Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/0Fo8M8HJQ4-AGFaT44-bTy0EjRI.roa
File: 0Fo8M8HJQ4-AGFaT44-bTy0EjRI.roa (raw, json)
Hash identifier: BgLbrlN3CBbRzlSriDKBm+S8ULVN9awLcvGQLOg63dw=
Subject key identifier: D0:5A:3C:33:C1:C9:43:8F:80:18:56:93:E3:8F:9B:4F:2D:04:8D:12
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 01985776058ED367C92504E8BA26345976F4
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/0Fo8M8HJQ4-AGFaT44-bTy0EjRI.roa
Signing time: Tue 29 Jul 2025 18:33:29 +0000
ROA not before: Tue 29 Jul 2025 18:33:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210456
IP address blocks: 2a14:c380:510::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:57:76:05:8e:d3:67:c9:25:04:e8:ba:26:34:59:76:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Jul 29 18:33:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d05a3c33c1c9438f80185693e38f9b4f2d048d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ed:a7:d5:75:27:d1:78:6b:d0:93:3e:dd:e8:
c6:00:1a:08:53:51:b1:d9:6f:66:87:5e:4e:ba:58:
3d:c8:e9:5c:d6:20:52:d9:6a:51:2f:cf:91:56:bb:
63:ce:a0:f4:be:6f:75:68:dd:75:25:66:ac:65:78:
8f:6e:ce:8d:83:14:fd:de:82:90:83:01:b5:4b:e2:
de:98:b3:5e:d4:a7:91:4f:1c:56:2b:bc:08:63:cd:
ae:7e:26:a6:77:c3:7b:6d:b7:8d:c8:df:93:7e:92:
92:05:ec:34:b8:a0:e8:23:80:e8:94:29:44:33:41:
d1:a4:16:31:28:0d:80:96:14:c3:9e:2f:d3:17:dd:
f4:8b:d0:f2:dc:57:9c:a8:2e:0d:2b:23:14:18:68:
ae:43:ad:0c:d2:6e:39:88:d7:5c:94:7d:30:45:ce:
da:da:55:6d:03:b5:36:ce:0e:f7:e8:8f:9e:41:cd:
b3:b2:67:db:e0:db:86:57:31:84:fc:fd:6b:fd:e4:
4f:73:ea:80:a1:ea:cb:d0:4f:da:cb:56:21:47:00:
d9:d7:22:5c:3f:a7:0e:66:77:4c:bc:c3:e0:05:0f:
23:0b:7f:3e:e0:6c:a3:53:00:93:94:15:d0:54:74:
3a:08:f6:72:f9:9f:e0:ae:d1:28:ed:69:ad:b7:2d:
b2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:5A:3C:33:C1:C9:43:8F:80:18:56:93:E3:8F:9B:4F:2D:04:8D:12
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/0Fo8M8HJQ4-AGFaT44-bTy0EjRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:510::/48
Signature Algorithm: sha256WithRSAEncryption
4d:52:d3:58:5c:b1:1b:59:d0:dc:f9:53:a6:79:c0:06:51:10:
c3:85:05:16:80:d7:bb:2a:30:d6:05:23:a2:04:ba:da:e3:02:
da:ac:81:19:7c:20:c6:f2:56:54:d4:30:92:a3:4e:b4:db:8f:
56:99:3e:85:30:98:37:51:0a:06:b7:7b:bf:4a:c8:0b:66:df:
06:00:7b:da:50:58:7d:4d:84:a9:90:da:ad:39:4e:f8:48:e3:
64:d0:a9:62:b8:e8:05:60:42:a2:2d:8b:1a:d2:8f:e2:7a:a3:
ec:fc:77:83:e9:53:40:c7:f7:db:dd:a8:38:3d:b7:d9:a7:83:
c9:98:54:52:ab:18:70:2d:b6:4a:ed:67:c0:8c:fb:a4:a1:08:
28:d2:df:05:73:02:a5:be:28:b6:05:37:8b:c3:09:f5:7d:56:
1c:1d:90:b4:e4:eb:6f:62:c8:25:47:78:85:c7:51:dc:7b:c6:
e3:ed:52:79:ce:71:d5:fd:84:fd:8a:0b:65:cd:db:4c:a2:dc:
d0:02:22:5c:65:82:bf:b6:c2:20:d4:1d:aa:be:2f:cd:0b:78:
20:2e:36:b1:13:d8:0a:86:d7:57:3b:bd:1a:03:41:2b:30:72:
4d:b0:1d:82:09:6d:0c:91:1c:ac:e4:48:54:f1:90:b8:b8:14:
02:3f:51:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:12:33 2025 by rpki-client