Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/pTRzy0V1fdEy5rcX0_NhON-9wQY.roa
File: pTRzy0V1fdEy5rcX0_NhON-9wQY.roa (raw, json)
Hash identifier: Xo56f0b+LhI6UkcWsipbYmqhB5kOaKEbM8+GMkAUwOQ=
Subject key identifier: A5:34:73:CB:45:75:7D:D1:32:E6:B7:17:D3:F3:61:38:DF:BD:C1:06
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 019F1380D07D6534DCF52274950719C3D2B8
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/pTRzy0V1fdEy5rcX0_NhON-9wQY.roa
Signing time: Mon 29 Jun 2026 13:10:36 +0000
ROA not before: Mon 29 Jun 2026 13:10:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215473
IP address blocks: 2a0f:b240:7700::/40 maxlen: 48
2a0f:b241:91::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 07:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:80:d0:7d:65:34:dc:f5:22:74:95:07:19:c3:d2:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Jun 29 13:10:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a53473cb45757dd132e6b717d3f36138dfbdc106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a7:03:93:36:88:94:d3:3b:2c:68:bc:d5:c7:
01:e4:00:08:48:a1:d3:a0:38:30:13:42:13:b2:69:
cd:39:35:2c:c5:1b:a2:b0:ce:46:03:8e:3c:d1:97:
a8:14:3b:8a:89:38:50:8f:f9:88:06:19:f1:3c:d4:
72:11:98:4e:9a:87:e3:b0:8f:33:dc:67:24:40:ee:
89:65:99:6c:e6:d5:7e:e1:97:85:73:17:85:f7:b0:
d3:06:cb:17:cd:40:da:13:4e:e3:cb:bd:0a:fe:67:
a3:41:d2:e1:c5:6c:82:17:b7:f7:20:98:1d:f6:37:
6e:9e:e9:1e:c8:8b:68:25:34:a0:e0:82:4f:9e:81:
3f:e6:6a:ad:71:6c:e2:d5:63:68:d5:9a:ca:a4:d5:
6d:5c:ea:72:8a:9f:9c:8c:65:ac:48:fd:6f:c7:1b:
4e:c0:bc:26:d4:75:7a:51:40:3e:33:05:28:fd:6b:
84:bc:4c:42:4d:15:6b:a5:de:25:14:ea:60:5d:fe:
e8:1b:3e:c3:f4:af:f7:a3:e9:dd:13:30:b2:66:e9:
d7:54:5f:2f:af:b1:af:b7:84:d4:ef:7e:03:2f:49:
08:8f:ab:57:05:2c:e1:84:db:b0:4f:b5:f8:17:2f:
d4:de:31:35:14:51:b4:d6:e3:28:31:37:e2:4a:de:
37:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:34:73:CB:45:75:7D:D1:32:E6:B7:17:D3:F3:61:38:DF:BD:C1:06
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/pTRzy0V1fdEy5rcX0_NhON-9wQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:7700::/40
2a0f:b241:91::/48
Signature Algorithm: sha256WithRSAEncryption
8e:c4:94:f1:7c:37:54:93:42:ae:27:a3:4f:08:bf:4d:dc:80:
57:05:62:86:55:89:b0:d3:08:1e:29:a3:4a:0b:3c:4d:b9:c7:
9f:a7:48:4f:fb:e9:1f:ec:f2:3f:b6:80:27:00:e5:e0:4a:a0:
9b:3a:bf:21:ff:bc:82:6b:86:62:4f:8f:67:02:82:37:86:aa:
7e:15:7c:7f:9a:a8:bc:68:20:89:f7:34:d4:34:33:c6:ff:04:
16:50:e3:16:0b:b5:cb:73:df:ed:10:37:f4:04:09:80:22:cd:
6c:d4:a9:c4:db:cb:f4:09:e4:dd:db:0e:15:df:44:ae:db:9f:
99:4f:55:db:0d:cb:48:40:db:86:a6:96:01:01:9a:b4:9b:f7:
4a:cf:39:71:6e:6d:61:6a:43:65:03:65:63:39:bf:20:8c:f5:
35:8d:ca:75:41:d0:c7:ec:12:d3:68:3e:9c:c1:af:c0:90:61:
75:df:f0:ef:dd:ce:f5:ee:42:f8:44:cb:cc:59:44:ad:c2:5e:
45:b2:9c:a5:06:82:e2:86:bf:78:1b:af:8d:83:3f:53:21:ec:
53:54:c7:67:18:27:b2:a0:db:20:4f:2a:6c:0b:91:fb:12:95:
dd:7c:d7:b0:c7:2c:5a:df:6c:57:f2:b7:e4:19:9c:cd:09:5f:
84:03:a9:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:15:29 2026 by rpki-client