Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/4fuvKZs773BSxxQY3oKujNQTc3A.roa
File: 4fuvKZs773BSxxQY3oKujNQTc3A.roa (raw, json)
Hash identifier: o2jKU9DJrFRffTixN7l0I1Uw6tv802JdfM0rhR8CFr8=
Subject key identifier: E1:FB:AF:29:9B:3B:EF:70:52:C7:14:18:DE:82:AE:8C:D4:13:73:70
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 01A09B51D94131828AAEDADCD7DD5EF52C79
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/4fuvKZs773BSxxQY3oKujNQTc3A.roa
Signing time: Sun 13 Sep 2026 15:10:27 +0000
ROA not before: Sun 13 Sep 2026 15:10:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203861
IP address blocks: 2a14:c380:1100::/40 maxlen: 40
2a14:c380:1200::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9b:51:d9:41:31:82:8a:ae:da:dc:d7:dd:5e:f5:2c:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Sep 13 15:10:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e1fbaf299b3bef7052c71418de82ae8cd4137370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ae:fc:e3:21:09:d1:09:20:cf:89:a7:22:4e:
c6:e1:08:f7:2f:b3:23:2c:47:91:30:8f:f9:5c:50:
72:e8:27:59:23:35:f7:45:ff:c3:f2:bd:11:d7:2c:
7c:0e:75:48:37:04:58:42:3c:b1:b9:00:e3:6f:8a:
b0:1d:89:f3:a7:9e:0d:43:80:af:ec:b5:d7:b6:4e:
be:54:6e:83:59:3b:6e:e1:35:ea:ba:fb:b3:7b:ed:
c8:07:74:a8:ec:f5:f7:68:c6:c0:54:80:b3:e3:fc:
f8:b1:eb:29:3b:08:b8:5d:07:e9:f4:be:c4:01:b5:
69:ae:0a:cd:de:cb:66:de:4d:d5:49:2e:c8:aa:a5:
1c:10:4e:61:48:9d:d6:9d:8e:a3:e6:f3:6f:33:68:
e7:81:48:d1:6b:f5:ad:01:35:0a:5a:45:42:dc:ff:
9a:37:45:61:06:5d:7a:fd:79:f1:2a:1d:e5:d7:b3:
2b:d8:c3:c0:99:2a:72:5b:c4:90:7c:13:37:78:c6:
17:cb:9e:76:73:ec:2a:ae:5d:86:4b:6d:3a:bd:b7:
03:d9:ac:bb:20:6e:93:00:fd:52:f8:4d:4b:2b:fd:
44:a1:bd:c5:e5:96:79:d4:43:50:fa:f7:7f:de:c7:
7e:3b:0f:2b:88:3f:12:52:96:64:f2:97:d9:4f:0c:
ee:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:FB:AF:29:9B:3B:EF:70:52:C7:14:18:DE:82:AE:8C:D4:13:73:70
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/4fuvKZs773BSxxQY3oKujNQTc3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:1100::-2a14:c380:12ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
8a:e2:4c:63:51:78:e5:69:c4:a0:d6:33:2b:d2:55:03:28:12:
09:61:80:d1:f3:fa:38:99:29:6e:21:7f:cf:f8:01:96:93:77:
17:ba:41:53:39:f3:0b:0b:1c:dd:97:d4:d6:1f:41:67:42:d3:
16:c1:e7:83:36:d0:c4:e6:c3:86:ea:09:b5:83:a6:2e:72:3f:
96:e4:86:bf:3b:82:74:98:9e:fb:e8:91:56:8d:55:e9:fa:e4:
da:6e:0c:df:7c:72:52:c3:46:52:6f:b5:d2:f7:76:cf:e2:a0:
b9:aa:9c:0b:10:b7:74:0a:da:13:e9:50:6d:a9:47:7e:3c:39:
ad:7b:0c:72:00:f8:d1:2c:44:4f:65:07:35:9b:eb:19:45:50:
35:f4:f9:9e:fc:bd:cd:18:46:3a:a7:d0:bc:76:9c:1c:2c:8b:
12:56:55:0e:8e:61:33:f3:00:ab:ae:6f:aa:9a:08:61:73:14:
81:a5:fd:0f:4f:a0:c7:ca:3f:b5:21:18:34:15:ea:2c:af:f2:
10:cc:68:a1:aa:35:30:da:76:2b:c0:cb:7a:47:65:e8:ce:ef:
61:b5:ae:27:36:4a:22:69:8f:f3:c0:23:b1:ad:20:45:f7:a7:
b1:93:84:d5:c7:ae:85:18:1b:46:2a:28:e2:d6:48:6c:2b:3f:
0b:fa:63:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:01:19 2026 by rpki-client