Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/4F-JNXjL0FEW2q2SviqW8T7dKGI.roa
File: 4F-JNXjL0FEW2q2SviqW8T7dKGI.roa (raw, json)
Hash identifier: ap+eezrCMf1pKwFdFT3V3ILUdPZFPfptITW6ao1jLNc=
Subject key identifier: E0:5F:89:35:78:CB:D0:51:16:DA:AD:92:BE:2A:96:F1:3E:DD:28:62
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 0198BF0AFABAC9C52AFC58A89BE30BE8A7AC
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/4F-JNXjL0FEW2q2SviqW8T7dKGI.roa
Signing time: Mon 18 Aug 2025 21:17:04 +0000
ROA not before: Mon 18 Aug 2025 21:17:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44733
IP address blocks: 2a14:c380:420::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 09:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:bf:0a:fa:ba:c9:c5:2a:fc:58:a8:9b:e3:0b:e8:a7:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Aug 18 21:17:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e05f893578cbd05116daad92be2a96f13edd2862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:79:1f:f3:10:da:ff:46:75:03:66:cc:f3:cb:
cc:1c:4a:28:00:92:f3:13:c8:96:1e:d2:d0:d3:b2:
0f:82:c5:51:ab:8b:44:a9:df:8e:f1:64:58:80:68:
64:97:95:ea:5b:be:a3:f3:b3:17:d7:b3:73:7e:db:
9b:0c:51:a8:68:7a:8f:9e:5a:be:ae:94:52:69:e5:
aa:5c:4c:a6:a9:c5:47:a8:be:1c:65:ea:c6:0d:0f:
4b:89:ea:6a:50:a7:83:58:5c:b5:0f:95:81:49:26:
23:8b:d2:c1:1f:f7:65:08:03:95:f0:ea:96:31:d6:
b1:6b:5d:70:d1:5c:cd:48:b2:55:18:3a:4e:f5:25:
4c:23:d8:12:75:a2:bd:51:b9:fa:c8:3e:a0:a8:ac:
6e:a3:eb:27:ba:5b:55:a3:8c:d9:2e:a6:52:73:aa:
7c:27:45:54:3a:cc:4e:1e:aa:b7:1d:14:b4:10:07:
81:c6:ce:cb:02:53:57:89:8a:5c:25:b5:51:c0:61:
a7:50:47:bd:92:51:74:35:4b:56:df:e9:ce:0d:ff:
c8:7d:3f:30:8d:61:b6:d5:2f:74:27:2d:c5:4a:8f:
19:a2:fb:5f:c1:c5:3f:89:8b:a7:eb:a0:c6:4c:a9:
14:68:3f:50:22:b3:99:f5:7a:4d:2c:ba:7a:4e:d1:
36:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:5F:89:35:78:CB:D0:51:16:DA:AD:92:BE:2A:96:F1:3E:DD:28:62
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/4F-JNXjL0FEW2q2SviqW8T7dKGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:420::/44
Signature Algorithm: sha256WithRSAEncryption
50:a6:f7:11:89:28:c5:e9:b2:9b:43:8a:ba:4d:77:71:18:2c:
48:0a:34:4f:c4:61:3a:53:cb:d6:62:ce:1c:10:17:18:07:36:
48:2c:84:b1:82:fb:59:fe:36:04:03:9d:b8:34:d9:b1:c8:27:
55:3f:66:81:47:04:50:62:aa:4f:58:2a:5e:0d:fb:f9:55:77:
17:ee:fa:e6:86:72:cb:82:b6:2b:07:ff:50:ad:2a:2a:2f:b5:
f2:d5:08:f8:c2:7b:da:9a:fc:51:1b:ff:01:87:42:32:b5:61:
d8:97:c4:3f:d1:67:55:8f:55:62:bc:1f:fb:ae:a3:50:1d:0d:
23:8b:29:6e:d4:73:23:6e:c3:87:9e:40:50:85:a2:a9:68:47:
02:46:b5:f9:44:66:79:8f:ce:59:1d:bb:2f:d2:c5:8b:24:07:
2f:f8:40:38:d1:80:ca:92:67:4f:57:90:b2:79:84:bc:3f:cb:
a9:71:8d:2e:0a:86:c0:12:87:dc:45:65:4b:15:77:5a:e0:d9:
dd:46:a8:c1:5e:9b:9a:2d:a8:2b:aa:bf:93:6a:c7:21:d9:c0:
67:c9:3c:56:2e:c2:74:77:72:ae:74:0b:22:3e:41:b3:58:d5:
05:f9:21:a1:57:4b:25:1d:64:e8:9a:33:10:b9:cf:11:ae:af:
eb:99:58:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:27:19 2025 by rpki-client