Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/yGWTB8Q4QZdYsM8dAanhouG1uZM.roa
File: yGWTB8Q4QZdYsM8dAanhouG1uZM.roa (raw, json)
Hash identifier: ZrMLC5Bx8E5Ii4LYKUigSGLFeF+LHBtDhhOPGWlQmAk=
Subject key identifier: C8:65:93:07:C4:38:41:97:58:B0:CF:1D:01:A9:E1:A2:E1:B5:B9:93
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 019FB9285453B9BF6246B07CB407C587150B
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/yGWTB8Q4QZdYsM8dAanhouG1uZM.roa
Signing time: Fri 31 Jul 2026 17:10:55 +0000
ROA not before: Fri 31 Jul 2026 17:10:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214344
IP address blocks: 2a0f:b240:1b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 22:16:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b9:28:54:53:b9:bf:62:46:b0:7c:b4:07:c5:87:15:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Jul 31 17:10:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c8659307c438419758b0cf1d01a9e1a2e1b5b993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:16:20:3a:55:d9:a4:ee:81:2d:23:e6:89:48:
35:31:6b:7c:5b:cb:08:49:a8:d5:a1:93:83:20:46:
6b:06:87:8b:cd:2a:39:92:3b:32:b8:69:29:2c:6c:
69:cc:a7:cb:e1:97:f4:08:b6:5a:ec:18:d3:89:a5:
c1:06:d9:ca:0b:ac:62:48:7f:6e:70:f7:8f:52:e1:
36:64:1d:55:28:bc:f6:33:e4:ef:58:df:0d:07:cd:
01:ae:d4:29:0d:1b:12:c7:64:eb:90:56:a6:c3:86:
a2:00:48:72:e1:c3:b0:cb:5b:59:41:52:66:79:ed:
a2:85:c7:13:12:75:c4:d1:8d:3e:76:45:ad:5c:5f:
60:11:04:58:ba:7f:07:e9:34:51:72:dc:e7:ab:78:
dd:53:69:39:ee:23:07:9b:3d:34:cb:3c:c1:e0:34:
20:b8:44:00:64:c7:33:dd:a7:0b:0c:51:fa:05:a6:
29:d9:f8:58:e0:54:bd:40:90:e6:93:91:ce:f9:e6:
3e:15:6f:16:4c:31:34:7b:91:2c:a7:02:c5:44:8b:
c0:a7:e5:93:48:9e:ba:d5:05:76:24:18:2d:a8:79:
38:9c:cf:19:f2:8c:9d:61:1c:f3:1b:8f:ab:ba:84:
3f:27:ce:65:f0:e3:d9:9e:29:ee:95:ac:c7:78:4c:
7b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:65:93:07:C4:38:41:97:58:B0:CF:1D:01:A9:E1:A2:E1:B5:B9:93
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/yGWTB8Q4QZdYsM8dAanhouG1uZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b240:1b::/48
Signature Algorithm: sha256WithRSAEncryption
73:78:17:5e:32:1f:c4:f1:58:ac:2c:59:22:8f:2f:37:8b:d7:
56:d0:24:bb:21:e0:89:75:03:49:9d:3f:23:f0:19:e5:d2:b9:
b9:04:5d:64:dd:14:12:9f:22:91:89:c8:ba:8f:86:a6:ac:20:
22:e4:d5:29:35:ef:48:20:32:a5:21:bd:88:f9:0e:6d:ba:d9:
6c:4d:0d:d5:d8:00:af:fc:7b:1e:6d:e9:d3:77:57:fd:b9:d0:
95:c2:8d:93:1b:81:f3:f1:e2:a8:fc:13:21:05:77:de:94:27:
db:37:7f:7f:f8:23:5d:dd:e4:38:04:81:e2:fb:f5:6c:dc:ca:
ba:e3:6f:5f:f9:4f:3a:a0:5b:2b:0a:7c:e1:23:38:bc:ab:fe:
bd:a2:52:dc:e8:83:8e:b9:8f:17:c6:e0:30:57:6d:64:c3:bb:
ef:07:45:ee:4a:c2:d0:e0:b4:40:44:81:35:45:2e:7c:76:23:
30:52:41:ab:8e:6d:d1:49:08:be:e8:11:e5:2f:b7:91:35:86:
65:8b:43:6f:93:e5:8b:96:63:83:bf:ee:fc:75:e5:c6:c9:2c:
9b:e2:c1:4b:69:8d:15:b7:dd:b5:94:09:e1:db:93:34:f4:80:
f4:15:78:0e:db:0e:fa:02:d9:0c:94:c3:e9:15:50:64:e2:e9:
84:62:6e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 07:51:38 2026 by rpki-client