Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/AbKyTgtGmaLw1zJPWNlEQit5-KY.roa
File: AbKyTgtGmaLw1zJPWNlEQit5-KY.roa (raw, json)
Hash identifier: 7k97AG/7rhvF7k8ebiJ7NXrMUO4WSZJyrqK3CzprLdE=
Subject key identifier: 01:B2:B2:4E:0B:46:99:A2:F0:D7:32:4F:58:D9:44:42:2B:79:F8:A6
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 019DA4468EB56B5D35AF648BD3490250F43B
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/AbKyTgtGmaLw1zJPWNlEQit5-KY.roa
Signing time: Sun 19 Apr 2026 05:46:20 +0000
ROA not before: Sun 19 Apr 2026 05:46:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21641
IP address blocks: 2a14:c380:600::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:46:8e:b5:6b:5d:35:af:64:8b:d3:49:02:50:f4:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Apr 19 05:46:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=01b2b24e0b4699a2f0d7324f58d944422b79f8a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a7:45:2f:70:b5:a4:e1:0a:0e:4b:d9:48:b5:
89:f3:76:a6:1f:73:47:e7:9e:9f:13:e8:ae:2a:e6:
2d:46:1f:7b:4e:2c:ed:d8:57:33:85:1d:41:9f:3c:
89:60:ef:02:f0:b1:3a:54:c5:17:c9:5d:cb:35:92:
71:77:39:05:40:5c:92:c3:33:e6:55:09:9f:9f:a4:
2d:31:16:46:6f:e5:54:9c:48:83:ce:fe:1a:87:6f:
db:df:f0:12:b6:22:2c:7a:b2:d1:91:66:f2:47:cd:
7f:55:79:75:5d:f7:1c:96:ea:fb:dc:63:2a:32:03:
96:03:be:9c:4a:94:27:fb:89:56:3d:21:c9:3f:d8:
97:b6:44:de:6c:2c:bb:ed:2c:99:ee:da:d3:b3:38:
58:36:f7:35:cd:45:47:20:90:b1:06:cc:28:38:f9:
f6:44:14:4b:ac:7b:e9:38:61:62:da:15:22:fb:72:
39:d0:a2:e1:01:ab:97:3f:1c:fc:fc:29:ff:fa:93:
95:eb:0e:03:13:58:dc:48:7f:dd:88:6a:d9:c8:ad:
c2:b0:fc:21:12:ec:2b:f0:f1:fd:f7:f7:9b:25:6a:
06:43:d7:1c:15:27:05:ab:ac:01:6a:e3:a1:b7:09:
d2:88:62:51:c5:b0:34:74:bb:1b:90:56:03:60:e4:
ef:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B2:B2:4E:0B:46:99:A2:F0:D7:32:4F:58:D9:44:42:2B:79:F8:A6
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/AbKyTgtGmaLw1zJPWNlEQit5-KY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:600::/40
Signature Algorithm: sha256WithRSAEncryption
75:85:32:42:e6:6c:52:3b:51:44:79:1e:8f:1d:57:12:84:7d:
43:fe:94:9a:81:8e:9f:de:09:92:f3:f3:bc:79:97:8d:11:9f:
4f:30:13:b8:fc:75:54:ac:eb:d9:ac:9e:a8:9e:43:f4:8d:06:
3c:10:ed:77:e7:c7:7a:3f:dd:cf:65:bc:99:99:69:c2:39:ef:
69:61:e3:e2:ba:10:5c:60:67:93:6f:c4:82:92:b8:bf:50:5f:
5f:22:52:d9:b2:f0:1d:ef:e0:d8:44:3c:60:a3:03:8b:ee:ab:
f8:a6:12:7b:cb:d3:3f:6d:75:0b:8d:ef:22:0c:81:ee:2b:0c:
16:d2:6e:9e:05:24:38:27:19:c0:77:bc:75:e9:45:b6:70:47:
60:2f:ed:e6:a1:52:be:61:57:6b:e1:36:43:ba:a9:eb:6b:30:
46:4e:94:46:78:12:e2:27:f8:f8:6a:f8:53:ae:0d:bd:45:62:
70:c1:24:2c:d8:6a:2d:2e:e2:24:b7:a4:a1:49:0c:c6:67:83:
6a:d5:fb:56:1d:ed:cc:d4:eb:43:d5:1a:06:fb:e3:ab:5b:41:
43:c4:94:d3:8b:d5:2d:7e:46:49:73:11:34:9c:f5:28:f6:f5:
3a:71:27:a2:0a:a5:dc:19:85:d8:90:42:ef:09:69:e1:31:75:
26:79:45:2c
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZ2kRo61a101r2SL00kCUPQ7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YjNkZTVmOWFkYjUwZmU0MWY2ZGM3OGZmZDBhMmM5MDg2
ZDI1MTIwHhcNMjYwNDE5MDU0NjIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMWIyYjI0ZTBiNDY5OWEyZjBkNzMyNGY1OGQ5NDQ0MjJiNzlmOGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqdFL3C1pOEKDkvZSLWJ83amH3NH
556fE+iuKuYtRh97Tizt2FczhR1BnzyJYO8C8LE6VMUXyV3LNZJxdzkFQFySwzPm
VQmfn6QtMRZGb+VUnEiDzv4ah2/b3/AStiIserLRkWbyR81/VXl1Xfcclur73GMq
MgOWA76cSpQn+4lWPSHJP9iXtkTebCy77SyZ7trTszhYNvc1zUVHIJCxBswoOPn2
RBRLrHvpOGFi2hUi+3I50KLhAauXPxz8/Cn/+pOV6w4DE1jcSH/diGrZyK3CsPwh
Euwr8PH99/ebJWoGQ9ccFScFq6wBauOhtwnSiGJRxbA0dLsbkFYDYOTv3QIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFAGysk4LRpmi8NcyT1jZREIrefimMB8GA1UdIwQY
MBaAFFiz3l+a21D+QfbceP/QoskIbSUSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUt
NTMyMWQ2OWQ5NzlkLzEvQWJLeVRndEdtYUx3MXpKUFdObEVRaXQ1LUtZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUtNTMyMWQ2OWQ5Nzlk
LzEvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhTDgAYw
DQYJKoZIhvcNAQELBQADggEBAHWFMkLmbFI7UUR5Ho8dVxKEfUP+lJqBjp/eCZLz
87x5l40Rn08wE7j8dVSs69msnqieQ/SNBjwQ7Xfnx3o/3c9lvJmZacI572lh4+K6
EFxgZ5NvxIKSuL9QX18iUtmy8B3v4NhEPGCjA4vuq/imEnvL0z9tdQuN7yIMge4r
DBbSbp4FJDgnGcB3vHXpRbZwR2Av7eahUr5hV2vhNkO6qetrMEZOlEZ4EuIn+Phq
+FOuDb1FYnDBJCzYai0u4iS3pKFJDMZng2rV+1Yd7czU60PVGgb746tbQUPElNOL
1S1+RklzETSc9Sj29TpxJ6IKpdwZhdiQQu8JaeExdSZ5RSw=
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:34:54 2026 by rpki-client