Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/BdAgiCVo8An1DN2dGrqDx_AHHsc.roa
File: BdAgiCVo8An1DN2dGrqDx_AHHsc.roa (raw, json)
Hash identifier: mkHdmRPHPMZPHQookCecPrOCnN/zcTjsv3wXHQHDvKc=
Subject key identifier: 05:D0:20:88:25:68:F0:09:F5:0C:DD:9D:1A:BA:83:C7:F0:07:1E:C7
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 019EA73D904F58C4B765CA46B4D30349F702
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/BdAgiCVo8An1DN2dGrqDx_AHHsc.roa
Signing time: Mon 08 Jun 2026 12:38:10 +0000
ROA not before: Mon 08 Jun 2026 12:38:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202297
IP address blocks: 2a14:c380:1a0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a7:3d:90:4f:58:c4:b7:65:ca:46:b4:d3:03:49:f7:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Jun 8 12:38:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=05d020882568f009f50cdd9d1aba83c7f0071ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:31:56:0e:5d:e9:10:27:a1:f4:68:de:05:3a:
fe:3e:c1:55:82:ba:b5:45:d4:3a:0d:30:76:0c:23:
8d:51:2a:d2:30:32:38:cf:bc:2f:10:57:80:37:81:
bb:9d:bd:0a:43:eb:86:69:5d:a0:5f:f0:3f:5d:58:
81:88:12:44:1d:b6:43:32:74:e3:f6:08:6e:78:10:
7a:2c:6f:5c:ac:0d:80:02:f1:ba:ee:eb:48:35:7e:
d4:22:ce:67:8e:f5:e8:be:3a:1f:52:20:e5:9c:82:
72:76:10:45:49:e7:af:50:f4:a4:91:a9:7a:c4:6d:
05:70:ee:c2:8e:7d:80:1b:d1:1e:0a:2f:72:28:10:
60:25:8a:2b:44:6d:a7:89:ad:47:70:de:22:a0:57:
b7:b2:aa:f1:3d:99:9f:ec:72:de:d5:5a:b8:06:a0:
c8:6f:7c:5a:7b:43:f3:2f:48:ab:a4:e5:cb:1b:eb:
4b:3a:f0:a3:ac:cc:a5:cb:9d:4f:2b:03:a2:40:4f:
2e:c3:53:c1:3f:ed:fc:bd:f8:c6:12:82:b0:09:61:
b0:7f:d5:20:5b:8b:b5:d3:96:6b:b7:6c:50:83:6f:
fc:f9:d6:ff:01:e8:73:5a:df:99:0a:47:a7:58:42:
ff:fe:c8:67:d5:8f:2f:51:b4:9e:f2:40:a4:6d:22:
7f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D0:20:88:25:68:F0:09:F5:0C:DD:9D:1A:BA:83:C7:F0:07:1E:C7
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/BdAgiCVo8An1DN2dGrqDx_AHHsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:1a0::/44
Signature Algorithm: sha256WithRSAEncryption
12:44:1d:c0:97:97:e5:49:fc:56:60:4b:08:03:71:c4:94:46:
37:50:de:2e:77:05:4d:ad:05:ea:38:2c:d9:9e:d0:00:46:7c:
2a:3d:4c:51:56:aa:ec:a2:0d:af:1c:80:51:7d:2a:c4:5b:77:
6d:4b:49:56:26:f1:76:41:7f:e0:27:14:59:f3:19:e9:43:c6:
27:38:76:2c:69:27:15:24:68:5f:f4:89:50:0f:6d:f5:a2:98:
09:d1:ec:dc:47:14:56:95:30:0f:4b:c7:24:6f:4e:41:db:12:
79:14:22:36:18:9d:21:c7:aa:0c:0b:db:f9:8d:fe:7a:8f:d8:
b6:d2:62:3a:ae:a6:77:0f:74:c4:95:7d:8f:d4:c3:23:87:32:
bd:4b:bf:40:17:db:76:c2:24:79:9a:7d:e1:57:fe:5f:ee:0e:
7b:5c:1f:b7:f4:78:af:21:0f:8f:40:90:b1:46:fc:68:f8:f2:
9c:a1:20:4e:95:fa:a8:93:18:65:86:14:0d:c7:19:60:a0:c5:
44:99:9c:ae:bc:28:16:d3:79:63:7d:2c:88:f1:22:11:5c:87:
b5:99:29:43:f9:03:02:82:64:0c:45:d2:aa:3f:b7:94:46:44:
f0:f7:47:16:7a:a6:72:e5:4c:55:f6:b1:74:3b:b4:e6:12:f6:
93:c7:b1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:28:34 2026 by rpki-client