Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/t1eaiNI3MGR9eJ5TI8u1kso25bQ.roa
File: t1eaiNI3MGR9eJ5TI8u1kso25bQ.roa (raw, json)
Hash identifier: 7N5R6L/R6/oxAMjkdDxGdpmR0OO64zlgHVt8UxKBRAA=
Subject key identifier: B7:57:9A:88:D2:37:30:64:7D:78:9E:53:23:CB:B5:92:CA:36:E5:B4
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 01999033920162CA47CC0B8917943C938EBE
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/t1eaiNI3MGR9eJ5TI8u1kso25bQ.roa
Signing time: Sun 28 Sep 2025 12:02:02 +0000
ROA not before: Sun 28 Sep 2025 12:02:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206540
IP address blocks: 2a14:c380:13::/48 maxlen: 48
2a14:c380:c10::/44 maxlen: 48
2a14:c380:c20::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:90:33:92:01:62:ca:47:cc:0b:89:17:94:3c:93:8e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Sep 28 12:02:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7579a88d23730647d789e5323cbb592ca36e5b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fb:e4:09:0f:54:27:41:28:e4:7c:a4:ca:5c:
85:3f:fb:d3:61:36:a5:90:12:d0:95:8e:b2:ca:db:
e9:ad:2f:d3:91:95:31:11:a0:e2:68:9d:ec:ab:5f:
af:29:4c:f4:10:d0:b4:ae:a8:5c:6b:db:68:8f:49:
b1:12:a0:29:70:90:15:c9:f0:81:97:20:90:35:34:
18:13:3d:a1:e2:f8:b9:d3:24:4c:4b:7a:6e:01:0f:
05:3f:cc:ce:e2:74:2b:53:b3:c1:f1:02:1e:56:5f:
32:8e:d2:94:52:d2:b0:80:49:d4:c1:a9:97:15:aa:
2d:43:95:87:27:20:9f:e9:4c:c0:fe:86:b0:99:2b:
56:33:27:92:3d:ec:91:36:d4:34:20:fd:35:e5:1f:
5d:24:c2:69:ee:84:a7:ab:4c:d1:61:2f:0f:cd:05:
67:56:27:dd:79:7f:8e:a3:06:cb:08:b0:28:cc:2b:
06:0e:07:43:2c:20:17:8b:2b:e3:2a:ba:fa:2c:6b:
dc:5c:21:e9:e0:ad:c9:24:6d:28:3a:72:f4:b0:6d:
2a:7a:0d:e9:ce:3d:f7:c2:a6:0a:74:62:6e:cf:35:
51:9a:15:cd:5f:f4:52:de:23:be:f8:b2:83:c9:69:
4b:7b:d4:49:31:3d:5c:70:7a:a8:d0:bc:26:b5:c9:
90:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:57:9A:88:D2:37:30:64:7D:78:9E:53:23:CB:B5:92:CA:36:E5:B4
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/t1eaiNI3MGR9eJ5TI8u1kso25bQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:13::/48
2a14:c380:c10::-2a14:c380:c2f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
98:74:8e:b6:30:2a:2e:de:c4:4a:99:a2:5c:94:6f:3c:00:f4:
a2:1f:a1:78:de:4d:2d:5a:d6:61:11:74:02:67:09:c3:51:e2:
9b:b3:7e:33:2a:b6:74:b0:0e:25:16:87:d8:fb:42:03:06:29:
e8:1b:ff:b7:ff:cd:44:87:af:30:00:d2:2f:7c:74:3a:2a:e8:
41:9b:c8:d3:06:cb:7e:e6:d0:f2:c7:41:6a:29:e3:9a:35:b0:
43:d6:b3:d9:c6:9c:e1:55:5a:d9:78:52:c2:c4:f1:67:84:19:
90:53:dd:22:0f:7c:5b:e2:92:62:47:a0:ed:52:f7:a0:45:03:
41:57:40:8a:b8:12:36:a3:3e:0d:2c:3f:0d:8d:05:67:d4:54:
e3:4f:22:86:ce:26:1b:26:a6:4a:fe:b4:de:45:84:f1:13:4f:
b6:67:ed:01:44:d5:46:89:e2:c2:db:21:47:0b:a3:58:95:14:
e4:04:83:c9:45:f4:d3:e3:85:20:5c:7e:1b:5f:cb:a1:0d:c9:
6f:de:3b:00:df:ad:c6:80:0f:32:9e:d1:41:cd:7c:10:67:a2:
e2:2e:67:ca:c8:15:c2:4f:98:6e:2c:11:5f:9d:34:d8:ca:af:
41:ea:f6:46:4f:16:b9:4b:3e:97:81:b3:96:22:1c:a6:5e:9d:
dc:bd:08:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:10:40 2025 by rpki-client