Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/PV-TWROZtx3LRpN0Na7xBVmMZi8.roa
File: PV-TWROZtx3LRpN0Na7xBVmMZi8.roa (raw, json)
Hash identifier: mdcrCl4gpwZOSq33s94OqAFND7twUc+skrxBWBfytqo=
Subject key identifier: 3D:5F:93:59:13:99:B7:1D:CB:46:93:74:35:AE:F1:05:59:8C:66:2F
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 019F1D93F66043A5EE4C7463AF4B746AA19F
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/PV-TWROZtx3LRpN0Na7xBVmMZi8.roa
Signing time: Wed 01 Jul 2026 12:07:43 +0000
ROA not before: Wed 01 Jul 2026 12:07:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200625
IP address blocks: 2a14:c380:1c0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:93:f6:60:43:a5:ee:4c:74:63:af:4b:74:6a:a1:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Jul 1 12:07:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d5f93591399b71dcb46937435aef105598c662f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c4:7e:31:60:a4:dc:b9:ec:76:51:86:ed:c0:
6f:69:94:cc:e7:62:bc:02:2f:34:8d:aa:9e:f2:c0:
d5:9d:0d:fd:2a:e2:0a:e3:28:60:c5:eb:f3:3d:51:
ec:3c:a2:8f:58:ae:94:09:3d:9c:7b:ca:88:09:5d:
a2:d3:90:09:74:21:18:29:70:58:67:e2:2f:e5:88:
e6:b0:cb:6b:c1:04:5d:04:9b:1e:c0:46:98:9f:23:
a1:7e:0d:96:46:66:59:fe:98:38:96:00:39:94:06:
28:00:aa:d2:da:99:0c:a4:11:6c:81:90:4a:17:a1:
42:cb:52:69:d1:64:bb:df:63:29:a8:cf:a9:e5:3d:
19:7d:67:f7:40:03:ae:c8:97:e5:c8:ce:5a:3c:71:
48:36:6d:11:54:70:d6:e9:f1:0b:55:f2:84:a9:f4:
fa:bc:c5:cc:46:49:11:cd:5e:c5:65:2e:f6:83:dc:
6f:0d:94:4b:24:74:b3:1e:45:c5:3a:55:57:3b:37:
73:69:be:36:e2:63:f9:b0:dc:d1:c9:16:52:d6:e2:
77:e7:c4:b9:19:e8:c2:fa:72:b7:81:1f:95:64:bc:
9c:09:70:90:4d:37:77:e7:ac:42:0e:2c:1f:c7:50:
91:63:dc:45:8f:47:2c:84:7f:6a:d8:8b:56:0c:26:
62:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:5F:93:59:13:99:B7:1D:CB:46:93:74:35:AE:F1:05:59:8C:66:2F
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/PV-TWROZtx3LRpN0Na7xBVmMZi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:1c0::/44
Signature Algorithm: sha256WithRSAEncryption
1e:a3:c3:14:ab:b7:18:b0:64:91:88:66:96:7c:5e:dd:e8:64:
a7:77:75:f7:6f:0b:5b:22:38:6c:58:e3:5f:dd:e9:b8:c0:fe:
96:c9:bf:da:81:a1:d1:e2:23:f6:ce:cd:06:20:57:a3:13:8b:
9f:15:66:0a:e8:d6:3e:b6:d7:b1:3b:7f:09:18:b2:19:e3:f8:
72:36:26:52:f9:74:d0:9e:ba:2e:4a:88:fb:00:84:b8:47:22:
16:3d:cf:dc:2b:95:44:ae:6e:b7:9c:03:9a:39:8d:66:de:19:
ce:77:f1:9b:89:69:5f:a9:97:f4:de:3b:86:73:31:d4:9b:9e:
fc:5d:26:eb:7f:0b:8e:a0:81:26:fb:83:b7:64:3a:c3:3f:e6:
e8:1f:53:dc:90:71:aa:c0:1d:db:ee:81:87:b3:13:ec:47:4d:
f3:74:df:3e:c5:0a:72:12:3c:50:80:f4:54:5a:55:70:8c:7a:
6f:78:20:af:a0:cc:b2:01:a9:f6:63:1a:c2:46:d2:04:9f:3e:
25:09:6a:15:ef:9e:4e:bd:54:c5:a5:83:10:d5:b7:c9:4c:70:
43:17:9a:97:06:7d:93:8f:45:ea:b7:ce:8b:16:0f:3b:3e:8b:
d5:6e:6e:88:b6:b9:ab:43:5b:7a:5f:67:91:b0:29:67:4e:b8:
a1:45:79:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:00 2026 by rpki-client