Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/L5NHHso7pbnG6aQtjulTsDqTLW4.roa
File: L5NHHso7pbnG6aQtjulTsDqTLW4.roa (raw, json)
Hash identifier: cf79hQKJHwAfq/7fuwfyI1o8cyuIwPvIl6CHQUpcxno=
Subject key identifier: 2F:93:47:1E:CA:3B:A5:B9:C6:E9:A4:2D:8E:E9:53:B0:3A:93:2D:6E
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 019CC96FB489B7DBB3653B01BC6C563E30AD
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/L5NHHso7pbnG6aQtjulTsDqTLW4.roa
Signing time: Sat 07 Mar 2026 17:54:27 +0000
ROA not before: Sat 07 Mar 2026 17:54:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200912
IP address blocks: 2a14:c380:26::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c9:6f:b4:89:b7:db:b3:65:3b:01:bc:6c:56:3e:30:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Mar 7 17:54:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2f93471eca3ba5b9c6e9a42d8ee953b03a932d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:78:0d:f0:9d:fb:82:a1:40:6e:48:7f:5e:ba:
17:f9:88:ad:c6:55:53:b9:99:0e:b7:53:a2:4a:b6:
b4:14:f2:db:ea:01:5f:e2:20:a3:41:0d:6e:ed:96:
4d:8e:68:1b:87:34:15:04:58:b9:10:bb:7c:8f:08:
24:4b:48:79:af:6f:67:b3:bd:18:2b:2a:8e:ef:9e:
71:f5:29:68:ba:44:39:6c:22:44:97:0a:68:4a:2d:
8a:81:14:46:c5:34:20:da:3f:fe:f9:e8:bd:a8:3f:
84:a9:69:08:9d:82:84:5a:47:c7:14:5b:ff:a5:9c:
23:f9:3a:ac:30:42:3f:e2:1a:45:7b:f4:43:eb:4a:
7f:89:7c:2c:23:fa:a7:42:8d:a5:4d:9c:73:d1:64:
ec:71:bd:d0:2a:d9:5f:a5:d6:31:4d:b1:2e:02:23:
fc:5f:30:a0:06:fa:16:c4:64:c8:06:c5:a5:40:b3:
cd:6d:dc:29:e2:81:7b:ee:0f:d9:e9:9e:38:64:33:
59:46:52:5b:a2:8b:27:97:cc:5e:b8:98:65:09:fb:
5b:bf:90:7e:b0:a6:8e:8f:0d:85:73:26:80:d8:1c:
1e:02:50:2d:f1:35:85:84:66:3d:37:58:ef:5d:ef:
a0:b7:0d:af:40:45:6e:01:54:70:49:8b:ea:79:87:
05:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:93:47:1E:CA:3B:A5:B9:C6:E9:A4:2D:8E:E9:53:B0:3A:93:2D:6E
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/L5NHHso7pbnG6aQtjulTsDqTLW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:26::/48
Signature Algorithm: sha256WithRSAEncryption
91:ac:bf:17:8d:3f:60:f9:89:42:71:cf:36:0c:ce:fb:e5:33:
36:a1:bf:d3:5c:0a:7d:4b:05:6f:78:0d:91:7a:34:9f:82:f8:
ae:47:0d:4c:cb:ad:5c:1b:f3:d6:a5:f5:49:1c:2d:f8:84:43:
ba:28:68:f2:17:82:3a:83:2e:bd:37:6b:e6:8c:4e:b0:d4:60:
65:9c:3a:4d:c2:c8:34:8e:ee:f4:83:6b:4e:35:d4:08:95:a1:
bd:35:27:89:07:1a:10:58:ec:61:bf:e4:e7:8b:a0:ed:78:49:
c3:2a:62:5c:fe:0f:90:9c:72:5c:01:b2:b4:00:d1:89:88:0d:
af:60:1c:51:26:52:7e:33:71:b2:7b:bb:bb:e5:64:32:94:94:
f2:24:8a:f1:4b:00:51:5f:ad:1e:7d:f1:af:fb:ac:33:9e:57:
d8:eb:e2:18:81:f1:3d:bf:f6:0f:11:d0:b4:17:a4:93:c5:7f:
c2:5e:e3:15:bd:da:61:65:6c:7a:1c:bf:cf:c2:e5:e8:22:f5:
f0:fa:26:37:05:4a:27:85:46:1b:f9:82:09:f1:a9:7a:02:54:
db:64:84:eb:35:eb:35:4a:c6:ca:95:86:d7:35:c2:39:99:77:
ab:33:02:2b:5c:61:d4:f9:ec:a4:b2:2b:45:cf:3c:cb:be:0a:
ea:d0:62:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:55:19 2026 by rpki-client