Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/NmzGp47Tw3qWzb1hd4URwzgMCk8.roa
File: NmzGp47Tw3qWzb1hd4URwzgMCk8.roa (raw, json)
Hash identifier: TnwTqDKSk3T5Y1MdVvVBQkZAe9sTm0tmJKvyZ3bTTVM=
Subject key identifier: 36:6C:C6:A7:8E:D3:C3:7A:96:CD:BD:61:77:85:11:C3:38:0C:0A:4F
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 01A0AC029CAB5C9BE44038152037A1C2CB80
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/NmzGp47Tw3qWzb1hd4URwzgMCk8.roa
Signing time: Wed 16 Sep 2026 20:57:27 +0000
ROA not before: Wed 16 Sep 2026 20:57:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218713
IP address blocks: 2a14:c380:20::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ac:02:9c:ab:5c:9b:e4:40:38:15:20:37:a1:c2:cb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Sep 16 20:57:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=366cc6a78ed3c37a96cdbd61778511c3380c0a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b2:c6:27:1c:36:e2:46:9e:67:38:09:7f:c5:
ab:2c:19:d5:56:fb:b9:6f:a8:d9:d9:fc:50:f4:5f:
8a:3c:00:a0:8b:67:3c:7c:df:03:6c:ce:74:b9:74:
72:26:fd:2e:52:3f:c1:e6:99:a3:fa:04:c7:21:62:
41:84:10:87:b8:83:19:6c:e9:fc:8e:78:29:82:36:
53:53:8b:08:43:29:27:34:84:42:28:15:e7:df:58:
57:92:62:8b:37:fb:64:05:d5:51:9f:4d:41:4a:9e:
df:55:b2:95:be:e1:6c:4a:de:42:53:9f:ef:06:0c:
65:3e:44:d9:a8:50:41:b2:f7:bb:61:64:90:c1:6f:
82:80:94:70:a2:15:f4:4c:f3:fd:0e:5a:66:dd:d9:
c6:00:af:00:fb:19:8e:1a:a7:82:7c:c9:66:22:3a:
f1:9d:77:a1:dc:94:20:d5:57:b7:3d:d2:89:c6:e6:
dd:93:88:80:68:cf:80:70:d0:8e:d7:b7:99:65:3e:
21:28:f3:d1:79:6d:ea:60:ed:bd:11:ca:ac:1e:f6:
90:df:97:3a:ba:5f:7e:2e:e4:2c:a8:04:2a:81:24:
61:45:76:8d:63:68:fc:f6:a8:a8:b5:8f:87:26:4b:
bf:63:4f:cb:55:3e:78:9b:0b:e1:b9:28:25:18:1d:
03:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:6C:C6:A7:8E:D3:C3:7A:96:CD:BD:61:77:85:11:C3:38:0C:0A:4F
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/NmzGp47Tw3qWzb1hd4URwzgMCk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:20::/48
Signature Algorithm: sha256WithRSAEncryption
18:60:85:e5:44:50:38:61:3f:28:f0:3a:8e:64:74:10:5b:3a:
cf:d5:3b:f5:19:eb:fb:3d:a2:e3:7f:ff:f3:de:59:fb:b4:4c:
c2:d7:79:dd:21:0d:99:2c:8d:73:c4:b4:43:da:8d:5a:97:e0:
c9:0c:51:73:0b:89:69:4a:b8:37:2d:04:8b:7a:49:e7:31:c5:
b0:89:22:d0:ad:51:9b:b5:07:48:72:39:89:b2:19:ef:84:b6:
d6:a7:b7:00:aa:0c:96:34:89:e3:55:a3:fb:2f:0a:43:28:18:
ac:d2:03:37:81:d5:fc:18:25:7b:89:b5:51:61:a6:9f:5f:ef:
99:8b:32:99:51:de:76:92:30:bc:c4:12:be:67:18:bb:3e:38:
bc:c8:cb:00:03:54:f9:49:76:12:de:e8:66:98:f7:71:73:4e:
0c:cc:f3:32:fe:4c:0e:97:93:c9:f9:01:12:96:38:56:e1:f6:
79:49:01:1d:c3:a1:06:6d:3e:0a:ed:44:89:0c:ff:1a:b2:5f:
8d:3c:5d:64:df:da:64:68:aa:5e:c3:d2:9c:bb:f9:0e:80:19:
b6:ce:72:9f:dc:76:45:5d:ee:48:bd:7e:42:80:30:cb:20:67:
6f:cc:bb:4a:5a:21:92:02:1e:ac:57:2c:a8:48:6b:23:25:63:
c3:d8:b8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:12:30 2026 by rpki-client