce:de:6f:c1:17:71:c0:e2:51:c2:36:b3:
d2:4e:e8:d8:47:82:c5:e0:a2:27:8b:ea:df:2e:59:
ac:2c:22:32:a3:4a:6c:82:57:51:86:24:ba:52:cd:
66:42:2f:9f:24:b0:02:40:12:a0:3d:7c:b5:c4:26:
2d:19:e1:89:27:db:68:01:f4:6a:d8:65:7a:0c:b5:
70:84:08:7c:f5:91:5b:64:c5:bb:9e:3f:34:e4:bd:
b5:1a:38:54:ce:7d:39:da:ef:fa:cb:a5:3c:5c:28:
b9:cb:e7:ae:83:09:dd:19:b7:4b:37:5a:21:a8:de:
b4:46:14:59:36:2f:04:b6:07:f9:5c:39:14:ca:39:
08:c9:32:58:b7:e0:38:1d:92:63:6d:b7:2f:12:95:
8b:20:92:8f:f2:11:a4:a5:74:de:98:1d:f8:ab:78:
aa:ce:d9:a1:60:1a:cd:03:26:2c:a0:db:fd:60:b8:
36:5e:75:46:24:04:53:97:0f:82:6f:c0:64:b3:0c:
16:7f:2e:0b:6f:a7:5b:17:2a:26:d7:bd:5a:cf:99:
3d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D8:5D:37:35:97:63:45:6A:53:09:70:71:DE:52:06:28:EF:68:12
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/ndhdNzWXY0VqUwlwcd5SBijvaBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:1400::/40
Signature Algorithm: sha256WithRSAEncryption
5e:02:db:ba:90:fc:a8:4e:9a:01:a7:de:51:81:3c:71:aa:97:
4f:9a:da:5f:28:79:64:00:20:93:03:7d:c9:d2:e7:d7:e6:c6:
3c:5a:13:21:50:88:1c:6e:a9:9c:84:55:e2:57:e7:2e:b0:be:
f1:37:a4:37:cf:a3:7f:65:ba:4d:64:5f:9c:c7:69:73:33:e7:
df:0c:fc:c7:d7:c3:49:8e:e4:f9:03:a4:0a:b9:8d:e3:cf:7d:
30:ac:4c:b0:e9:c7:07:73:3b:45:a0:d3:b2:fb:8a:15:3a:a2:
e9:85:af:87:07:9f:ee:2b:6c:a6:ce:40:07:b7:03:5e:8a:2a:
53:f1:2a:ca:fe:c3:bf:1a:c0:2f:93:57:16:f0:84:1c:19:c4:
2c:47:0b:1c:1c:2c:a9:7e:cd:5f:ab:9c:18:90:9c:15:3d:7d:
a4:99:6f:1a:fe:b3:5b:aa:f2:d3:a8:01:aa:ea:d6:37:05:43:
7c:8b:a9:44:8e:ca:5b:03:8c:72:3c:e9:70:da:d6:c6:7a:fa:
be:0e:4a:23:33:6e:b8:2e:2d:b4:51:03:6b:a1:57:f2:fd:ff:
a9:56:b6:04:5c:a1:0c:4a:3e:ec:33:23:8b:1a:38:11:6d:14:
81:59:27:5c:db:f6:d4:4d:5d:2a:b4:0b:ce:20:de:21:2f:c4:
5c:ce:3c:b7
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAaFMTKi2vy5LDSZxbMhGCCA0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjYxMDE3MjM1NzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZGQ4NWQzNzM1OTc2MzQ1NmE1MzA5NzA3MWRlNTIwNjI4ZWY2ODEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0j1oqoeRIGdn2/I2YT+tSAl7fcgH
qkLuKWBsAVCBCJcaomkd3R3tL1pYVAYZsGjO3m/BF3HA4lHCNrPSTujYR4LF4KIn
i+rfLlmsLCIyo0psgldRhiS6Us1mQi+fJLACQBKgPXy1xCYtGeGJJ9toAfRq2GV6
DLVwhAh89ZFbZMW7nj805L21GjhUzn052u/6y6U8XCi5y+eugwndGbdLN1ohqN60
RhRZNi8Etgf5XDkUyjkIyTJYt+A4HZJjbbcvEpWLIJKP8hGkpXTemB34q3iqztmh
YBrNAyYsoNv9YLg2XnVGJARTlw+Cb8BkswwWfy4Lb6dbFyom171az5k9OwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFJ3YXTc1l2NFalMJcHHeUgYo72gSMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvbmRoZE56V1hZMFZxVXdsd2NkNVNCaWp2YUJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg+yQBQw
DQYJKoZIhvcNAQELBQADggEBAF4C27qQ/KhOmgGn3lGBPHGql0+a2l8oeWQAIJMD
fcnS59fmxjxaEyFQiBxuqZyEVeJX5y6wvvE3pDfPo39luk1kX5zHaXMz598M/MfX
w0mO5PkDpAq5jePPfTCsTLDpxwdzO0Wg07L7ihU6oumFr4cHn+4rbKbOQAe3A16K
KlPxKsr+w78awC+TVxbwhBwZxCxHCxwcLKl+zV+rnBiQnBU9faSZbxr+s1uq8tOo
Aarq1jcFQ3yLqUSOylsDjHI86XDa1sZ6+r4OSiMzbrguLbRRA2uhV/L9/6lWtgRc
oQxKPuwzI4saOBFtFIFZJ1zb9tRNXSq0C84g3iEvxFzOPLc=
-----END CERTIFICATE-----
Generated at Sat Oct 24 12:45:49 2026 by rpki-client