Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/QmYaI0egdHO86hfYR0fFsf0ObGo.roa
File: QmYaI0egdHO86hfYR0fFsf0ObGo.roa (raw, json)
Hash identifier: Y/FeJTV1SXitBtqmd7r3e3PH7LfHSKSQpaCkn/vkZyQ=
Subject key identifier: 42:66:1A:23:47:A0:74:73:BC:EA:17:D8:47:47:C5:B1:FD:0E:6C:6A
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 019D9D66EB9E314DC05B7ACD53DB4DC0C4D7
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/QmYaI0egdHO86hfYR0fFsf0ObGo.roa
Signing time: Fri 17 Apr 2026 21:44:20 +0000
ROA not before: Fri 17 Apr 2026 21:44:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200104
IP address blocks: 2a14:c380:500::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:66:eb:9e:31:4d:c0:5b:7a:cd:53:db:4d:c0:c4:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Apr 17 21:44:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=42661a2347a07473bcea17d84747c5b1fd0e6c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5f:22:b4:d7:27:11:00:ad:40:3a:f1:3f:e9:
e6:07:1a:9a:58:c7:13:5f:57:9f:3c:1b:74:6c:07:
7e:5e:64:ac:73:3e:ba:46:7e:f7:0c:bd:ca:4d:bb:
58:7f:de:a0:3f:45:9f:91:56:09:32:71:ef:4e:ab:
0f:1c:f1:f8:20:7c:e8:ea:ab:98:06:6e:66:4b:f8:
7a:5e:08:f3:ea:a4:d6:f6:a0:ed:29:83:93:8f:7b:
90:f3:74:7e:11:31:ac:a5:c9:3b:d0:3b:3a:46:cf:
f2:f1:82:45:e3:ce:c9:5c:64:fc:f1:e4:9f:f7:86:
61:ed:70:ec:f7:4f:21:d6:2e:b3:36:b2:e3:01:77:
cf:f5:1f:30:14:be:88:a7:58:5d:c3:77:74:ea:1f:
a6:42:b5:18:ef:7a:3f:f6:4a:9f:ba:78:04:c0:17:
25:fa:24:82:24:90:9e:0e:be:73:ee:69:91:86:cd:
35:c8:f4:d6:24:9f:c9:f5:3b:b1:23:2e:6f:cf:d8:
74:6d:be:c1:6d:39:25:c4:30:2c:a3:94:1a:cf:06:
ce:8a:b7:df:eb:9c:ac:0e:2b:82:78:6f:3f:41:84:
82:07:54:80:6f:99:30:05:2d:93:d6:84:1c:84:bb:
71:f7:79:0f:9a:28:8e:a4:91:dc:bd:6b:8d:0c:75:
56:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:66:1A:23:47:A0:74:73:BC:EA:17:D8:47:47:C5:B1:FD:0E:6C:6A
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/QmYaI0egdHO86hfYR0fFsf0ObGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:500::/40
Signature Algorithm: sha256WithRSAEncryption
30:86:36:cc:3d:00:bd:27:36:e6:a7:25:e8:fb:af:03:79:fe:
08:ba:ba:12:8f:b1:e8:5d:1f:51:9d:e2:7d:76:82:eb:04:42:
5e:94:7c:e9:46:13:fc:46:11:3c:05:17:25:b5:e0:2d:58:ef:
01:6f:ae:a7:52:3b:ce:c2:a0:a4:4a:fc:f5:3e:4b:aa:26:2d:
00:14:b4:6c:b4:87:3e:f0:bc:d4:2e:72:fe:c7:b2:59:cf:ba:
53:ca:f3:56:09:49:34:d8:63:b5:47:7b:0e:58:07:2a:36:23:
1e:17:8a:fb:8f:40:7b:97:50:ce:81:c1:1c:05:bc:e0:70:13:
fe:1c:24:37:be:3f:0d:e1:23:37:28:13:81:54:8a:db:1c:66:
fd:66:7f:16:01:0c:45:c7:60:bb:c3:80:0f:97:36:76:f3:4e:
6c:3c:9e:f3:a5:b1:79:ba:d6:3d:0f:aa:90:ec:98:90:8a:a3:
3e:50:98:c1:5f:90:00:36:7b:e9:9e:b0:14:99:e3:1b:53:8c:
7c:63:1a:df:e4:59:7e:11:a2:91:85:28:5f:45:21:5e:54:c5:
96:e3:a3:3c:8c:e7:db:d2:8f:fd:2e:fb:c0:50:1f:a9:3a:03:
bc:21:4a:6d:1c:66:6c:b2:cf:85:c0:a5:c4:48:2b:91:50:bd:
b1:ea:49:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:53:52 2026 by rpki-client