Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/OgCwA_ZC4EUVgVkl3qBNjdOA6bI.roa
File: OgCwA_ZC4EUVgVkl3qBNjdOA6bI.roa (raw, json)
Hash identifier: AWMVgHpEIUZ092SHb88m+GkXU+Q3k60cXNisUwuiVKY=
Subject key identifier: 3A:00:B0:03:F6:42:E0:45:15:81:59:25:DE:A0:4D:8D:D3:80:E9:B2
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 0199F8464609A0C0EE5D3D6EFDE67E6B78E7
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/OgCwA_ZC4EUVgVkl3qBNjdOA6bI.roa
Signing time: Sat 18 Oct 2025 17:02:58 +0000
ROA not before: Sat 18 Oct 2025 17:02:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211507
IP address blocks: 2a14:c380:50::/44 maxlen: 44
2a14:c380:60::/44 maxlen: 44
2a14:c380:70::/44 maxlen: 44
2a14:c380:80::/44 maxlen: 44
2a14:c380:130::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f8:46:46:09:a0:c0:ee:5d:3d:6e:fd:e6:7e:6b:78:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Oct 18 17:02:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a00b003f642e04515815925dea04d8dd380e9b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:80:13:84:2e:37:e3:b1:b5:75:cd:69:04:c3:
9e:1d:bc:f3:de:b8:d8:30:cb:98:df:33:c1:be:d9:
52:25:95:e6:c1:db:3c:30:f2:a3:ee:7d:01:b4:69:
1d:0e:4b:65:c7:bb:6f:2f:9f:5e:10:68:4b:03:78:
1b:1d:1e:20:16:d8:f3:c3:81:2a:ad:86:9d:9a:1b:
e3:27:c4:ef:a5:c7:57:b7:46:0f:e0:cc:59:40:c2:
7d:d5:af:99:d2:1c:96:20:57:b3:67:ec:ed:0c:41:
90:fd:68:c0:c7:92:ac:30:26:c6:bc:7f:ec:12:79:
f6:aa:ae:ee:c1:fa:37:6d:91:05:c7:a8:09:ab:71:
ce:4b:53:61:d1:f2:b9:7e:ca:34:47:33:c7:b3:41:
75:15:0b:f0:ea:b0:a4:00:8b:16:ae:fe:10:56:3a:
2c:d9:9d:90:b2:ca:e6:af:af:8f:93:37:59:24:52:
2a:f5:5f:34:52:dd:6a:86:ad:3f:98:9b:23:1e:4c:
ee:34:c4:c2:d0:a8:1a:4b:3f:74:33:0f:3a:06:df:
52:02:46:0b:91:52:f6:40:90:83:b1:90:c6:fb:b5:
83:3d:c7:a9:29:9a:ba:46:84:98:d5:42:0b:80:f2:
bb:3c:42:42:52:1d:85:d3:16:25:d6:80:77:49:77:
dd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:00:B0:03:F6:42:E0:45:15:81:59:25:DE:A0:4D:8D:D3:80:E9:B2
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/OgCwA_ZC4EUVgVkl3qBNjdOA6bI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:50::-2a14:c380:8f:ffff:ffff:ffff:ffff:ffff
2a14:c380:130::/44
Signature Algorithm: sha256WithRSAEncryption
27:45:4f:17:36:d4:44:a5:6a:d0:aa:5c:53:83:c4:c3:6c:7c:
fb:b4:29:1c:0e:75:b6:d2:ce:bf:f3:90:fb:f5:52:6e:24:92:
06:17:b5:0c:99:98:33:bd:0a:f9:ef:a9:67:a1:37:61:e9:f9:
7f:c5:89:fc:b2:18:a0:f1:b7:60:4b:05:88:cd:e1:8d:5f:30:
f1:7c:ab:b3:f1:10:58:3c:d6:2d:44:c7:b3:b8:95:df:bf:e4:
6c:02:4a:b7:11:72:91:ee:0f:25:af:1c:5d:70:c8:c7:ff:0f:
1d:16:69:ae:86:29:6a:5e:5e:f7:46:a9:33:27:e1:55:9a:1d:
eb:f2:29:91:a0:40:4c:f4:16:ee:84:0d:30:36:8e:15:ca:86:
80:e5:46:41:37:c2:68:f9:58:fa:88:21:b7:a7:76:8c:39:4a:
eb:2a:16:3c:ed:9f:a9:f1:24:31:34:e8:32:ea:09:60:86:7f:
df:8b:53:b1:3f:90:fe:30:32:ee:80:10:4b:82:e4:c7:b7:b4:
59:55:48:d8:64:3b:c7:79:44:8a:32:35:94:3a:ae:e5:22:dd:
dd:2a:72:76:17:19:11:09:0f:7d:53:70:cd:e3:dd:45:21:0a:
44:95:1b:a6:24:9e:39:e6:75:33:87:72:e3:1d:2e:ff:85:52:
01:a5:2f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:10:55 2025 by rpki-client