Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/AjjQcQWEYZ09EzpCa5l2a4dw19A.roa
File: AjjQcQWEYZ09EzpCa5l2a4dw19A.roa (raw, json)
Hash identifier: /T/erl1/TOJeLzuUMQdPVM2OGQf+M87vBcbZkzl0bYk=
Subject key identifier: 02:38:D0:71:05:84:61:9D:3D:13:3A:42:6B:99:76:6B:87:70:D7:D0
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 019DAFE49A8D6F6CC81D6FC794D6924D41C1
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/AjjQcQWEYZ09EzpCa5l2a4dw19A.roa
Signing time: Tue 21 Apr 2026 11:54:47 +0000
ROA not before: Tue 21 Apr 2026 11:54:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216078
IP address blocks: 2a14:c380:16::/48 maxlen: 48
2a14:c380:31::/48 maxlen: 48
2a14:c380:600::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:af:e4:9a:8d:6f:6c:c8:1d:6f:c7:94:d6:92:4d:41:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Apr 21 11:54:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0238d0710584619d3d133a426b99766b8770d7d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f8:d4:54:60:54:5f:a5:5d:e1:45:6a:72:7f:
f3:bf:21:d4:0e:c8:ed:57:e4:2d:af:e9:70:9f:b7:
c9:a2:23:b3:db:d9:4c:46:8d:57:ca:10:0d:a9:e3:
21:be:84:b4:d1:8f:b4:89:55:6e:cf:72:bb:0e:5c:
75:60:d0:d5:49:75:66:20:c9:f5:c5:b7:9f:d5:8c:
c7:d4:66:22:7b:96:10:b8:86:28:7f:e3:18:ac:10:
32:8c:ee:2a:7f:ac:3d:0d:68:a4:ff:68:05:a6:71:
3e:ac:8c:af:99:ff:79:df:6f:75:83:30:7a:c5:9a:
93:c8:11:18:6f:be:73:88:7d:8f:93:78:fb:ae:67:
05:c8:9c:b2:75:b9:ba:3e:4d:7f:58:f6:1f:2e:05:
5c:cb:d2:c8:31:16:f9:5c:d7:7f:4e:f8:fd:e0:6a:
ed:45:c3:eb:0b:03:ca:a7:8b:1d:ce:fa:f5:ec:ca:
8a:70:88:8f:7a:8e:e7:67:fc:6d:f7:00:a4:ec:5a:
6e:42:f2:f5:30:eb:36:e4:21:26:84:88:ee:68:3d:
c3:a9:a4:26:26:5c:6d:0f:a7:41:4b:31:45:7f:f9:
2f:cb:4d:8b:2f:74:c1:d3:e9:93:c7:00:87:b2:bd:
c1:4c:57:90:ea:6d:fc:19:5b:ed:26:21:16:23:2d:
23:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:38:D0:71:05:84:61:9D:3D:13:3A:42:6B:99:76:6B:87:70:D7:D0
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/AjjQcQWEYZ09EzpCa5l2a4dw19A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:16::/48
2a14:c380:31::/48
2a14:c380:600::/40
Signature Algorithm: sha256WithRSAEncryption
43:e0:e4:5e:e9:70:52:af:10:83:19:9f:8a:ae:82:3d:c1:fc:
65:b0:32:2f:44:8e:74:e6:a8:b7:62:25:7d:fd:32:d7:a0:ec:
0c:61:51:57:a8:73:fa:bf:0d:26:63:77:33:19:38:84:db:31:
d6:de:65:55:7e:9e:e6:17:72:bd:26:63:14:af:bd:aa:e2:21:
7d:ed:0b:5b:71:59:b1:91:cf:e0:ec:6e:3c:46:e9:94:03:1f:
b5:59:ab:51:ba:72:6f:f3:e3:ac:1b:92:c7:50:79:90:3c:68:
49:96:d5:c4:d1:ff:28:3f:bc:7f:ee:3f:0c:ee:df:f8:6d:1b:
c4:d1:67:dc:98:81:c2:db:07:98:f6:ee:92:b3:f3:f7:13:a7:
ff:bc:36:7d:89:cd:58:5e:b5:7b:a0:db:08:5e:46:04:f5:4b:
a4:6f:2d:68:fe:cc:58:da:95:83:5b:eb:ac:e1:b4:41:87:88:
8a:ee:41:43:54:3a:c5:c4:f9:7e:53:ad:6a:d2:09:8b:79:88:
24:cc:aa:bc:ed:ba:c4:ea:82:17:e2:a2:34:64:fc:bc:15:66:
47:48:93:a9:57:24:63:7a:ef:b2:8b:9d:d1:f6:cd:f7:11:8c:
eb:35:8e:49:14:ae:83:81:d1:62:83:fb:4a:3c:6c:ed:f5:93:
c9:a2:ce:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:13:25 2026 by rpki-client