Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/w4X4O0blEwyg8xDml8oescdDN5g.roa
File: w4X4O0blEwyg8xDml8oescdDN5g.roa (raw, json)
Hash identifier: Z6nU/atTblLQ9+PPibbj+oqnMoI0RxgOnC+DBBOJ2gA=
Subject key identifier: C3:85:F8:3B:46:E5:13:0C:A0:F3:10:E6:97:CA:1E:B1:C7:43:37:98
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 01A14C33053B9EEFC94BB63DB13351B3A434
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/w4X4O0blEwyg8xDml8oescdDN5g.roa
Signing time: Sat 17 Oct 2026 23:29:34 +0000
ROA not before: Sat 17 Oct 2026 23:29:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216382
IP address blocks: 2a0f:b240:1400::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4c:33:05:3b:9e:ef:c9:4b:b6:3d:b1:33:51:b3:a4:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Oct 17 23:29:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c385f83b46e5130ca0f310e697ca1eb1c7433798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1f:28:71:53:3b:bd:a9:b3:5b:e7:fd:49:44:
21:d4:7e:65:42:b3:c3:02:18:31:f0:10:d3:1d:0d:
68:3f:cc:4c:74:75:a0:17:20:0b:c4:be:02:b8:36:
16:b9:6c:79:e0:ee:b1:56:db:02:d6:0f:71:63:29:
38:50:ee:b3:e4:ef:21:da:e2:34:67:cc:1e:bb:a7:
a4:f0:94:df:90:28:3a:59:2d:fe:19:b4:8c:a1:49:
76:f5:5a:7f:61:51:69:6d:b9:65:f1:71:30:0c:c3:
b7:c4:63:f2:77:20:72:03:05:4f:00:af:e1:45:cf:
1a:5c:6b:22:0d:e3:a8:61:a7:ab:78:20:48:1d:d6:
07:67:20:e9:94:50:0a:38:40:6e:15:1d:73:8a:6b:
5c:10:f8:fe:b5:12:83:a1:c9:a1:93:97:8c:4c:2c:
a1:c6:92:c3:3c:79:71:70:8d:03:84:35:43:5e:14:
a9:62:c1:a5:7c:23:e7:30:f5:92:d0:d6:2f:70:22:
b2:a6:1e:3b:cf:74:be:9e:23:52:d4:4f:c5:0e:89:
a9:b9:bb:02:d2:fc:89:fa:91:58:f5:9d:e2:8d:b0:
f1:43:e6:23:08:ab:9b:ed:3a:6d:4c:ef:2c:0b:1d:
7d:03:a8:f6:a4:ee:53:00:22:30:a2:0e:b1:dd:40:
09:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:85:F8:3B:46:E5:13:0C:A0:F3:10:E6:97:CA:1E:B1:C7:43:37:98
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/w4X4O0blEwyg8xDml8oescdDN5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:1400::/40
Signature Algorithm: sha256WithRSAEncryption
6e:26:4a:d9:d7:3e:aa:23:9c:8c:a0:cb:69:b4:4c:3d:04:5c:
1a:b3:7a:34:43:74:a2:b6:6a:12:42:6a:6a:c7:76:b5:4a:6a:
0f:fb:46:27:76:31:0d:78:3c:01:79:2e:8a:6d:27:8b:41:01:
84:42:fd:fc:67:21:3a:27:c5:cd:08:71:8e:bf:bd:57:fe:25:
c1:cf:36:ff:f8:12:43:db:0c:0c:7c:68:1e:4e:10:f1:47:65:
28:5d:1a:60:7a:45:c1:f7:a3:da:8d:24:71:25:92:f6:96:b6:
da:b8:b7:e0:c2:6d:a8:f4:4c:2f:d4:f2:e8:79:4b:39:b7:6d:
c5:bc:d9:f1:8b:f7:b6:19:47:d2:c9:63:94:ca:b4:4d:a1:e1:
0d:3f:76:65:35:54:a4:44:6b:17:1c:62:34:24:98:d0:d6:25:
16:36:a9:a5:8e:5c:b0:a5:c1:41:8b:c8:0f:00:2c:9f:ac:1f:
83:26:20:34:ab:0b:2e:46:39:5b:b5:c2:ed:be:0f:90:c7:6d:
96:c9:d5:95:9d:0a:5d:73:df:ef:a0:08:3e:49:29:9e:86:4d:
3c:f4:48:4b:d8:40:cf:69:01:a7:0a:c8:97:d1:32:0f:c2:d4:
a5:ca:aa:64:13:a7:3d:88:90:be:4f:7c:91:7f:83:f6:34:e3:
f8:db:14:f6
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAaFMMwU7nu/JS7Y9sTNRs6Q0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODcxMDRhNGRiNGM0NjM3MWE3ZjhiNmE0NDFmYzMwZWNk
ZmUyMGYwHhcNMjYxMDE3MjMyOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzg1ZjgzYjQ2ZTUxMzBjYTBmMzEwZTY5N2NhMWViMWM3NDMzNzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxB8ocVM7vamzW+f9SUQh1H5lQrPD
Ahgx8BDTHQ1oP8xMdHWgFyALxL4CuDYWuWx54O6xVtsC1g9xYyk4UO6z5O8h2uI0
Z8weu6ek8JTfkCg6WS3+GbSMoUl29Vp/YVFpbbll8XEwDMO3xGPydyByAwVPAK/h
Rc8aXGsiDeOoYaereCBIHdYHZyDplFAKOEBuFR1zimtcEPj+tRKDocmhk5eMTCyh
xpLDPHlxcI0DhDVDXhSpYsGlfCPnMPWS0NYvcCKyph47z3S+niNS1E/FDompubsC
0vyJ+pFY9Z3ijbDxQ+YjCKub7TptTO8sCx19A6j2pO5TACIwog6x3UAJRwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFMOF+DtG5RMMoPMQ5pfKHrHHQzeYMB8GA1UdIwQY
MBaAFG6HEEpNtMRjcaf4tqRB/DDs3+IPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjct
YjcxNzk4MGU0YWQ2LzEvdzRYNE8wYmxFd3lnOHhEbWw4b2VzY2RETjVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9iODdlYzAtZjc1YS00YmJlLWIwNjctYjcxNzk4MGU0YWQ2
LzEvYm9jUVNrMjB4R054cF9pMnBFSDhNT3pmNGc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg+yQBQw
DQYJKoZIhvcNAQELBQADggEBAG4mStnXPqojnIygy2m0TD0EXBqzejRDdKK2ahJC
amrHdrVKag/7Rid2MQ14PAF5LoptJ4tBAYRC/fxnITonxc0IcY6/vVf+JcHPNv/4
EkPbDAx8aB5OEPFHZShdGmB6RcH3o9qNJHElkvaWttq4t+DCbaj0TC/U8uh5Szm3
bcW82fGL97YZR9LJY5TKtE2h4Q0/dmU1VKREaxccYjQkmNDWJRY2qaWOXLClwUGL
yA8ALJ+sH4MmIDSrCy5GOVu1wu2+D5DHbZbJ1ZWdCl1z3++gCD5JKZ6GTTz0SEvY
QM9pAacKyJfRMg/C1KXKqmQTpz2IkL5PfJF/g/Y04/jbFPY=
-----END CERTIFICATE-----
Generated at Thu Oct 22 20:06:14 2026 by rpki-client