Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/QBaTvaEU8D0QfVRRcMgfWwJBULs.roa
File: QBaTvaEU8D0QfVRRcMgfWwJBULs.roa (raw, json)
Hash identifier: J8jck+uYwgDsesQT/qdYq1kUVIMh4jejuR5tuzZQfUg=
Subject key identifier: 40:16:93:BD:A1:14:F0:3D:10:7D:54:51:70:C8:1F:5B:02:41:50:BB
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 01A1D495DC955DBFD7B342F8A01F5E36AF5C
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/QBaTvaEU8D0QfVRRcMgfWwJBULs.roa
Signing time: Fri 13 Nov 2026 11:05:53 +0000
ROA not before: Fri 13 Nov 2026 11:05:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151338
IP address blocks: 2a14:c380:1600::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 14:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d4:95:dc:95:5d:bf:d7:b3:42:f8:a0:1f:5e:36:af:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Nov 13 11:05:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=401693bda114f03d107d545170c81f5b024150bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1d:61:12:ff:85:90:aa:8a:4f:a9:7a:ac:60:
39:d2:3b:c4:17:d1:8f:35:cd:c4:7e:3f:d2:d0:f7:
a2:c8:a5:49:64:da:1a:47:b0:8a:dc:d0:6a:0b:24:
d6:d4:ef:e9:09:92:31:42:8f:04:f2:17:00:1a:d9:
6f:a1:19:19:bf:af:a5:4c:9e:5b:2d:2d:90:bb:1f:
69:d6:9e:fa:50:be:35:d2:d8:18:15:f1:42:62:d7:
74:1f:49:be:70:b7:20:5b:c6:25:19:79:b2:ed:13:
85:9d:b9:3a:e7:9a:f6:9f:24:b9:8f:27:1f:0a:ff:
80:ae:55:4e:e6:3b:32:24:6b:49:f4:d6:cb:c2:f8:
ea:0d:bf:a9:45:09:05:b4:50:61:71:e0:ab:04:6c:
e7:0e:30:5d:00:76:2f:77:02:2f:ac:9c:e9:c6:7d:
66:c5:88:89:8c:ff:47:64:3d:d1:3a:fb:8b:1a:91:
43:2e:fd:9f:24:0e:4a:cf:7a:a8:37:cd:76:7f:ea:
3e:6a:e0:3c:8e:66:55:ff:33:be:b0:8d:bb:2b:73:
0f:ad:ef:aa:86:f8:19:45:d0:d2:d2:46:e3:c6:e5:
e1:38:cc:26:f1:e1:f6:51:a6:30:8f:87:ef:ea:ed:
7a:c6:c0:e3:ed:0a:8c:d9:f5:e9:c9:aa:36:7d:d1:
72:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:16:93:BD:A1:14:F0:3D:10:7D:54:51:70:C8:1F:5B:02:41:50:BB
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/QBaTvaEU8D0QfVRRcMgfWwJBULs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:1600::/40
Signature Algorithm: sha256WithRSAEncryption
45:b5:e1:cd:98:fc:1a:fe:32:63:9b:af:a0:4e:53:25:05:3d:
ca:87:2a:88:bc:f3:b8:d8:c1:5d:72:56:25:f9:27:d4:e9:28:
77:19:50:88:85:20:8f:da:ad:75:3a:b2:e2:00:e1:10:94:ba:
71:b4:d0:27:7a:92:56:96:df:29:ff:c2:ce:af:e1:ef:53:a5:
a4:45:53:53:a8:82:02:91:db:22:8c:1c:f8:05:79:08:e1:28:
4f:63:e1:3b:25:9f:27:c6:2f:d2:43:0c:1e:e6:ed:b9:8a:9d:
65:b9:87:15:ed:0e:29:08:7a:16:f2:28:57:47:2b:b5:9c:bc:
da:2c:b8:a8:94:89:19:c6:4b:cb:e8:0e:06:d8:bc:a5:25:19:
51:c2:da:99:58:27:a2:a0:61:ff:56:6a:9d:69:55:dc:9a:e9:
7a:2b:e6:c3:a2:42:a8:cf:5a:13:41:a2:7d:a7:9c:75:c1:b1:
f4:ff:af:da:44:49:d1:c0:58:ad:37:4e:ec:0c:50:b5:76:c2:
53:e7:ea:26:dd:6c:85:b0:79:18:ce:8b:cb:2c:51:06:d9:31:
8a:a2:0f:62:ec:f4:5e:af:ee:7b:1f:8a:d5:cd:6e:5e:12:a9:
e5:d0:29:26:1c:6e:73:91:20:cc:85:e6:49:bc:cb:43:79:15:
e3:93:6e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 23:24:28 2026 by rpki-client