Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/9f-6T4Je9DlwJG4h2qSmeq2eNOU.roa
File: 9f-6T4Je9DlwJG4h2qSmeq2eNOU.roa (raw, json)
Hash identifier: tu5B8tyWwpFakSAQNHwgvgAWTDF1qaoZBxA8vNQvz3E=
Subject key identifier: F5:FF:BA:4F:82:5E:F4:39:70:24:6E:21:DA:A4:A6:7A:AD:9E:34:E5
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 01A0A7F37E0D2D8FFB498F59461D3A3E988A
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/9f-6T4Je9DlwJG4h2qSmeq2eNOU.roa
Signing time: Wed 16 Sep 2026 02:02:27 +0000
ROA not before: Wed 16 Sep 2026 02:02:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 395904
IP address blocks: 2a14:c380:e00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a7:f3:7e:0d:2d:8f:fb:49:8f:59:46:1d:3a:3e:98:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Sep 16 02:02:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5ffba4f825ef43970246e21daa4a67aad9e34e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:01:09:be:47:e4:78:b5:80:35:36:58:d3:f6:
4e:1e:51:0e:b8:a1:e8:29:9a:4e:e4:7c:6e:35:ad:
42:6d:22:05:b9:f3:fa:7a:ee:43:e8:32:c7:75:75:
a0:a2:86:7d:74:be:a0:7a:2b:13:0b:a9:9e:bd:f9:
8b:76:5c:e7:60:f2:e9:48:5b:80:ef:c9:46:49:10:
0d:e2:d2:88:4b:d6:20:9b:d9:42:43:34:b1:a1:56:
24:1b:98:31:ce:57:bc:d3:93:ea:2c:b1:37:cf:45:
ef:5b:06:13:9f:68:3f:d2:c9:98:5c:70:38:6e:ae:
ae:0a:58:6d:d1:c5:4d:a9:6d:90:f9:ee:82:5e:4a:
f8:95:23:19:34:4d:6b:d7:16:de:f6:e2:96:d8:5b:
cf:2a:f4:2c:62:63:4f:81:a7:cd:2b:12:d0:01:f2:
54:17:2a:ac:4b:a8:53:09:3b:04:49:0e:f8:29:88:
25:18:61:fb:19:cc:66:6b:6e:df:b1:f0:24:c7:ba:
3b:da:e5:59:ba:0b:1f:09:f5:d6:52:b6:80:f8:a1:
c6:08:4e:9e:c0:91:84:c4:8a:a0:0b:9e:a2:da:99:
4d:56:f7:fc:92:20:23:34:89:a9:83:8d:ae:a2:57:
60:34:8d:46:e5:b5:1a:7f:89:49:a3:9a:85:eb:14:
78:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:FF:BA:4F:82:5E:F4:39:70:24:6E:21:DA:A4:A6:7A:AD:9E:34:E5
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/9f-6T4Je9DlwJG4h2qSmeq2eNOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:e00::/40
Signature Algorithm: sha256WithRSAEncryption
62:06:ba:63:0e:a6:ec:68:b7:87:c9:04:83:ad:06:70:66:c9:
63:33:a9:c3:fb:54:fd:17:fc:91:52:b0:21:2f:0c:9d:25:03:
e7:ea:3f:fa:a8:d4:58:ed:98:05:36:43:aa:fd:c8:5f:2c:9f:
5f:fd:49:09:59:3c:9f:b7:89:d4:a6:80:ae:fe:6c:90:e0:9d:
c6:be:ee:30:0a:0b:28:2a:48:4e:4e:7a:b9:fe:9d:30:fd:47:
4b:1d:d2:c7:25:7a:83:99:25:74:4a:b4:ad:bd:51:41:5f:27:
ce:b1:ea:fe:c4:b3:4c:68:06:f2:29:b4:48:4b:5e:13:02:af:
73:1c:d6:80:38:03:1a:9a:88:41:a7:65:9f:1a:98:8c:bb:65:
9d:12:34:12:8e:4f:e0:da:a4:0b:3b:67:aa:3e:d2:ed:5d:3d:
df:7b:c5:7a:db:5e:1d:3a:4c:c4:40:be:bb:80:2f:64:3b:11:
47:14:23:64:0d:30:da:66:24:83:6e:22:3d:9b:7d:2d:90:f2:
fe:36:76:13:67:57:55:f2:41:65:b5:d8:19:24:60:60:a6:44:
28:75:f8:67:e1:44:c1:71:1d:26:72:69:44:df:67:9f:ed:b5:
5b:9c:25:9c:7d:39:3b:b1:fe:cc:e5:bd:e1:d0:57:3f:f5:7d:
05:51:ce:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 04:48:09 2026 by rpki-client