Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/IbdD7B_rbZ82l05qreSbnl84udg.roa
File: IbdD7B_rbZ82l05qreSbnl84udg.roa (raw, json)
Hash identifier: uA8Og340L9saWFbCQgc9/+UyY6hh5kv6fKZCBbtAH8w=
Subject key identifier: 21:B7:43:EC:1F:EB:6D:9F:36:97:4E:6A:AD:E4:9B:9E:5F:38:B9:D8
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 01989962C92259D8465A05C702D9248C141A
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/IbdD7B_rbZ82l05qreSbnl84udg.roa
Signing time: Mon 11 Aug 2025 13:47:24 +0000
ROA not before: Mon 11 Aug 2025 13:47:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215685
IP address blocks: 2a14:c380:330::/44 maxlen: 44
2a14:c380:600::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 09:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:99:62:c9:22:59:d8:46:5a:05:c7:02:d9:24:8c:14:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Aug 11 13:47:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21b743ec1feb6d9f36974e6aade49b9e5f38b9d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e7:7b:3e:5a:66:91:d3:70:34:7f:d1:b1:ef:
c7:e4:89:fd:12:98:14:2f:83:56:8f:74:8b:b6:02:
10:5e:29:81:e9:79:8f:53:81:f8:a4:d0:08:47:ab:
1f:7b:ab:95:96:c9:6e:b5:b1:ec:81:ed:06:34:ed:
df:45:01:4c:54:0f:55:80:1f:c0:5b:0f:2f:b3:57:
f8:07:f3:df:e3:91:bf:2e:cc:c9:e7:22:6f:e4:da:
e5:2d:e5:cf:e0:42:88:17:ff:ef:85:2d:4b:ee:f8:
7c:35:d4:e7:5e:60:c3:37:78:1f:14:10:18:53:a9:
52:98:07:ee:3e:11:b7:ec:1f:f0:1e:b3:22:13:e5:
60:e6:b3:22:c6:eb:c4:e1:ed:b0:72:66:a6:e7:c9:
5f:4b:86:02:aa:6b:7a:55:9c:b1:fc:3f:5b:70:00:
c3:c3:8b:a2:46:cb:31:c6:6a:1e:c4:c2:4b:40:1d:
7f:23:81:e2:81:50:22:18:4d:0d:91:8b:bb:44:6c:
80:06:95:95:f7:51:e0:f2:1b:88:cc:75:81:84:de:
29:ee:35:50:84:ef:f9:e4:1f:ee:a9:2b:d2:e7:dc:
32:0c:93:61:48:bb:9d:10:fd:06:a3:88:ba:d5:fd:
a6:e6:8a:2e:2b:b8:9c:81:dc:3c:6c:5e:39:f3:69:
c9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B7:43:EC:1F:EB:6D:9F:36:97:4E:6A:AD:E4:9B:9E:5F:38:B9:D8
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/IbdD7B_rbZ82l05qreSbnl84udg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:330::/44
2a14:c380:600::/40
Signature Algorithm: sha256WithRSAEncryption
3c:f8:88:0f:82:9d:57:0b:51:95:a5:c0:25:72:da:ca:c0:8c:
53:c5:37:ac:88:45:43:c2:3b:98:02:b8:3c:27:9c:1d:d9:00:
7b:6a:d5:4b:6c:19:da:e0:07:c5:e7:3d:1e:e6:31:8c:45:13:
6a:93:c6:d0:07:39:5b:ab:03:87:e6:32:45:dc:a8:68:9f:ee:
62:0d:ba:c5:90:01:ed:14:02:f6:d5:b0:a0:df:cc:1f:39:93:
4d:75:61:30:c0:cd:c0:c0:dc:5a:10:79:16:d3:ec:fe:cc:a9:
b2:8c:49:9c:bb:df:86:ed:5f:cb:d5:56:5f:a5:04:3f:ff:2f:
cb:25:94:11:e9:b5:e0:0e:b4:6c:7b:4d:07:4b:34:d7:97:a6:
fc:ff:f5:f2:28:f4:3c:e7:22:03:3b:e9:cb:0f:83:de:7f:cd:
bd:ae:6d:00:0a:82:29:76:67:77:05:09:6c:7a:29:c8:66:e3:
cb:f4:d2:aa:03:2d:c4:4a:a1:88:b3:78:39:af:99:12:7c:99:
63:2b:47:75:eb:98:1a:26:b8:83:1f:8c:da:a3:8c:0b:1a:fd:
91:6f:9c:32:bb:54:6d:e1:4d:fd:a4:0a:35:46:1d:f2:0c:76:
b5:2e:83:43:6a:fb:c4:a9:da:8a:4d:58:11:7a:fb:f0:a9:b7:
16:d9:9a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:29:55 2025 by rpki-client