Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/F02oe27zp5u26b7nCp1j6oWacdA.roa
File: F02oe27zp5u26b7nCp1j6oWacdA.roa (raw, json)
Hash identifier: C0OqYBz5T2VqDyJ0H6UEkUMZnlqoRpkZzElUt7fiURQ=
Subject key identifier: 17:4D:A8:7B:6E:F3:A7:9B:B6:E9:BE:E7:0A:9D:63:EA:85:9A:71:D0
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 019852787F1B92E4330A6CEDB57AAE032AC2
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/F02oe27zp5u26b7nCp1j6oWacdA.roa
Signing time: Mon 28 Jul 2025 19:18:05 +0000
ROA not before: Mon 28 Jul 2025 19:18:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 55201
IP address blocks: 2a14:c380:800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:78:7f:1b:92:e4:33:0a:6c:ed:b5:7a:ae:03:2a:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Jul 28 19:18:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=174da87b6ef3a79bb6e9bee70a9d63ea859a71d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:20:f3:14:70:10:a1:8f:88:01:e0:6e:ea:5f:
00:e1:25:b6:78:e0:25:21:29:8d:35:fb:5f:2a:3e:
de:fa:b1:43:7e:22:6d:17:78:df:63:a8:85:46:1d:
bc:7f:22:d8:1e:f6:4e:2b:95:3f:65:01:d3:a4:5c:
5d:fe:90:b3:b8:11:04:0a:d5:7e:3c:a6:00:d6:4e:
8f:2e:94:86:17:ea:6e:07:8d:b4:76:11:50:00:74:
c1:90:35:78:a2:8e:ec:5b:14:d0:42:a0:0f:c9:0b:
50:ce:11:b4:0e:c7:0c:63:f8:1f:b3:8a:f4:da:1c:
8b:d7:78:12:c9:b8:d0:44:11:6f:d5:01:bb:4a:6c:
3f:b6:39:e0:35:f1:b6:4f:fd:e0:2b:86:01:86:9d:
35:a2:3c:1c:3d:ea:e2:ca:fd:07:ec:17:94:d9:5e:
46:0e:54:8e:be:9a:50:13:70:01:59:a2:af:f6:7c:
bd:93:07:4f:9c:69:d9:3b:1c:33:fd:4c:2c:ec:f2:
8e:58:52:7b:fb:6a:1f:b4:bb:de:be:f6:04:5f:25:
fe:67:6b:ba:b9:f8:31:35:23:12:82:c0:af:6c:97:
a8:8d:e0:d2:29:6d:4a:9d:b3:8f:72:7f:97:eb:c2:
82:2d:ae:46:a0:97:f2:15:07:8e:d7:42:9b:77:11:
b3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:4D:A8:7B:6E:F3:A7:9B:B6:E9:BE:E7:0A:9D:63:EA:85:9A:71:D0
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/F02oe27zp5u26b7nCp1j6oWacdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:800::/40
Signature Algorithm: sha256WithRSAEncryption
26:53:18:95:30:85:cd:0d:d2:bf:e4:8e:b7:7d:8f:e0:7a:81:
42:d2:a8:45:8a:37:79:02:fd:5a:c1:49:43:89:9d:08:c1:54:
d2:bb:82:d6:b7:b8:d3:96:4e:6d:38:1f:77:93:c1:9f:26:75:
53:da:3c:c8:54:78:10:e0:e5:f3:76:54:0e:a0:bb:8e:92:23:
ad:bf:24:ad:fe:9e:c6:74:b2:b1:00:b3:4c:dc:0a:20:fc:dc:
4f:03:5a:1b:ef:47:cf:f4:8c:8c:9e:97:2f:2d:ee:84:46:07:
31:0f:3e:69:a2:6d:64:82:c9:9b:52:2f:ef:f3:6b:78:bb:aa:
48:89:3b:b1:ee:a3:a6:06:00:9d:ec:4e:dd:c7:19:ef:65:eb:
1c:54:a5:83:8c:c9:09:82:13:40:05:c1:35:ca:9a:46:9e:9a:
98:44:b8:0e:07:47:26:e5:fe:fe:ff:c7:2d:58:82:43:82:35:
4b:01:1a:4f:81:9c:bb:48:85:9b:eb:17:48:21:d0:38:d5:cd:
66:4e:c7:15:14:a8:8e:50:d3:60:91:de:81:84:df:95:0f:df:
04:b4:d5:a1:b3:07:b9:d6:23:ed:11:2b:bc:8c:ca:ed:f7:94:
8e:27:c2:6c:92:8b:e1:07:ea:6e:60:44:c0:af:27:40:44:5c:
d6:b2:f8:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:02:33 2025 by rpki-client