Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/PW3LRm9kh5GCkhoUKlhVgXDZSGo.roa
File: PW3LRm9kh5GCkhoUKlhVgXDZSGo.roa (raw, json)
Hash identifier: OdYelHEogMnqnZYvvlTnImfTuhuCdsU3h0MyTVsNxKQ=
Subject key identifier: 3D:6D:CB:46:6F:64:87:91:82:92:1A:14:2A:58:55:81:70:D9:48:6A
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 019EA21ADE5A59A78F26F4D666D19DD6324E
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/PW3LRm9kh5GCkhoUKlhVgXDZSGo.roa
Signing time: Sun 07 Jun 2026 12:42:10 +0000
ROA not before: Sun 07 Jun 2026 12:42:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205104
IP address blocks: 2a14:c380:2000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a2:1a:de:5a:59:a7:8f:26:f4:d6:66:d1:9d:d6:32:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Jun 7 12:42:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d6dcb466f64879182921a142a58558170d9486a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fc:24:83:50:48:25:4e:20:33:c5:a6:b0:8a:
f8:19:26:1e:5d:9f:58:28:66:5c:78:60:03:5f:d4:
8a:73:a7:da:2c:b0:b4:c5:ba:3c:f1:e5:39:c6:d8:
e3:22:ef:45:1d:c2:c6:50:ea:ce:3d:66:d6:1e:26:
8a:51:ca:b5:68:f5:92:59:f4:ee:c3:54:53:d2:7e:
14:02:c5:e7:f7:c2:24:c5:9e:c2:8e:95:80:d2:09:
71:6b:03:1d:40:c0:8a:02:7b:73:65:22:8e:da:f0:
22:eb:ad:99:c0:0a:99:55:f6:0c:62:a8:ae:4d:ee:
f2:7e:40:cc:06:ee:0d:d4:5c:11:8b:c4:3a:13:f2:
16:70:19:ef:8b:ca:19:bc:3f:74:cf:0d:73:49:83:
39:1e:17:d6:c5:92:6e:36:76:a1:84:ff:3c:2f:36:
ac:1b:17:95:7b:21:1e:cd:46:71:6f:8b:63:84:e1:
70:c9:c3:e9:6b:1e:74:e9:28:98:1b:44:49:c1:51:
fa:23:87:f4:3e:bd:e9:72:03:2c:72:47:f2:4c:a9:
d6:bc:32:40:79:c8:60:a6:98:19:95:55:10:aa:d1:
7c:ba:5a:51:0b:00:f7:7d:5e:e8:7d:79:00:f1:50:
85:6d:28:ea:55:51:b1:35:c1:0b:a5:13:d5:13:03:
59:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:6D:CB:46:6F:64:87:91:82:92:1A:14:2A:58:55:81:70:D9:48:6A
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/PW3LRm9kh5GCkhoUKlhVgXDZSGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:2000::/40
Signature Algorithm: sha256WithRSAEncryption
98:06:98:b2:ad:de:9c:f3:8b:5d:33:48:bc:7f:62:c9:32:19:
a1:d7:9d:79:1d:e3:d1:f1:4c:1f:a2:36:ca:cd:f1:80:e1:f4:
64:0d:20:1a:87:8a:1e:87:66:0f:be:10:6d:05:9c:2f:2c:72:
c4:10:74:4d:82:fd:b3:4e:16:e1:8a:a5:f9:2d:f8:d0:47:53:
2d:2d:71:cc:b9:8a:c8:9d:72:7d:5b:4c:ac:1a:6c:b2:e9:59:
ac:36:6f:68:d0:e6:2c:73:26:42:2b:47:b7:68:cc:03:7b:0a:
41:6a:45:30:52:3f:cb:ad:98:13:cb:11:ca:88:4d:5c:8e:86:
6c:b8:fb:27:88:51:7e:33:6a:8c:d0:65:df:df:a2:15:85:8a:
48:5e:5c:9c:9c:86:59:f2:a9:df:93:5f:de:09:f8:c0:7c:a0:
ca:42:31:f9:c0:1a:c2:36:63:77:05:b7:5b:5e:53:6a:03:06:
28:36:f8:e2:9c:a6:41:95:49:70:1f:08:ac:6b:bc:ce:9c:ed:
81:7b:a6:61:b8:53:59:07:d5:38:12:5d:b6:0c:0a:cd:a3:0d:
66:8c:1a:4c:7a:70:f4:a5:1c:4c:0c:11:cb:f9:db:63:26:70:
ac:56:87:ce:23:54:1e:9b:7f:05:bd:0f:ba:6e:88:6b:1a:a7:
94:18:d2:8b
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZ6iGt5aWaePJvTWZtGd1jJOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YjNkZTVmOWFkYjUwZmU0MWY2ZGM3OGZmZDBhMmM5MDg2
ZDI1MTIwHhcNMjYwNjA3MTI0MjEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDZkY2I0NjZmNjQ4NzkxODI5MjFhMTQyYTU4NTU4MTcwZDk0ODZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/wkg1BIJU4gM8WmsIr4GSYeXZ9Y
KGZceGADX9SKc6faLLC0xbo88eU5xtjjIu9FHcLGUOrOPWbWHiaKUcq1aPWSWfTu
w1RT0n4UAsXn98IkxZ7CjpWA0glxawMdQMCKAntzZSKO2vAi662ZwAqZVfYMYqiu
Te7yfkDMBu4N1FwRi8Q6E/IWcBnvi8oZvD90zw1zSYM5HhfWxZJuNnahhP88Lzas
GxeVeyEezUZxb4tjhOFwycPpax506SiYG0RJwVH6I4f0Pr3pcgMsckfyTKnWvDJA
echgppgZlVUQqtF8ulpRCwD3fV7ofXkA8VCFbSjqVVGxNcELpRPVEwNZGwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFD1ty0ZvZIeRgpIaFCpYVYFw2UhqMB8GA1UdIwQY
MBaAFFiz3l+a21D+QfbceP/QoskIbSUSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUt
NTMyMWQ2OWQ5NzlkLzEvUFczTFJtOWtoNUdDa2hvVUtsaFZnWERaU0dvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUtNTMyMWQ2OWQ5Nzlk
LzEvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhTDgCAw
DQYJKoZIhvcNAQELBQADggEBAJgGmLKt3pzzi10zSLx/YskyGaHXnXkd49HxTB+i
NsrN8YDh9GQNIBqHih6HZg++EG0FnC8scsQQdE2C/bNOFuGKpfkt+NBHUy0tccy5
isidcn1bTKwabLLpWaw2b2jQ5ixzJkIrR7dozAN7CkFqRTBSP8utmBPLEcqITVyO
hmy4+yeIUX4zaozQZd/fohWFikheXJychlnyqd+TX94J+MB8oMpCMfnAGsI2Y3cF
t1teU2oDBig2+OKcpkGVSXAfCKxrvM6c7YF7pmG4U1kH1TgSXbYMCs2jDWaMGkx6
cPSlHEwMEcv522MmcKxWh84jVB6bfwW9D7puiGsap5QY0os=
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:17:21 2026 by rpki-client