Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/Hoso06mIRHQTIZh8wzj0uS9NN1Y.roa
File: Hoso06mIRHQTIZh8wzj0uS9NN1Y.roa (raw, json)
Hash identifier: YQ/p9SQYbVVZBNZiSSE5ae0LayyFphtQUM66diw/b7c=
Subject key identifier: 1E:8B:28:D3:A9:88:44:74:13:21:98:7C:C3:38:F4:B9:2F:4D:37:56
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 0198AC82B815014D7DC27293123462563482
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/Hoso06mIRHQTIZh8wzj0uS9NN1Y.roa
Signing time: Fri 15 Aug 2025 06:55:04 +0000
ROA not before: Fri 15 Aug 2025 06:55:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216260
IP address blocks: 2a14:c380:152::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 09:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ac:82:b8:15:01:4d:7d:c2:72:93:12:34:62:56:34:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Aug 15 06:55:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e8b28d3a98844741321987cc338f4b92f4d3756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a1:eb:35:de:5e:76:da:27:1e:04:3e:c1:2f:
a2:cf:9f:84:ea:2e:6f:e4:bf:45:d8:3c:99:91:60:
40:99:36:ce:d9:aa:24:58:50:10:55:04:dd:b2:95:
17:83:84:c4:bc:46:35:d0:c0:f3:df:f9:ad:ff:e1:
57:c9:d9:02:80:85:d7:73:62:1d:ab:40:ec:af:62:
b5:43:8e:ae:eb:f3:8d:d4:7b:9b:00:43:40:5f:4e:
a7:ae:aa:2a:0d:5c:de:21:3f:f9:83:e2:e2:b1:72:
47:7b:4d:33:aa:db:70:27:5c:37:9d:7c:d8:e0:59:
ff:5d:6c:5b:d5:c6:5e:a9:bc:71:98:a1:62:3d:96:
de:ab:fd:0b:df:75:3d:be:94:e3:7c:1b:75:e6:3c:
1f:88:ff:4d:c8:5e:bc:90:58:41:61:c2:a6:5c:f4:
bf:82:46:f4:6b:33:78:bc:46:91:09:53:e2:8f:b5:
2e:3a:05:aa:1b:2a:4a:90:53:16:e7:57:f7:ff:ca:
49:35:5f:40:1e:3c:21:d5:44:5a:aa:93:5b:08:35:
34:ee:21:02:68:75:02:6e:ca:a9:d7:fa:a7:96:11:
6a:ff:ce:89:00:d5:e0:4b:1d:e9:fd:fb:71:39:45:
db:99:7b:8a:2d:fe:da:9f:8e:1d:69:e3:a1:ba:1c:
b9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:8B:28:D3:A9:88:44:74:13:21:98:7C:C3:38:F4:B9:2F:4D:37:56
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/Hoso06mIRHQTIZh8wzj0uS9NN1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:152::/48
Signature Algorithm: sha256WithRSAEncryption
3f:f2:e9:28:d9:42:1e:60:63:3d:37:eb:f6:7f:c4:31:0a:b2:
f2:f0:45:b8:73:57:5f:9c:1c:7a:af:78:08:07:29:a3:0e:ff:
8c:c1:7b:e0:b5:47:05:38:35:d7:68:33:d7:98:f8:68:52:13:
23:4c:d4:0b:c0:db:27:5d:f4:31:23:4d:db:24:ba:78:18:65:
bf:ba:d9:a9:d9:0f:96:8e:7e:34:26:a0:46:43:54:e2:47:34:
d0:c0:de:75:f2:fe:5d:a0:6f:44:e3:e3:d4:1f:09:7f:97:29:
da:5e:85:f8:10:8d:ec:20:ba:4d:aa:2b:9a:fa:5c:d8:ed:cd:
2d:0c:18:4f:a0:10:e5:be:cc:58:0e:ca:9a:ec:60:0a:2d:9e:
7a:c1:c4:3f:a3:2e:bf:e9:18:bb:a6:aa:76:43:b3:3b:f6:6a:
eb:1f:79:66:ac:b9:aa:2b:7c:b3:8a:f3:6d:f3:aa:29:b7:46:
ee:23:de:98:ac:48:f4:55:3c:5a:52:c6:4b:b4:fb:80:66:06:
bb:a3:99:0e:e6:85:7a:bd:eb:90:08:83:fe:1a:0d:56:63:c9:
93:3e:84:4f:f5:1a:70:9b:53:a1:bd:69:76:71:90:98:f9:16:
69:82:60:8d:10:b8:ae:82:59:df:c0:33:14:31:33:65:b7:8f:
3a:f5:62:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:24:33 2025 by rpki-client