Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/1-D5QZa7MI_SuGRtE35OJoS6VFYI.roa
File: 1-D5QZa7MI_SuGRtE35OJoS6VFYI.roa (raw, json)
Hash identifier: uokZKw6F5gyiyMeiwSTT+M2E6/9ziKzxdzbps+hQS24=
Subject key identifier: F8:3E:50:65:AE:CC:23:F4:AE:19:1B:44:DF:93:89:A1:2E:95:15:82
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 01A0B959389C40566ED3DD205A678AA61F7A
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/1-D5QZa7MI_SuGRtE35OJoS6VFYI.roa
Signing time: Sat 19 Sep 2026 11:07:07 +0000
ROA not before: Sat 19 Sep 2026 11:07:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401626
IP address blocks: 2a14:c380:1300::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b9:59:38:9c:40:56:6e:d3:dd:20:5a:67:8a:a6:1f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Sep 19 11:07:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f83e5065aecc23f4ae191b44df9389a12e951582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a2:d6:58:87:dd:57:f8:09:34:48:42:67:ba:
52:82:60:19:e7:70:b1:e7:96:3f:f9:43:e8:60:fd:
b3:c0:8a:33:5b:5c:4d:b8:4b:f7:a1:f0:05:5e:59:
7f:3c:fe:7e:e7:88:69:c8:7e:58:06:ae:4c:3a:07:
8e:07:41:07:f1:37:50:05:7c:5e:2d:84:cc:af:68:
c8:72:55:62:14:b1:cc:34:ec:ce:88:5b:9f:92:cf:
5e:f3:f7:20:5d:ed:4f:60:43:80:4c:bd:06:0f:68:
f2:33:7b:ee:18:b8:16:a5:8f:bc:5c:07:4e:8e:d3:
52:7e:ea:f3:57:72:66:d4:05:34:29:a4:68:9c:e1:
f0:0b:51:53:4d:16:2e:60:e5:36:fa:c1:e3:dc:98:
01:7f:66:4b:b3:fa:4b:e8:60:bf:65:e4:8c:b3:10:
c2:36:c5:59:e2:62:b2:1a:aa:e5:47:53:a8:5a:9d:
f0:87:18:c5:81:dc:75:ce:70:0f:ca:6d:b8:b1:34:
50:ef:7f:6e:87:9e:eb:c9:14:4c:c9:48:cb:77:a8:
5f:b8:7e:a3:c8:82:ff:28:fb:f4:36:37:d6:9c:25:
fd:02:d6:d0:dc:79:e9:81:62:3c:0f:a3:1e:69:8d:
c7:56:f0:02:0f:f4:33:20:e8:d9:e8:e7:64:ed:15:
81:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:3E:50:65:AE:CC:23:F4:AE:19:1B:44:DF:93:89:A1:2E:95:15:82
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/1-D5QZa7MI_SuGRtE35OJoS6VFYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:1300::/40
Signature Algorithm: sha256WithRSAEncryption
77:e4:52:01:8a:9c:d5:a6:fb:8d:fa:2b:3e:c6:ce:ff:51:60:
16:97:7d:ba:38:8c:5c:a9:f7:08:35:80:03:c7:98:bf:05:79:
80:f3:4d:d2:f6:c9:d9:94:de:fe:e5:b7:2f:28:e4:f0:94:ae:
1e:ea:d4:0c:8c:bb:d3:47:6c:9d:b1:46:79:46:9a:9c:9a:f4:
61:43:c3:f5:c6:fb:d0:95:d7:9f:32:ab:a8:1a:07:0d:49:e5:
39:9c:64:a3:dd:4f:4b:78:ca:a1:f2:41:5a:6a:86:dd:64:77:
c6:7f:ff:cc:b6:7b:bd:06:ea:9a:11:c6:f4:d3:61:71:07:20:
c8:3f:b3:0a:5e:a2:b6:2a:5a:05:3e:e5:de:c7:d9:1e:b5:17:
d4:f2:d5:32:ae:e7:e8:c6:53:f1:8d:0b:54:d2:97:50:4a:ff:
65:6a:d6:6d:0e:e4:b6:c2:e8:a3:78:c5:fd:22:64:b1:ec:5c:
3e:dd:0a:ed:ee:28:ae:2b:d0:3a:82:4a:df:9e:57:31:1e:72:
6e:90:69:eb:20:e7:ce:02:16:48:53:06:3b:d4:7e:79:34:8c:
18:7b:c4:6d:1c:11:7c:7a:09:e4:22:03:3c:79:a9:82:ad:04:
cb:b9:19:eb:73:ed:7d:4d:e4:8f:30:a8:58:55:c9:1a:19:8e:
6c:af:ad:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 02:56:02 2026 by rpki-client