Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/xmeFtSZNN5M7BDRHu90MB76Aq2A.roa
File: xmeFtSZNN5M7BDRHu90MB76Aq2A.roa (raw, json)
Hash identifier: WtaqUMIA1xUygnrd1Yyx2CKILfhigcmdcFIswszyJwA=
Subject key identifier: C6:67:85:B5:26:4D:37:93:3B:04:34:47:BB:DD:0C:07:BE:80:AB:60
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 01A1127B7FEC5C01A183646401AC6FDC4914
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/xmeFtSZNN5M7BDRHu90MB76Aq2A.roa
Signing time: Tue 06 Oct 2026 18:30:45 +0000
ROA not before: Tue 06 Oct 2026 18:30:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213449
IP address blocks: 2a0f:b240:90::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 07:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:12:7b:7f:ec:5c:01:a1:83:64:64:01:ac:6f:dc:49:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Oct 6 18:30:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c66785b5264d37933b043447bbdd0c07be80ab60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f3:8e:03:68:58:bb:c8:1d:a3:12:cc:88:0f:
08:41:81:9c:12:bf:aa:97:9a:ed:3b:b3:53:75:90:
e3:60:0c:0f:70:43:b1:ea:c9:29:61:a8:db:4d:31:
87:39:ee:84:04:6a:9c:15:ad:ec:e7:20:ec:75:5a:
df:a0:e6:60:b8:21:b1:2c:90:cb:9f:92:18:ca:ab:
e5:b1:23:86:f6:6d:e2:2d:28:00:a3:64:ec:68:33:
b3:79:35:b6:59:e1:67:d7:17:63:53:9f:f4:fe:c7:
09:ec:57:b7:c7:d4:33:e0:e0:45:d9:69:35:52:34:
1d:ff:3b:d3:59:0a:9f:be:68:8d:ab:99:27:d4:99:
d8:ab:27:f6:46:20:29:7f:8d:c8:38:84:ed:17:e3:
f9:d3:95:55:72:78:21:c3:79:fe:e0:aa:c7:ee:22:
4b:8b:7d:d3:6b:34:6f:38:49:96:cd:59:2c:3a:1d:
a7:5b:aa:bf:3a:a4:b6:d7:b6:3f:ed:e7:10:0c:89:
53:4b:39:c7:16:fe:4e:00:61:43:01:05:5f:69:69:
0c:bb:18:51:d0:b4:46:d6:d4:79:a1:08:2a:9e:31:
52:3e:56:7f:7d:28:6c:ab:f7:fd:11:fe:9b:d5:c6:
23:51:60:8e:c6:c2:f4:f6:cb:1f:1e:83:b4:fe:f8:
da:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:67:85:B5:26:4D:37:93:3B:04:34:47:BB:DD:0C:07:BE:80:AB:60
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/xmeFtSZNN5M7BDRHu90MB76Aq2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:90::/48
Signature Algorithm: sha256WithRSAEncryption
28:1d:8c:3a:20:bc:5c:23:e0:f9:50:ce:c8:16:fc:1f:94:63:
04:d6:4c:98:ab:a5:61:6a:71:f4:e1:eb:5f:fe:c6:90:d4:5f:
34:42:16:9c:89:cc:05:d1:31:00:14:d0:a5:5a:5b:67:e0:19:
01:a0:63:5a:13:d8:75:5e:99:20:28:8a:15:82:d6:d6:d8:77:
f6:bf:d1:02:4b:fa:da:8a:38:cf:b4:51:97:fc:83:d6:bd:6b:
b4:8c:3e:a7:b2:5c:96:66:08:07:19:f9:7c:2b:62:2a:d1:75:
b5:2e:91:8c:5b:7d:6f:02:7d:b5:52:e5:2f:98:70:06:db:db:
82:6a:9b:47:e2:b3:74:d9:3c:1e:57:4c:4c:2d:f8:5c:e1:f7:
95:d7:13:31:71:c9:51:bc:5a:4b:dc:b9:2d:dc:99:9e:24:83:
b6:12:dc:56:36:29:b4:06:5d:4d:c8:95:32:71:ab:be:ee:92:
4f:b1:0d:fd:b0:5b:78:df:1f:ab:98:45:0c:c2:f9:38:67:ed:
f7:18:39:87:71:99:c4:aa:2e:0a:d9:1d:46:06:65:1e:25:7e:
97:2f:58:bd:4d:8d:30:81:e5:f1:17:ef:1f:7c:b2:17:bc:1e:
ce:06:df:11:b9:1a:d4:23:0b:be:04:8d:60:c0:21:38:00:7e:
cd:bc:57:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 17:02:45 2026 by rpki-client