Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/RCLvcIGjgO70Jfi-0BWuSC4yf0k.roa
File: RCLvcIGjgO70Jfi-0BWuSC4yf0k.roa (raw, json)
Hash identifier: /IeSOvPyRyRCesuR8ntEkpwuNNCwCoismY/TjdTiPsc=
Subject key identifier: 44:22:EF:70:81:A3:80:EE:F4:25:F8:BE:D0:15:AE:48:2E:32:7F:49
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 019C7BB198AC2977B1405B29C4C6CF2658D7
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/RCLvcIGjgO70Jfi-0BWuSC4yf0k.roa
Signing time: Fri 20 Feb 2026 15:36:02 +0000
ROA not before: Fri 20 Feb 2026 15:36:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211507
IP address blocks: 2a14:c380:50::/44 maxlen: 44
2a14:c380:60::/44 maxlen: 44
2a14:c380:70::/44 maxlen: 44
2a14:c380:80::/44 maxlen: 44
2a14:c380:90::/44 maxlen: 44
2a14:c380:130::/44 maxlen: 44
2a14:c380:c70::/44 maxlen: 44
2a14:c380:d50::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7b:b1:98:ac:29:77:b1:40:5b:29:c4:c6:cf:26:58:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Feb 20 15:36:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4422ef7081a380eef425f8bed015ae482e327f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:56:1d:61:b5:86:8f:87:d4:f1:70:f0:90:2d:
db:c8:e5:fe:16:ad:8a:75:a0:4e:63:3c:bc:21:04:
48:c0:78:92:f8:c7:88:8b:0d:88:a8:25:23:03:ff:
bd:02:15:0d:fd:f1:27:cb:40:34:a9:a0:f8:c8:1d:
b3:cc:83:b7:1a:b5:f4:12:d1:1c:fa:02:cd:e1:22:
27:61:51:56:dd:bc:36:6a:f4:db:f2:f4:c7:60:1d:
a0:52:1d:d3:85:52:b7:38:a7:69:36:d7:80:c4:99:
fc:2b:ca:d7:35:dc:de:e4:cf:50:1a:ed:25:eb:3c:
c5:53:9a:dd:cd:9e:57:d8:33:89:1d:d2:cf:07:81:
1d:14:4b:8d:3b:81:01:0d:da:e3:66:17:d6:9c:5b:
76:ea:b1:70:cd:4c:57:76:0b:d4:10:9a:ba:ed:82:
b3:e4:41:e8:48:6e:71:23:aa:24:df:14:da:63:40:
02:03:55:f5:4e:6d:0f:32:ff:5e:de:36:1c:3c:8a:
2c:7d:b4:71:d5:91:d1:56:54:9b:9c:21:e9:d7:19:
6a:2b:db:f5:44:ea:e0:cd:6f:81:5e:ee:c9:50:ed:
ae:e3:65:1c:51:bb:1a:89:55:36:9e:1c:71:48:4e:
ae:3d:7a:32:02:98:eb:65:e8:a7:88:67:ce:e2:82:
92:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:22:EF:70:81:A3:80:EE:F4:25:F8:BE:D0:15:AE:48:2E:32:7F:49
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/RCLvcIGjgO70Jfi-0BWuSC4yf0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:50::-2a14:c380:9f:ffff:ffff:ffff:ffff:ffff
2a14:c380:130::/44
2a14:c380:c70::/44
2a14:c380:d50::/44
Signature Algorithm: sha256WithRSAEncryption
81:bf:75:ab:6e:6d:92:52:c2:40:a3:c3:cf:a4:fd:10:c5:07:
1c:8b:d4:c2:5d:28:1d:05:7f:ae:5d:42:f1:82:3b:58:9f:9f:
5d:40:ae:df:75:f3:4d:6c:62:a0:3e:70:b0:72:8b:c9:82:d7:
90:8d:9b:b0:6f:27:1b:34:db:ae:dd:07:b9:05:02:95:bc:21:
35:21:ae:12:f2:6e:87:4c:89:3b:f2:b0:30:7f:fc:ba:d8:1a:
54:92:e4:28:8f:66:a0:ec:e1:e0:19:a5:0b:7b:a0:49:d9:d9:
86:64:e5:d8:34:b4:da:07:13:6a:22:54:47:ca:8d:d5:f3:20:
3d:96:2c:64:9a:5f:7a:c3:b0:f3:ac:d9:3a:97:84:43:7c:83:
fb:7f:55:67:8e:87:64:63:7c:30:7a:0f:80:2d:12:85:82:c8:
de:96:21:f7:4f:7e:e1:30:88:19:a6:9d:00:36:40:cf:47:dd:
15:fc:6c:ba:91:82:bf:f4:ed:55:7e:0c:22:4b:de:2e:15:5b:
7b:0d:4c:4a:4c:e0:f7:36:78:19:ca:6b:ff:aa:47:71:78:f6:
0b:65:9f:35:8f:ac:24:bc:6b:d8:d5:a5:a2:81:34:b9:01:72:
b4:a4:f5:04:f6:81:d0:00:0f:07:a7:6d:32:cf:d8:40:12:78:
6d:48:32:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:38:11 2026 by rpki-client