Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/Ri_OAp1_RMf5V9TSKwgVpus8dBY.roa
File: Ri_OAp1_RMf5V9TSKwgVpus8dBY.roa (raw, json)
Hash identifier: OncSYXTq9UOvReLN+EJa0eVXm4wD6sldbGD4cqHbzcA=
Subject key identifier: 46:2F:CE:02:9D:7F:44:C7:F9:57:D4:D2:2B:08:15:A6:EB:3C:74:16
Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Certificate serial: 019A062ED1F30EAC6AE61C66A09DDADF9AC3
Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/Ri_OAp1_RMf5V9TSKwgVpus8dBY.roa
Signing time: Tue 21 Oct 2025 09:52:03 +0000
ROA not before: Tue 21 Oct 2025 09:52:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211507
IP address blocks: 2a14:c380:50::/44 maxlen: 44
2a14:c380:60::/44 maxlen: 44
2a14:c380:70::/44 maxlen: 44
2a14:c380:80::/44 maxlen: 44
2a14:c380:90::/44 maxlen: 44
2a14:c380:130::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:06:2e:d1:f3:0e:ac:6a:e6:1c:66:a0:9d:da:df:9a:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512
Validity
Not Before: Oct 21 09:52:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=462fce029d7f44c7f957d4d22b0815a6eb3c7416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:95:29:af:fb:03:6e:80:20:60:0c:73:8c:8b:
d8:1f:38:7e:71:53:c6:9e:b9:ec:65:c5:11:0d:b9:
ba:d7:0d:ca:59:18:44:18:4a:57:0e:e5:df:ca:ae:
8f:3d:3c:b3:12:08:59:fb:e4:5f:2f:05:4f:29:d5:
83:5e:4a:37:4c:3d:49:a0:8b:2d:ad:06:18:43:96:
07:ea:05:c0:e6:7d:14:d2:ef:38:e4:77:77:a3:36:
cb:77:e8:52:7a:dc:f9:41:65:a6:ee:f4:1d:b3:cb:
93:17:86:b0:24:86:93:74:66:b3:e1:bf:b5:5b:84:
5f:b9:df:a2:88:46:30:b6:e0:e8:34:ef:2d:b0:13:
06:2c:fb:e8:73:93:21:ff:e1:76:45:f5:60:4b:41:
f7:7a:22:8b:49:0b:66:0a:28:e8:0d:a6:6a:66:0b:
b9:fc:e1:e3:34:8f:a6:ff:12:0d:84:32:53:9e:e5:
31:70:d8:f1:0a:7a:bf:bb:ba:9e:70:4f:d5:8b:fb:
78:c1:ec:0c:56:c2:58:72:a2:42:62:b4:28:81:41:
60:04:5e:d7:7b:d1:a1:82:b9:b7:3a:cd:5b:77:55:
9e:25:fc:ad:34:41:8b:7d:da:58:ef:e0:fd:ff:e4:
46:94:70:a4:e5:c9:3e:51:f4:07:9d:5c:d2:7d:38:
b4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:2F:CE:02:9D:7F:44:C7:F9:57:D4:D2:2B:08:15:A6:EB:3C:74:16
X509v3 Authority Key Identifier:
keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/Ri_OAp1_RMf5V9TSKwgVpus8dBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c380:50::-2a14:c380:9f:ffff:ffff:ffff:ffff:ffff
2a14:c380:130::/44
Signature Algorithm: sha256WithRSAEncryption
39:01:15:64:ad:87:fa:4d:de:2f:b3:1d:2b:54:4f:7e:98:cd:
0a:6d:7f:e5:da:cf:a6:79:59:8a:9b:c8:61:5b:c9:2e:be:bf:
ee:06:05:54:b4:3b:8a:b1:a5:2a:ef:ba:7d:27:66:47:60:ec:
a2:c7:9d:b3:ea:7a:e7:8a:4e:16:5b:1a:e5:cc:2a:f4:85:b1:
75:34:49:b3:5d:4c:6a:77:5b:02:ce:7a:12:aa:ac:0d:b6:00:
77:a8:4e:59:cf:d5:64:20:f6:c7:83:a0:9f:4a:3d:57:ad:56:
6c:f0:3f:91:4b:c1:bd:cd:20:34:6d:71:25:61:60:67:6a:24:
f4:a7:c6:d3:a0:c4:5f:ab:1b:2f:7f:06:70:9c:79:bd:d6:fc:
8d:0f:13:06:c4:53:f9:78:e5:4a:5c:04:52:5b:b5:4f:04:1c:
1d:aa:74:d1:78:b0:c7:2d:51:d9:2b:65:b4:5d:52:24:c5:1a:
73:f9:a0:97:69:f2:de:c8:20:1d:45:6a:b1:60:86:56:39:6c:
90:5c:e9:c6:b3:fb:07:0c:f2:22:cf:84:4f:04:17:9e:cf:7b:
8c:59:89:e3:02:27:e4:ff:83:3a:29:69:60:c5:54:d7:72:35:
97:37:7b:2f:0b:d0:78:9a:fa:f4:ec:4d:57:30:98:75:e3:9f:
42:69:e9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:12:00 2025 by rpki-client