Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/GrV43tfFsrk_20gDyKXlGSNBc5g.roa
File: GrV43tfFsrk_20gDyKXlGSNBc5g.roa (raw, json)
Hash identifier: 8vJUwJqFEIJ8pKgYAGsUNoqzlMWjvj7qf75Unrmt0KQ=
Subject key identifier: 1A:B5:78:DE:D7:C5:B2:B9:3F:DB:48:03:C8:A5:E5:19:23:41:73:98
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 0198A93698C6A6E9C202EF47E02EF2001886
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/GrV43tfFsrk_20gDyKXlGSNBc5g.roa
Signing time: Thu 14 Aug 2025 15:33:04 +0000
ROA not before: Thu 14 Aug 2025 15:33:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200950
IP address blocks: 2a14:c380:360::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 09:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a9:36:98:c6:a6:e9:c2:02:ef:47:e0:2e:f2:00:18:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Aug 14 15:33:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1ab578ded7c5b2b93fdb4803c8a5e51923417398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:78:89:b6:e0:fd:57:55:89:28:ee:18:f4:2c:
10:a5:24:e0:e4:23:07:f6:06:f0:31:05:f6:1d:20:
4e:0b:04:37:b9:e7:b2:84:56:1f:ad:2e:00:56:d2:
b7:b9:c8:df:b5:be:cc:62:3d:49:7f:c1:bc:8a:39:
97:3d:89:f0:21:01:a8:3f:79:f7:86:f4:12:1c:73:
e9:bd:d8:d3:2d:4a:57:2b:31:62:58:a1:04:6e:5a:
ea:34:d4:d3:c6:8f:c1:af:59:ef:31:70:04:1e:62:
85:ac:01:53:41:0b:bb:14:e5:91:30:8a:fd:82:f9:
60:8f:50:0f:50:a6:05:ae:8f:d6:d3:d2:63:cc:df:
0b:2c:5f:0c:44:25:51:8b:77:09:18:09:a7:06:78:
c2:ce:5d:5b:75:d3:a0:da:fa:ee:f3:69:da:b0:c3:
98:d1:fb:6d:53:31:18:8e:c4:26:dd:8d:e4:f3:c5:
fc:ee:a0:7d:36:ef:5b:dd:f2:f9:35:7e:b9:91:98:
d5:48:17:f6:02:07:76:cb:83:e3:7a:15:04:ee:e2:
fa:d9:7d:17:77:3b:c5:bf:c7:dc:1a:84:bc:a2:fa:
97:19:78:e8:b2:6f:07:6e:ad:81:d0:4f:df:5a:95:
03:50:0f:49:8b:64:23:cf:aa:1a:9b:d3:c1:39:87:
6d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B5:78:DE:D7:C5:B2:B9:3F:DB:48:03:C8:A5:E5:19:23:41:73:98
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/GrV43tfFsrk_20gDyKXlGSNBc5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:360::/44
Signature Algorithm: sha256WithRSAEncryption
01:86:84:6a:ee:8d:4b:64:16:e1:9f:6c:12:9e:a1:89:57:d8:
ea:dc:e6:39:ea:82:40:4a:45:d8:89:99:d6:6b:b3:d7:49:78:
16:9e:5c:60:5d:9a:41:8e:8e:bc:7d:0f:ca:5a:ea:81:46:a1:
0f:f4:ec:df:d3:77:3a:e5:87:c1:4c:78:eb:49:2f:c6:f5:7d:
cf:4c:b8:2e:99:9b:b3:34:00:f3:06:d3:c7:3b:55:89:55:6d:
a4:6d:a7:e6:73:5d:c0:1f:1e:43:4c:b2:4b:70:b8:19:72:eb:
08:a4:dd:81:21:65:c0:5c:62:39:31:04:31:2d:c4:19:21:43:
6b:ae:28:0f:43:2e:ff:a6:0b:f4:3b:b6:c8:92:cb:4f:23:91:
d6:c3:10:3e:cf:99:db:17:91:52:6c:db:e2:84:92:a5:24:e0:
0e:6b:59:02:d1:62:69:67:d2:4a:a6:54:9a:ce:d3:6d:81:df:
3c:5b:cc:f3:f5:1e:6e:3c:4b:dd:d0:7b:16:e6:37:c1:61:c4:
f4:d8:d0:ac:50:a9:26:6e:94:86:11:de:55:a4:72:32:7f:a2:
99:35:f8:fe:2a:01:c3:d9:7d:e4:35:ef:5e:3f:a4:91:c5:e7:
5b:97:75:ef:ad:d4:78:c8:1e:d7:7e:f8:63:35:8d:21:d0:93:
01:53:f8:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:29:43 2025 by rpki-client